Wintel Infrastructure Engineer in London

The Role

• Design and deliver a Windows 11 virtual desktop solution for engineering users

• Support hybrid VDI platforms across on premises and Azure environments

• Implement a secure access model enabling development and testing, including controlled elevated privilege use

• Ensure logical isolation of development and test workloads from production environments

• Integrate virtual desktops with enterprise identity services (Active Directory / Entra ID)

• Implement role based access control (RBAC) for standard and privileged engineering access

• Design secure privilege elevation mechanisms aligned with least privilege principles

• Enable approved self service provisioning of engineering virtual desktops

• Automate virtual desktop lifecycle management (provision, update, retire)

• Integrate standard tooling and configurations to support build, development, and test workflow

Your responsibilities: (Up to 10, Avoid repetition)

• Manage and administer Windows Server and Wintel infrastructure including build, configuration, patching, and lifecycle management

• Maintain and support Active Directory (AD) services (users, groups, GPOs, DNS, DHCP) and implement AD tiering models

• Execute infrastructure changes including server configurations, AD updates, and deployment activities

• Perform security remediation including service account cleanup, access control fixes, and compliance alignment

• Provide L2/L3 support for incidents, perform root cause analysis, and ensure SLA-driven resolution

• Support Change Management (CAB) processes and ensure controlled and validated deployments

• Monitor system performance, ensure high availability, capacity management, and resilience of infrastructure

• Automate operational tasks using PowerShell/scripts to improve efficiency and reduce manual effort

• Support testing, validation, and service transition (Project to BAU) activities

• Collaborate with security, cloud, and application teams to deliver infrastructure, remediation, and transformation initiatives

Your Profile

Essential skills/knowledge/experience: (Up to 10, Avoid repetition)

• Strong hands-on experience with Windows Server environments, including installation, configuration, patching, and troubleshooting

• Solid expertise in Active Directory (AD) including users, groups, GPOs, DNS, DHCP and AD governance models

• Experience in AD tiering, access control, and identity governance, including remediation of service accounts and security alignment

• Proven experience in enterprise infrastructure deployment and configuration, including server builds and environment changes

• Strong knowledge of virtualization technologies (e.g., VMware / Hyper-V) and clustered environments

• Experience in infrastructure security and compliance, including server hardening, patching, and vulnerability management

• Hands-on expertise in monitoring, troubleshooting, and performance optimization of infrastructure platforms

• Good understanding of backup, disaster recovery, and high availability solutions for enterprise environments

• Strong scripting and automation skills using PowerShell to improve operational efficiency

• Experience working with cloud-integrated or hybrid environments (e.g., Azure / Azure AD / Entra ID)

• Good understanding of ITIL processes (Incident, Problem, Change Management) and working in SLA-driven environments

• Experience in large-scale enterprise or regulated environments with high availability and compliance requirements

Technology Stack / Exposure:

• Windows Server & Active Directory Expertise – Strong hands-on experience with Windows environments and AD services (GPO, DNS, DHCP, identity governance)

• Enterprise Infrastructure & Virtualization – Proven capability in server deployment, configuration, and virtualization platforms (VMware / Hyper-V)

• Security & Compliance Management – Experience in AD tiering, access control, server hardening, and remediation of security vulnerabilities

• Automation & Troubleshooting – PowerShell scripting with strong skills in monitoring, performance tuning, and resolving complex infrastructure issues

• Hybrid & ITIL Operations Exposure – Experience working in cloud-integrated environments (Azure/Entra ID) with ITIL processes (Incident, Change, Problem)

Desirable skills/knowledge/experience: (As applicable)

• Experience working in large-scale enterprise or regulated environments with strong compliance and governance requirements

• Exposure to hybrid cloud technologies such as Microsoft Azure, Azure Local (Azure Stack HCI), and Azure Arc

• Knowledge of advanced identity and security controls, including Entra ID integrations, conditional access, and zero-trust principles

• Experience with infrastructure automation frameworks (e.g., ARM templates, Bicep, or similar tools)

• Familiarity with enterprise monitoring and logging platforms (e.g., Azure Monitor, Log Analytics, SIEM tools)

• Exposure to service transition, documentation, and BAU handover processes in managed services environments

• Understanding of integration with security and networking platforms (e.g., segmentation, privileged access, remote access solutions)

Job Description

Virtual Desktop Infrastructure (VDI) Expertise

• Strong experience designing and implementing Windows 11 and 10 Virtual Desktop solutions

• Hands-on expertise with: Azure Virtual Desktop (AVD) & On-prem VDI platforms (e.g., Citrix Virtual Apps & Desktops, Windows RDS etc)

• Knowledge of multi-session and single-session desktop environments

• Experience in high-performance engineering workstation environments

• Strong knowledge of: Active Directory (AD DS) and Microsoft Entra ID

• Experience integrating VDI with: Enterprise identity services &Authentication and access control systems

• Expertise in implementing: Role-Based Access Control (RBAC) &Least privilege access models

• Experience designing: Secure privilege elevation mechanisms& Controlled administrative access for developers/engineers

• Environment Segmentation & Isolation

• Automation & Scripting (PowerShell)

• Networking & Performance Optimization including with understanding of Load balancing and network performance optimization

• Ability to define and segment user personas based on: Job roles (developers, testers, admins, contractors, etc.)

• Experience conducting: User profiling and workload analysis