Job Purpose: We are seeking an experienced Senior Windows Server Engineer to design, deploy, secure, and maintain our Microsoft Windows Server estate. The successful candidate will act as a senior technical authority across Windows platform services, driving stability, security hardening, and continuous improvement across the environment. Working knowledge of, or prior exposure to, VMware virtualisation is expected; deep hands-on VMware ownership is not required, and the candidate will be supported and trained to build this skillset over time.

This is a hands-on engineering role with significant scope to shape infrastructure standards, lead remediation activity, and mentor junior team members.

Key Responsibilities: Microsoft Windows Server / Wintel • Build, configure, and manage Windows Server (2016/2019/2022/2025) across physical and virtual platforms.

- Administer Active Directory: domain services, forests/domains, sites, trusts, replication, FSMO roles, and schema.
- Manage authentication and identity services including Kerberos, LDAP/LDAPS, NTLM hardening, and certificate-based authentication.
- Administer core network services: DNS, DHCP, and IIS (including bindings, application pools, and keka site hardening).
- Design, deploy, and maintain Group Policy Objects (GPOs) for configuration, security baselines, and compliance.
- Manage file/print services, DFS, failover clustering, and Windows-based application infrastructure.
- PKI / Active Directory Certificate Services (AD CS) administration and certificate lifecycle management.

Modern

Workspace / Cloud Identity • Administer Microsoft Entra ID (Azure AD), including hybrid identity, Entra Connect sync, and single sign-on (SSO).
- Design, implement, and maintain Conditional Access policies for secure, risk-based access control.
- Manage Microsoft Intune for device management (MDM/MAM), enrolment, compliance, and configuration profiles.
- Deliver and support the Modern Workspace estate: application deployment, security baselines, and endpoint hardening.
- Implement Multi-Factor Authentication (MFA), password less, and identity protection controls.

Modern

Workspace / Cloud Identity • Administer Microsoft Entra ID (Azure AD), including hybrid identity, Entra Connect sync, and single sign-on (SSO).
- Design, implement, and maintain Conditional Access policies for secure, risk-based access control.
- Manage Microsoft Intune for device management (MDM/MAM), enrolment, compliance, and configuration profiles.
- Deliver and support the Modern Workspace estate: application deployment, security baselines, and endpoint hardening.




- Implement Multi-Factor Authentication (MFA), passwordless, and identity protection controls. Security, Patching & Vulnerability Management • Own and deliver patching cycles for VMware and Windows estates (e.g. WSUS / SCCM / MECM / Intune / third-party tooling).
- Perform vulnerability management: interpret scan output (e.g. Tenable/Nessus, Qualys, Rapid7), prioritise, and remediate.
- Implement security hardening aligned to CIS Benchmarks, Microsoft Security Baselines, and DISA STIGs.
- Configure and manage cipher suites, TLS/SSL protocols, and cryptographic settings to remove weak/deprecated protocols. keka • Manage certificates, encryption standards, and secure communication across services.
- Support audit, compliance, and penetration-test remediation activities. VMware / Virtualisation • Hands-on VMware experience is not mandatory — candidates with strong Windows Server expertise and working knowledge of, or aptitude for, VMware will be considered.
- Design, deploy, configure, and manage VMware ESXi hosts and vCenter environments.
- Manage clusters, HA, DRS, vMotion, Storage vMotion, and resource allocation.
- Perform host lifecycle management including builds, upgrades, and firmware/driver compliance (vSphere Lifecycle Manager).
- Manage virtual networking (vSwitches, distributed switches, VLANs) and datastore/storage configuration.
- Capacity planning, performance monitoring, troubleshooting, and optimisation of the virtual estate.
- Maintain backup, replication, and disaster recovery capability for virtual workloads. Qualification, Skills and Experience:
- 8+ years of relevant experience in Windows Server administration, with working knowledge of, or exposure to, VMware virtualisation • Bachelor’s or master’s degree in computer science, Information Technology Engineering.
- Strong experience in Windows Server administration, including Active Directory, DNS, DHCP, IIS, and Group Policy management • Demonstrable experience in managing enterprise-scale patching cycles and vulnerability remediation across infrastructure environments.
- Practical experience with cipher suite configuration, TLS/SSL hardening,



and cryptographic best practices • Experience implementing and maintaining security baselines and hardening standards, including CIS Benchmarks, Microsoft Security Baselines, and DISA STIGs.
- Hands-on experience with PowerShell scripting for infrastructure automation, administration, and operational efficiency • Familiarity with Microsoft Entra ID (Azure AD), Conditional Access, Microsoft Intune, and Modern Workspace administration • Understanding of networking fundamentals, including TCP/IP, VLANs, routing, firewalls, and load balancers.
- Exposure to regulated and compliance-driven environments, including ISO 27001, PCI-DSS, GDPR, and government or defence environments • Familiarity with infrastructure documentation, operational procedures, and change management processes.
- Good understanding of infrastructure capacity planning, performance monitoring, and continuous keka improvement practice • Good understanding of incident management, problem management, change management, and IT service management processes • Excellent documentation and communication skills, with the ability to clearly document technical solutions, operational procedures, and infrastructure standards • Strong troubleshooting and problem-solving skills across Windows, VMware, networking, storage, and other infrastructure layer • Good understanding of backup and disaster recovery technologies, such as Veeam, Commvault, and Zerto.
- Familiarity with infrastructure monitoring and observability tools, such as SolarWinds, PRTG, VMware Aria Operations, and SCOM • Familiarity with cloud platforms, including Microsoft Azure, AWS, and VMware Cloud • Positive understanding of storage and SAN technologies, including Fibre Channel, iSCSI, NFS, and platforms such as Pure Storage, NetApp, and Dell EMC.
- Good understanding of infrastructure automation and Infrastructure as Code (IaC) using PowerCLI, Ansible, and Terraform.
- Good understanding of virtualization technologies, including VMware vSphere/ESXi and Citrix XenServer administration and management.
- VMware Certified Professional – Data Center Virtualization (VCP-DCV) certification is desirable. Why should you join Dataction? Fairness, meritocracy, empowerment, and opportunity are pillars of our work culture. In addition to a competitive salary, you can look forward to:
- Great work-life balance through hybrid work arrangement.
- Company funded skill enhancement and training.
- Exciting reward and recognition programme.
- Opportunity to bond with colleagues through exciting employee engagement initiatives.
- Great on the job learning opportunity through involvement in new product/ ideation teams

📌 Senior Infrastructure Engineer (Pune)
🏢 Keka
📍 Pune