Infrastructure Engineer

Location: Las Vegas, NV

Contract Duration: 6 Months

Job Overview: Windows System Engineer/Infrastructure Engineer

We are seeking a highly skilled Infrastructure Engineer to join our team. The ideal candidate will possess expertise in managing Active Directory, Windows Servers, Office 365, Azure AD, and automation tools while ensuring system reliability, scalability, and security. This position involves hands-on troubleshooting, configuration, and optimization of systems, with opportunities for collaboration across IT functions.

Required Skills:

1. Active Directory (Core Skill)

Skill Expectations:

Replication Troubleshooting:

• Diagnose and resolve replication failures (e.g., repadmin commands, Event ID 1311/13568).
• Understand topology (sites/subnets), KCC, and forced replication.

Trust Relationships:

• Configure/manage one-way (unidirectional) and two-way (bidirectional) trusts between domains/forests.
• Resolve authentication issues across trusts.

Group Policy (GPO):

• Design, deploy, and troubleshoot GPOs (e.g., loopback processing, security filtering, WMI filters).
• Use GPMC, gpresult, and rsop.msc for analysis.

DNS Integration:

• Manage AD-integrated DNS zones, SRV records, and dynamic updates.
• Troubleshoot resolution issues impacting AD functionality.

2. Windows Server (On-Prem & Cloud)

Skill Expectations:

OS Management:

• Install, patch, and secure Windows Server 2016/2019/2022 (Core/GUI).
• Performance tuning (PerfMon, Resource Monitor).

IIS Administration:

• Configure websites/app pools, SSL bindings, and authentication (Windows Auth, Basic).
• Troubleshoot HTTP 500 errors, app pool crashes.

Failover Clustering (Nice-to-Have):

• Set up clusters for roles like SQL Server or File Servers.
• Understand quorum models (node majority, witness disk).

3. Certificates & PKI

Skill Expectations:

Certificate Lifecycle:

• Generate CSRs, submit to CA (e.g., Microsoft CA, DigiCert), install/export certs.
• Renew expiring certs (e.g., for Exchange, IIS).

Troubleshooting:

• Fix SSL/TLS errors (e.g., Schannel Event IDs, mismatched SANs).
• Validate cert chains using certmgr.msc and openssl.

4. Office 365 & Exchange Online

Skill Expectations:

Mail Flow:

• Configure send/receive connectors, transport rules (e.g., spam filtering, DLP).
• Trace emails using Message Trace.

Hybrid Environments:

• Manage coexistence (e.g., shared SMTP namespace, hybrid agent).

5. Azure AD (Entra ID) & Identity

Skill Expectations:

Conditional Access:

• Design policies for MFA, device compliance, and location-based access.

SSO Setup:

• Integrate SaaS apps via SAML/OIDC (e.g., Zoom, Salesforce).
• Troubleshoot "AADSTS" errors.

6. Automation & Scripting

Skill Expectations:

PowerShell:

• Write scripts for user provisioning, log analysis, or bulk GPO updates.

Example: Automate AD user creation with New-ADUser CSV input.

Ansible:

• Basic playbooks for Windows node configuration (e.g., install roles/features).

Akamai DNS:

• Update records via API/portal (e.g., CNAME changes for migration).

7. Monitoring & Troubleshooting

Skill Expectations:

Tools: Use Event Viewer, netsh, Test-NetConnection, and Wireshark (for deep packet analysis).

Critical Thinking: Methodically isolate issues (e.g., "Is it DNS?").