Senior Microsoft Infrastructure Engineer

ppbMicrosoft infrastructure is easy until it has to be secure, federated and audited. Then it needs someone like you. /b /ppYou would provide the senior Microsoft engineering for a multinational defence organisation in Mons, Belgium
- designing, building and running the enterprise platform and the identity services on top of it, through the whole of their life. /ph3What You Would Be Doing /h3ulliDesigning, configuring, operating and troubleshooting complex Microsoft enterprise infrastructure in secure environments /liliCarrying Windows Server platforms and their services end to end: architecture, deployment, hardening, patching, upgrade, migration, monitoring and decommissioning /liliDesigning and administering Active Directory
- domains, forests, trusts, group policy, authentication, DNS integration and the identity infrastructure around it /liliBeing the expert on identity and access: authentication, authorisation and federation, including AD FS, Entra ID and open-source stacks such as Keycloak /liliBuilding and maintaining public key infrastructure, certificates and everything that depends on them, including lifecycle and trust /liliRunning on-premise SharePoint environments
- site architecture, permissions, metadata, taxonomy, search, content management and integration /liliDesigning secure integrations with the rest of the estate, including the Atlassian stack, Power BI, Splunk and SQL Server /liliSupporting the cloud reference environment and the pipelines behind it: source control, automated deployment, continuous integration and delivery, configuration management /liliAutomating with PowerShell and infrastructure as code so the work is repeatable /liliKeeping it all inside the security requirements and hardening standards, remediating what reviews turn up /liliAdvanced troubleshooting and root-cause analysis, and the incident, problem, change, configuration and release processes around it /liliAdvising on where the platform should go next
- technology, resilience, availability, scale /li /ulh3What you would bring /h3ulliAt least six years designing and running Microsoft enterprise infrastructure at medium to large scale /liliStrong hands-on Windows Server and Active Directory, with group policy and DNS, plus federation and single sign-on through AD FS and Entra ID /liliReal depth in PKI, certificates, TLS and certificate lifecycle /liliSharePoint from installation through security, integration and lifecycle, plus Microsoft 365 and hybrid environments /liliPractical Azure and hybrid cloud, with pipelines and infrastructure automation /liliStrong PowerShell; Python, SQL and infrastructure-as-code such as Terraform or Bicep are a plus /liliSQL Server and the enterprise plumbing around it
- networking, firewalls, proxies, load balancing, high availability, backup and recovery /liliTroubleshooting complex failures, hardening, patching, upgrades, migrations and vulnerability remediation /liliWorking inside IT service management, and writing documentation someone else can follow /liliA technical degree with a substantial IT component, plus four years in exactly this kind of work
- or, exceptionally, ten years of progressive expertise in it /liliProfessional English /li /ulh3Nice to have /h3ulliMicrosoft certification in Azure, identity, Windows Server, Microsoft 365 or SharePoint /liliSecurity, service management, DevOps or cloud architecture certifications /liliWork for military, governmental or other security-sensitive organisations, and on mission-critical services /liliIntegrations with Jira, Confluence, Bitbucket, Splunk or Power BI /liliEndpoint configuration manager, Exchange or web application proxy /li /ulh3Why this one is worth a look /h3pIdentity and certificates are where the real engineering is, and here they carry a security weight most enterprises never see. /p /p