Title: Senior Systems Engineer – Core Infrastructure (On-Prem & Hybrid) Seniority: 10 + years hands-on, 3 + years in a tech-lead or architect capacity
1. Experience: 10 + years in enterprise infrastructure roles; proven ownership of at least two full lifecycles (from design to steady-state) of multi-site environments.
2. Education: Bachelor’s in computer science, Engineering, or equivalent work experience. Mission: Own the end-to-end lifecycle—acquisition, design, operation, optimization, and governance—of the enterprise’s on-prem/hybrid Microsoft platforms and the surrounding network, storage, virtualization, security, and data-protection layers.
Acquisition & Vendor Management Multi-year infrastructure roadmap; RFPs & PoCs; TCO/ROI models; contract negotiation across Microsoft EA/CSP, VMware, Cisco/Aruba, NetApp/Dell EMC, Palo Alto/Fortinet, Veeam/Commvault, etc.
Architecture & Design HLD/LLD for Windows Server, Active Directory, Exchange, SQL; Layer-2/3 campus & data-center networks; SAN/NAS fabrics (FC, iSCSI, NVMe-oF); vSphere & Hyper-V clusters; backup, immutable archives, and off-site DR run-books, etc.
Implementation & Operations 24×7 support of servers, hypervisors, network, storage, security stacks; ITIL-aligned incident/change/config; scripted build & patch pipelines (PowerShell, Ansible); documentation & run-book, etc.
Optimization & Governance Capacity planning, performance tuning, cost-per-VM/TB reduction; security baseline compliance (CIS, ISO 27001); quarterly DR tests; KPI dashboards for uptime, MTTR, backup success, automation coverage, etc.
Must-Have Depth
● Microsoft: Windows Server 2019-2025, AD DS, Group Policy, DNS/DHCP, Exchange 2019/2025, SQL AOAG, WSUS/SUP.
● Virtualization: VMware vSphere 8 (vCenter, DRS, vMotion, vSAN), Hyper-V 2022/2025.
● Networking: L2/L3 switching & routing (Cisco/Aruba), VLAN, QoS, VPN, NAC (802.1X), firewall policy (Palo Alto/FortiGate).
● Storage: Tiered SAN (Dell PowerStore, NetApp ONTAP), NAS/Samba/NFS, snapshot & replication strategies.
● Backup & Archival: Veeam v12, Commvault, LTO-9 tape/WORM storage, air-gapped copies, annual restore drills.
● Security & Compliance: IPS/IDS, AD CS/PKI, patch orchestration, vulnerability remediation, SIEM integration (Splunk/ELK).
● Automation & IaC: PowerShell 7, Desired State Configuration, Ansible, REST APIs.
● Monitoring & Observability: SCOM, vRealize Ops, SolarWinds, syslog/netflow analysers.
