Associate Principal Engineer - InfraOps Active Directory

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale — across all devices and digital mediums, and our people exist everywhere in the world (18000+ experts across 36 countries, to be exact). Our work culture is dynamic and non-hierarchical. We are looking for great new colleagues. That is where you come in!

This role focuses on reliable day-to-day operations (provisioning, patching, monitoring, backup/restore, security remediation, and incident response) and will also contribute to smaller initiatives and lifecycle improvements in partnership with other infrastructure and security teams.

• Administer Windows Server and (where applicable) Linux server environments, including build, configuration, patching, upgrades, and troubleshooting.
• Provision, monitor, and manage Azure infrastructure and services used to host server workloads, with emphasis on operational stability, availability, and cost-consciousness.
• Common Azure components include: Virtual Machines, managed disks, storage accounts/Azure Files, virtual networks (VNets/subnets), NSGs, load balancers, VPN/ExpressRoute connectivity, Azure Backup, Azure Site Recovery, and Azure Monitor/Log Analytics.
• Support Azure PaaS components that underpin server workloads (e.g., managed databases and platform services) as applicable to the environment.
• Operate and support hybrid connectivity and dependencies (e.g., identity, DNS, networking, and legacy/on-prem virtualization).
• Maintain working knowledge of on-prem virtualization (VMware and/or Hyper-V) for a smaller portion of the environment.
• Serve as an escalation point for complex server and infrastructure incidents; perform root-cause analysis and drive corrective/preventive actions.
• Identify, prioritize, and remediate security vulnerabilities for Windows/Linux servers and associated infrastructure in collaboration with Security and site teams. 
• Document risk, remediation approach, and dates/ownership for remediation when actions depend on external entities.
• Maintain and improve monitoring, backup/restore processes, and performance tuning; validate recoverability through periodic restore testing.
• Automate routine tasks and operational workflows using PowerShell and command-line tooling; contribute to runbooks and operational documentation.
•  Follow ITIL-aligned incident, problem, change, and request processes; keep tickets, documentation, and diagrams current.
• Coordinate with internal infrastructure teams (network, security, application, end-user services) and vendors to deliver deployments, upgrades, and troubleshooting.
• Support and/or run smaller projects and lifecycle initiatives such as site changes, cloud provisioning, new application deployments or upgrades, and standardization of server builds/configurations.

Professional Certifications (Nice to Have)

• Microsoft Azure Administrator Associate (AZ-104) or equivalent hands-on Azure administration experience.
• Microsoft Windows Server Hybrid Administrator Associate (AZ-800/AZ-801) or equivalent Windows Server experience.
• Microsoft Azure Security Engineer (AZ-500) or equivalent security/vulnerability management experience.
• ITIL Foundation (or equivalent service management experience).
• VMware Certified Professional (VCP) helpful for hybrid/on-prem support, but not required.

Must have Skills: Network (Strong), Microsoft Active Directory, Security Logging & Analytics, VMware, Azure & Windows Administrator.