Infrastructure Engineer - Infrastructure Engineering

We are seeking an experienced Infrastructure Engineer to design, operate, secure, and continuously improve enterprise infrastructure across on-premises and cloud environments. This position is entrusted with privileged Domain Administrator access for approved high-trust work and must apply disciplined change control, least-privilege practices, strong documentation, and sound engineering judgment. The engineer will serve as a senior technical resource for Microsoft identity and Windows platforms while contributing broadly to compute, virtualization, storage, backup, monitoring, automation, cloud, and disaster-recovery initiatives.

Day-to-day responsibilities:

Privileged Domain and Identity Services

• Perform approved high-trust administrative work in enterprise Active Directory environments using designated, individually assigned privileged accounts.

• Administer and troubleshoot domain controllers, forests, domains, trusts, sites and services, replication, DNS, Group Policy, organizational units, service accounts, and authentication dependencies.

• Plan and execute sensitive directory changes, upgrades, migrations, consolidations, acquisitions, and recovery activities through formal change-management and peer-review processes.

• Protect privileged access through least privilege, separation of duties, multifactor authentication, secure administrative workstations, just-in-time or time-bound elevation where available, credential rotation, and auditable access reviews.

• Maintain the security and recoverability of identity services, including backup validation, authoritative and non-authoritative recovery procedures, break-glass controls, and tested runbooks.

• Investigate complex authentication, authorization, Kerberos, LDAP, DNS, replication, and Group Policy incidents; lead root-cause analysis and corrective actions.

• Partner with Cybersecurity, IAM, Audit, Compliance, Application, Network, and Cloud teams to remediate vulnerabilities and satisfy control requirements.

• Automate repeatable administration, reporting, health checks, and compliance evidence collection using PowerShell or comparable tools.

• Design, build, configure, patch, monitor, and support highly available Windows and Linux server platforms across data centers and public cloud environments.

• Engineer and support virtualization, compute, storage, backup, disaster recovery, monitoring, and core infrastructure services.

• Support hybrid-cloud workloads in Microsoft Azure and Amazon Web Services, including identity integration, networking dependencies, security controls, resilience, and cost-conscious design.

• Use infrastructure-as-code and configuration-management practices, such as Terraform, PowerShell, Ansible, Git, and CI/CD workflows, to deliver consistent and repeatable changes.

• Lead or contribute to infrastructure lifecycle projects, capacity planning, platform upgrades, migrations, technical debt reduction, and service improvements.

• Monitor performance, availability, security, capacity, and configuration compliance; address risks before they affect business services.

• Participate in incident, problem, change, release, and configuration-management processes and provide clear technical communications during major incidents.

• Create and maintain architecture diagrams, standards, operating procedures, build documents, recovery plans, and knowledge articles.

• Provide escalation support, mentor engineers, conduct technical reviews, and transfer knowledge across global teams.

• Participate in an on-call rotation and perform approved after-hours maintenance when required.

Essential traits:

• Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent practical experience.

• Five or more years of enterprise infrastructure engineering or systems administration experience, including substantial hands-on responsibility for Microsoft Active Directory.

• Demonstrated experience performing controlled work with Domain Administrator or comparably privileged credentials in large, complex, or regulated environments.

• Advanced knowledge of Active Directory Domain Services, Group Policy, DNS, Kerberos, LDAP, Windows Server, permissions, delegation, replication, and directory recovery.

• Strong understanding of privileged-access security, least privilege, role-based access, credential hygiene, logging, auditability, and separation of duties.

• Hands-on experience with PowerShell automation and source control.

• Working knowledge of virtualization, networking, storage, backup and recovery, monitoring, and cloud infrastructure.

• Experience with formal change management, incident response, root-cause analysis, and production support in a 24x7 environment.

• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to work independently and collaborate across technical and business teams.

• Ability to manage confidential information and privileged access with discretion, accountability, and sound judgment.

• Experience with multi-forest or multi-domain environments, mergers and acquisitions, domain migrations, or complex trust relationships.

• Experience with Microsoft Entra ID, hybrid identity, federation, single sign-on, multifactor authentication, PKI, managed service accounts, and privileged-access management platforms.

• Experience supporting VMware or comparable virtualization platforms; enterprise storage and backup technologies; and Azure or AWS services.

• Knowledge of security frameworks and controls such as Zero Trust, CIS benchmarks, NIST guidance, ISO 27001, or SOC 2.

• Relevant Microsoft, Azure, AWS, ITIL, or security certification.

Your recruiter will be happy to walk you through your U.S.-specific benefits, which include:

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.

• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.

• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.

• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.

• Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll 

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. 

In order to be considered for a position, you must formally apply via careers.kroll.com.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

The current salary range for this position is $70,000 to $200,000

#LI-DNI