Senior Windows Engineer

HireRight•Nashville, TN

10d•Hybrid

About The Position

We are seeking a highly experienced Senior Windows Engineer to architect, support, and optimize our enterprise Windows Server and identity infrastructure across both on‑premise and cloud environments. This hybrid role, based in Nashville, TN, is ideal for a seasoned engineer with deep expertise in Windows Server, Active Directory, Kerberos, DNS, and DFS, along with modern cloud identity and compute platforms.

Requirements

7+ years of hands-on experience engineering and supporting enterprise Windows Server environments.
Deep expertise with Active Directory, Kerberos, DNS, DFS, and Group Policy.
Experience supporting Windows workloads across on‑premise and cloud environments.
Strong PowerShell scripting and automation skills.
Solid understanding of networking fundamentals, authentication flows, and security best practices.
Proven ability to troubleshoot complex, multi‑layered infrastructure issues.

Nice To Haves

Microsoft certifications (MCSA, MCSE, Azure Administrator/Engineer).
Experience with Azure AD Connect, ADFS, or identity federation.
Familiarity with virtualization platforms (VMware, Hyper‑V, Nutanix).
Experience with configuration management or infrastructure‑as‑code tools.

Responsibilities

Design, deploy, and maintain Windows Server environments (2016/2019/2022) across physical, virtual, and cloud platforms.
Lead OS lifecycle management, patching, hardening, and performance tuning.
Manage Group Policy, server roles, clustering, and high availability configurations.
Architect, maintain, and troubleshoot Active Directory forests, domains, trusts, and replication.
Implement and support Kerberos authentication, delegation, and identity security best practices.
Integrate AD with cloud identity platforms such as Azure AD and hybrid identity services.
Engineer and support DNS, DHCP, and DFS namespaces and replication.
Ensure resilient, secure, and scalable directory and name resolution services across the enterprise.
Perform root cause analysis for complex authentication, replication, and name resolution issues.
Support Windows workloads in Azure, AWS, or other cloud platforms.
Implement hybrid identity, cloud based file services, and cloud hosted Windows Server solutions.
Collaborate with cloud teams to modernize legacy workloads and migrate services.
Automate provisioning, configuration, and compliance using PowerShell, Desired State Configuration, or similar tools.
Implement security baselines, auditing, and compliance frameworks.
Monitor system health, performance, and capacity, ensuring high availability and reliability.