Engineer - IT Data Center (Microsoft & Servers Infrastructure) (Mazar)

Role summary Responsible for the operation, administration, security, availability and continuous improvement of ATOMA Microsoft infrastructure, with primary ownership of Windows Server, Active Directory, Microsoft 365, Azure/Entra services, SCCM/WSUS and related enterprise Microsoft platforms. The position also provides cross-platform support for VMware, Linux, enterprise storage, backup, physical server hardware, monitoring and Disaster Recovery to ensure reliable Data Center services across Primary and DR sites. Duties and responsibilities · Administer and maintain Windows Server infrastructure and related Microsoft services across Primary and Disaster Recovery Data Centers. · Administer Active Directory Domain Services, Group Policy, DNS, DHCP, LDAP integrations, identity services, trusts, replication and domain health. · Administer Microsoft 365 services, including Exchange Online, Microsoft Entra ID, authentication, mail flow, Teams, OneDrive, SharePoint and tenant-level operational support within approved responsibilities. · Support Azure services and Microsoft Entra integrations used by ATOMA, including identity synchronization, role-based access and hybrid identity components. · Administer SCCM/Microsoft Configuration Manager, WSUS, patch management, software deployment, inventory and compliance reporting for Windows servers and approved endpoints. · Administer Windows infrastructure services including RDS, IIS, DFS/File Services, PKI/Certificate Services, SMTP and related Microsoft server roles. · Support on-premises Exchange/SMTP services and hybrid mail dependencies where applicable, including troubleshooting of mail flow and certificate-related issues. · Use PowerShell and approved automation methods to standardize administration, reporting, health checks, user/service operations and repetitive support activities. · Monitor Microsoft platform availability, capacity, performance, event logs, replication, service health and security status; take corrective action before business impact occurs. · Implement approved Microsoft security baselines, hardening standards, privileged access controls, patching and remediation actions in coordination with Information Security. · Manage Microsoft-related SSL/TLS certificates, PKI dependencies, service certificates and renewal/deployment activities in coordination with application and security teams. · Provide Tier 2/Tier 3 support for major Windows, Microsoft 365, Azure/Entra, SCCM and identity incidents; perform root-cause analysis and preventive actions. · Administer and support Veeam Backup and Recovery for Windows Server, Active Directory and other Microsoft workloads, including backup jobs, repositories, schedules, retention, monitoring, troubleshooting and restore operations. · Perform regular backup and restore validation using Veeam and Veritas NetBackup to ensure recoverability of Microsoft infrastructure services. · Administer and support enterprise Privileged Access Management (PAM) solutions, including PAM360 or equivalent platforms, for secure administrative access to Windows Server, Active Directory, Microsoft infrastructure and Data Center systems. · Manage privileged accounts, password vaulting, administrative access policies, session controls and privileged-access audit logs. · Support Microsoft DNS integration with Pi-hole DNS infrastructure, including conditional forwarding, upstream DNS configuration, name-resolution troubleshooting and coordination with the Linux infrastructure engineer. · Support VMware vSphere/ESXi/vCenter operations, virtual machine provisioning and troubleshooting as a secondary responsibility and provide cross-coverage to the virtualization team. · Provide operational support for enterprise Linux servers, storage platforms, backup jobs and Data Center server hardware when required for incident recovery or cross-team coverage. · Support Dell, HPE and Huawei server platforms, including hardware health monitoring, firmware/driver coordination, warranty troubleshooting and vendor escalation. · Participate in backup and restore validation using enterprise backup platforms, and ensure Microsoft workloads are protected according to approved backup and retention requirements. · Participate in Disaster Recovery planning, testing and recovery of Windows, identity, Microsoft 365 integration and supporting infrastructure services. · Maintain accurate system documentation, build standards, configuration records, architecture diagrams, operational procedures and knowledge-base articles. · Follow ITIL-aligned incident, problem and change management processes and ensure assigned tickets, changes and actions are documented and closed within agreed service levels. · Provide 24x7/on-call support when required for critical Microsoft infrastructure incidents, maintenance activities or Data Center/DR operations. Job requirements Education: · Education: Bachelor's degree (BCS) in Computer Science, Information Technology, Computer Engineering or a related field from a reputable university of Afghanistan or abroad. Experience: · Minimum 8+ years of relevant experience in Enterprise Infrastructure and Data Center Operations, including hands-on experience in a telecommunications company or telecom service-provider environment. Strong practical experience in Microsoft Windows Server administration, Active Directory, Microsoft 365, Azure/Entra, SCCM/WSUS and enterprise Microsoft services is required. Experience with VMware, Linux, enterprise storage, backup and server hardware is required for cross-platform support. Experience in supporting 24x7 mission-critical infrastructure and Disaster Recovery operations is required. Training & Preferred Certifications: · MCSE / Microsoft Certified Solutions Expert (legacy) or current Microsoft Windows Server / Windows Server Hybrid administration certification · MCP / Microsoft Certified Professional (legacy) or equivalent Microsoft role-based certification · Microsoft 365 administration certification (Microsoft 365 Certified or equivalent) · Microsoft Azure Administrator / Azure Fundamentals or equivalent Azure certification · Microsoft Security, Identity or Entra-related certification is an advantage · VMware VCP, Linux administration, ITIL Foundation or fundamental networking certification is an advantage