Wintel Admin L3

Job Description L3 Systems Engineer (Microsoft Stack)

Role Title

L3 Systems Engineer Active Directory | Microsoft 365 | Azure | PowerShell

Role Summary

We are seeking a Level 3 (L3) Systems Engineer with strong expertise in Active Directory, Microsoft 365, Azure Entra ID (Azure AD), Azure infrastructure, and PowerShell automation. This role acts as the final escalation point (L3) for complex technical issues and is responsible for architecture, troubleshooting, security hardening, and automation across enterprise Windows and cloud environments.

Key Responsibilities

Active Directory (On-Prem & Hybrid)

• Design, manage, and troubleshoot AD forests, domains, trusts, and sites
• Resolve replication, FSMO, SYSVOL/DFS-R, Kerberos, NTLM, and DNS issues
• Implement GPOs, delegation models, and tiered admin access
• Perform AD security hardening and privilege audits
• Support AD migrations, consolidations, and cleanup

Azure Entra ID (Azure AD) & Identity

• Design and support hybrid identity using Azure AD Connect / Cloud Sync
• Implement SSO, Conditional Access, and MFA
• Troubleshoot authentication, sync, and federation issues
• Support cloud-only identity and Zero Trust initiatives
• Integrate SaaS apps using SAML, OAuth, and OIDC

Microsoft 365

• Administer Exchange Online, SharePoint Online, OneDrive, and Teams
• Troubleshoot mail flow, hybrid Exchange, licensing, and security issues
• Implement Defender, DLP, retention, and compliance policies
• Support M365 migrations and tenant transformations

Microsoft Azure

• Design and manage Azure VMs, VNets, NSGs, and Firewall
• Implement Azure Backup, Monitor, and Log Analytics
• Manage RBAC, policies, subscriptions, and cost controls
• Support on-prem to Azure migrations

PowerShell & Automation

• Develop advanced PowerShell scripts for AD, Azure AD, and M365
• Automate reporting, audits, bulk operations, and remediation
• Build secure scripts with logging and error handling
• Reduce MTTR through automation

Windows Server & Core Infrastructure

• Administer Windows Server 20162022
• Manage DNS, DHCP, DFS, and File Services
• Perform patching, upgrades, and OS hardening
• Support backup and disaster recovery

L3 Ownership & Leadership

• Act as final escalation point for L2 teams
• Lead RCA and post-incident reviews
• Create runbooks, SOPs, and documentation
• Mentor L1/L2 engineers and review changes
• Participate in architecture discussions

Good to Have

• VMware vSphere (ESXi, vCenter, HA/DRS)
• Microsoft Hyper-V and Failover Clustering
• Microsoft Intune / Endpoint Manager
• Microsoft Defender (Endpoint / Identity)
• Backup tools: Veeam, Rubrik, Cohesity

Required Experience & Qualifications

• 7+ years of experience in Microsoft enterprise environments
• Strong hands-on expertise in AD, Azure AD, M365, and Azure
• Advanced PowerShell scripting (mandatory)
• Experience in enterprise or MSP environments
• Ability to independently handle L3-level incidents

Certifications (Nice to Have)

• Microsoft Certified: Azure Administrator / Azure Solutions Architect
• Microsoft 365 certifications
• VMware VCP