Tech Holding

Platform Engineer

• Improve Active Directory and DNS resilience, including replication topology and health, FSMO roles, DFS-R, NTDS, AD-integrated DNS, and cloud-instance domain controllers
• Support migration from NTLM to Kerberos without an outage during the transition
• Work with SPNs, constrained delegation, encryption types, managed service accounts, group managed service accounts, and reverse DNS
• Support identity integration across Windows and non-Windows environments, including LDAP, desktop and cloud single sign-on, and brokered application identity
• Support and improve golden image and patch pipelines, including automated image builds, CI scheduling, promotion, deprecation, deregistration, and CVE-driven rebuilds
• Improve Windows observability through infrastructure agents, service and event-channel collection, script-derived metrics, health monitoring, replication status, and log forwarding
• Develop and maintain PowerShell automation for Windows platform operations and resiliency
• Support Infrastructure as Code and configuration management using Chef, Ansible, Systems Manager, guardrail policies, pipeline validation, and OpenTofu
• Support multi-account rebuilds, guardrail policies, and module compliance
• Strengthen security and data-protection controls, including block-storage encryption, key management, web-tier protection, and instance metadata hardening
• Improve PKI and certificate-services resilience
• Support disaster recovery design, cloud platforms, and file services, including RTO/RPO planning, recovery strategies, failover testing, and divisional cloud accounts
• Support file-services resilience and legacy distributed-file-system decommissioning targeting zero RPO and sub-five-minute RTO
• Define, test, and document Active Directory backup, restore, and forest recovery
• Define the NTLM decommission path and audit remaining NTLM use
• Establish certificate inventory and expiry alerting
• Address or document the future state of the directory privileged-access model
• Exercise directory-specific recovery testing
• Rationalize the Windows image catalogue and multi-tenant configuration
• Confirm whether Group Policy is unused or unmanaged

Senior Windows Platform Engineer

DevOps Engineer

• Own and evolve the GCP landing zone across networking, IAM, security, and governance
• Maintain and extend the infrastructure-as-code estate and deployment automation
• Serve as the architectural authority for cloud and system design
• Set standards, review designs, and guide teams toward established standards
• Support engineering teams onboarding onto the platform and maintain a smooth self-service path
• Maintain platform cost efficiency, security posture, reliability, and alignment between documentation and running infrastructure
• Advocate for DevOps practices across the organization

Senior Windows Platform Engineer

Senior Cloud DevOps Engineer