Cloud Windows Infrastructure Engineer

Job not on LinkedIn

🔥 7 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Second Nature

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2015

🧘 Wellness

👥 B2C

Wellness • B2C

Second Nature is a mobile app and behaviour-change program that helps people lose weight by using behavioural science to retrain habits and make healthy choices automatic. The product frames weight loss as sustainable lifestyle change rather than short-term dieting, using coaching, habit formation techniques, and app-based support to help users embed healthier behaviours for the long term. Tagline: “Make losing weight feel Second Nature.

📋 Description

• Lead resolution of complex Windows Server incidents across multi-client, AWS-hosted environments — from triage to root cause to remediation. • Administer and harden Windows Server 2019/2022/2025: Active Directory (forest/domain design, replication, FSMO, GPOs, trusts), DNS, DHCP, IIS, WSUS, AD CS, file & print services. • Operate hybrid identity: AD on-prem ↔ AWS Managed Microsoft AD, federation with Entra ID (Azure AD) / AD FS, SAML / OIDC / OAuth, Kerberos, MFA. • Author and maintain PowerShell automation: bulk administration, scheduled tasks, configuration drift correction, reporting, and DSC where appropriate. • Operate the AWS hosting layer for Windows workloads: EC2, EBS, VPC, IAM, Route 53, CloudWatch, Systems Manager (Patch Manager, Session Manager, Run Command), Backup, Directory Service. • Manage IIS in depth: sites, application pools, bindings, ARR / URL Rewrite, SSL/TLS, failed request tracing, and performance tuning. • Drive observability of the Windows estate: event log strategy, performance baselines, CloudWatch metrics & alarms, Grafana dashboards. • Author runbooks, SOPs, and knowledge base articles to codify operational standards. • Participate in ITIL incident, problem, and change management; act as senior on-call escalation.

🎯 Requirements

• 7+ years operating Windows Server in production, with deep hands-on experience on Windows Server 2019 and above. • Active Directory at depth: forest/domain design, replication, FSMO roles, trusts, sites & services, schema, tombstone & recovery. • Group Policy at scale: design, troubleshooting (RSoP, gpresult), security baselines, WMI filtering. • IIS at depth: site & app pool configuration, ARR, URL Rewrite, SSL/TLS, failed request tracing, performance tuning. • DNS, DHCP, WSUS, and Active Directory Certificate Services (AD CS) — real operational experience. • Advanced PowerShell: scripting, modules, remoting, error handling, automation patterns, DSC familiarity. • Windows patching at scale: planning, deployment, rollback, and troubleshooting in regulated environments. • Windows performance troubleshooting: PerfMon, ETW, memory dump analysis, IIS request diagnostics. • Hybrid identity: AD on-prem ↔ cloud, Entra ID (Azure AD) Connect / federation, AD FS. • SAML 2.0, OIDC, OAuth 2.0, Kerberos, LDAP, MFA — practical implementation and troubleshooting. • Certificate management and PKI in enterprise Windows environments. • Day-to-day comfort operating Windows workloads in AWS: EC2, EBS, VPC, IAM, Route 53, CloudWatch. • AWS Systems Manager for Windows fleet management: Patch Manager, Session Manager, Run Command, State Manager, Parameter Store. • AWS Directory Service / Managed Microsoft AD / AD Connector. • Strong ITIL grounding: incident, problem, change, and service lifecycle management. • Prior experience in an MSP or shared-services environment — multiple client estates managed under SLA. • Advanced / fluent professional English, written and spoken. • Reliable, distraction-free home office with stable broadband (100 Mbps+ recommended), reliable power, and a professional video setup. • Ability to work New York-aligned hours consistently, with the same presence and responsiveness as an office-based colleague.