Senior Windows Platform Engineer | Contract | Hybrid, Agoura Hills

Requirements:

• Expert-level experience with Active Directory and DNS resilience, including replication topology and health, FSMO roles, DFS-R, NTDS, AD-integrated DNS, and domain controllers.
• Expert-level knowledge of Kerberos authentication, including SPNs, duplicate-SPN failure modes, constrained delegation, AES/RC4 encryption, managed service accounts, group managed service accounts, and reverse DNS dependencies.
• Strong experience with identity integration across Windows and non-Windows environments, including LDAP and single sign-on.
• Expert-level experience with golden image and patch pipelines, including image bake automation, CI-scheduled builds, promotion, deprecation, deregistration, and CVE-driven rebuilds.
• Strong Windows observability and PowerShell experience.
• Strong experience with Infrastructure as Code and configuration management, including OpenTofu and tools such as Chef, Ansible, and Systems Manager.
• Strong understanding of cloud infrastructure, security, data-protection controls, and infrastructure automation.
• Strong experience with PKI and certificate services.
• Strong experience with disaster recovery design, including RTO/RPO, recovery strategies, failover testing, and Windows file services.
• Ability to work as a platform and automation engineer in a code-managed Windows environment rather than relying on traditional
• Windows administration practices.
• Ability to work independently across complex, business-critical Windows infrastructure and communicate technical decisions clearly.

Location:

• Hybrid: 3 days per week onsite in Agoura Hills, California.

Employment type: