Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 64 days ago

Cloud Windows Infrastructure Engineer

gresham38 open roles

Where
APAC - Remote - India, India
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCloud Windows Infrastructure Engineergresham · APAC - Remote - India, India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on gresham's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 64 days ago

The posting

Job description

Job Purpose As Senior Windows Infrastructure Engineer, you are the technical anchor for the Windows estate that powers Gresham's managed services platform — a multi-client environment hosted on AWS. The work is grounded in deep Windows Server operations: Active Directory, IIS, hybrid identity, Group Policy, PowerShell, certificate services, and the wider Microsoft ecosystem.

AWS is the platform on which all of this runs. Comfort with the cloud layer matters and you will operate it daily, but it is the Microsoft stack — and its operational nuance — that defines this role. We hire for deep Windows expertise first; the cloud layer is something a strong sysadmin can absorb.

The estate is Windows Server 2019 and above, end-to-end. Linux footprint is negligible — this is a role for someone who wants to go deep on the Microsoft stack rather than be spread thin across platforms.

This is a 100% individual contributor role. You will not manage or lead a team. You will own complex incidents end-to-end, set technical standards by example, and act as the senior escalation point for the Cloud Support function. You will be working US hours so please only apply if you are able to do so.

Role Responsibilities

  • Lead resolution of complex Windows Server incidents across multi-client, AWS-hosted environments — from triage to root cause to remediation.
  • Administer and harden Windows Server 2019/2022/2025: Active Directory (forest/domain design, replication, FSMO, GPOs, trusts), DNS, DHCP, IIS, WSUS, AD CS, file & print services.
  • Operate hybrid identity: AD on-prem ↔ AWS Managed Microsoft AD, federation with Entra ID (Azure AD) / AD FS, SAML / OIDC / OAuth, Kerberos, MFA.
  • Author and maintain PowerShell automation: bulk administration, scheduled tasks, configuration drift correction, reporting, and DSC where appropriate.
  • Operate the AWS hosting layer for Windows workloads: EC2, EBS, VPC, IAM, Route 53, CloudWatch, Systems Manager (Patch Manager, Session Manager, Run Command), Backup, Directory Service.
  • Manage IIS in depth: sites, application pools, bindings, ARR / URL Rewrite, SSL/TLS, failed request tracing, and performance tuning.
  • Drive observability of the Windows estate: event log strategy, performance baselines, CloudWatch metrics & alarms, Grafana dashboards.
  • Author runbooks, SOPs, and knowledge base articles to codify operational standards.
  • Participate in ITIL incident, problem, and change management; act as senior on-call escalation.

Essential Skills & Experience Windows Server & Microsoft Infrastructure (Primary)

  • 7+ years operating Windows Server in production, with deep hands-on experience on Windows Server 2019 and above.
  • Active Directory at depth: forest/domain design, replication, FSMO roles, trusts, sites & services, schema, tombstone & recovery.
  • Group Policy at scale: design, troubleshooting (RSoP, gpresult), security baselines, WMI filtering.
  • IIS at depth: site & app pool configuration, ARR, URL Rewrite, SSL/TLS, failed request tracing, performance tuning.
  • DNS, DHCP, WSUS, and Active Directory Certificate Services (AD CS) — real operational experience.
  • Advanced PowerShell: scripting, modules, remoting, error handling, automation patterns, DSC familiarity.
  • Windows patching at scale: planning, deployment, rollback, and troubleshooting in regulated environments.
  • Windows performance troubleshooting: PerfMon, ETW, memory dump analysis, IIS request diagnostics.

Identity & Authentication

  • Hybrid identity: AD on-prem ↔ cloud, Entra ID (Azure AD) Connect / federation, AD FS.
  • SAML 2.0, OIDC, OAuth 2.0, Kerberos, LDAP, MFA — practical implementation and troubleshooting.
  • Certificate management and PKI in enterprise Windows environments.

AWS Hosting Platform (Operational Competence)

  • Day-to-day comfort operating Windows workloads in AWS: EC2, EBS, VPC, IAM, Route 53, CloudWatch.
  • AWS Systems Manager for Windows fleet management: Patch Manager, Session Manager, Run Command, State Manager, Parameter Store.
  • AWS Directory Service / Managed Microsoft AD / AD Connector.

Note: Deep AWS architect-level expertise is not required. We hire for Windows depth; the cloud layer is the platform, and we expect strong fundamentals plus willingness to grow. Service Operations & Remote Working

  • Strong ITIL grounding: incident, problem, change, and service lifecycle management.
  • Prior experience in an MSP or shared-services environment — multiple client estates managed under SLA.
  • Advanced / fluent professional English, written and spoken.
  • Reliable, distraction-free home office with stable broadband (100 Mbps+ recommended), reliable power, and a professional video setup.
  • Ability to work New York-aligned hours consistently, with the same presence and responsiveness as an office-based colleague.

Working Hours, Remote Setup & Engagement This role is 100% remote and 100% individual contributor. To match the responsiveness of an office-based engineer:

  • Working hours: You will operate aligned to New York business hours (08:30–17:30 ET). Typical Brazil hours: 09:30–18:30 BRT during EDT (US summer) and 10:30–19:30 BRT during EST (US winter). You must be online, responsive, and actively engaged throughout core hours, the same as if you were sat with the team in the office.
  • Home office: Quiet, ergonomic workspace with stable broadband (100 Mbps+ recommended), reliable power, and a professional video / audio setup. This is not a digital-nomad role.
  • Engagement model: PJ (Pessoa Jurídica) or via Employer of Record — confirmed during recruitment. Tax, invoicing, and benefits arrangements discussed at offer stage.
  • Equipment & expenses: Discussed at offer stage.
  • On-call: Participation in a senior escalation rota for major incidents — compensated in line with policy.

Equal Opportunities Statement At Gresham, we are committed to building a diverse and inclusive workforce that reflects the communities we serve. We actively encourage applications from individuals of all backgrounds and are dedicated to providing a workplace where everyone feels valued, respected and supported.

We make employment decisions based on merit, skills and potential, and do not discriminate based on any protected characteristic. We are also committed to making reasonable adjustments throughout the recruitment process and employment lifecycle.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against gresham's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on gresham's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    gresham's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.