Senior Windows Engineer, Active Directory and Server Platforms

The Role

Moderna is expanding its footprint to deliver the greatest possible impact to people through mRNA medicines. Our Cambridge technology hub server team is responsible for the design, implementation, administration, and support of the server environments supporting our research and pharmaceutical production. This role requires deep expertise across all core Windows Server roles and features, including Active Directory, DNS, DHCP, Group Policy, and File/Print services. The ideal candidate is a hands-on technical expert who excels in troubleshooting, automation, and system optimization to ensure stability, scalability, and security across enterprise systems.

Here’s What You’ll Do

• Own the architecture, health, and security of Active Directory, including forests, domains, trusts, and replication topology.
• Lead advanced integration and troubleshooting of authentication and identity (Kerberos, NTLM, SPNs, delegation, replication).
• Design and enforce Active Directory security controls, including tiered administration models (Tier 0/1/2) and privileged access strategies.
• Arcitect, manage, and secure enterprise PKI (ADCS), including certificate lifecycle, template governance, and CRL distribution.
• Define and maintain standards for Group Policy design, DNS architecture, and domain-joined systems.
• Own the operational health, lifecycle, and performance of enterprise Windows Server platforms (2016/2019/2022/2025).
• Lead server lifecycle management, including build standards, patching strategy, compliance, and decommissioning.
• Drive root cause analysis for complex systems, authentication, and performance issues across distributed environments.
• Define and enforce standards for server configuration, hardening, monitoring, and resiliency.
• Develop and maintain automation using PowerShell and related tooling to improve consistency and efficiency.
• Act as a senior escalation point and technical mentor for other engineers.
• Participate in escalation-level on-call, owning resolution of high-impact incidents.

Here’s What You’ll Need (Basic Qualifications)

• Bachelor’s degree in computer science, engineering, or related field (or equivalent experience).
• 3-5 years deploying, securing and maintaining a global Active Directory environment.
• 7–10 years of professional experience supporting Microsoft Windows Server environments including all role and features.
• Proven experience operating enterprise-scale Windows Server environments, including performance, patching, and reliability.
• Deep ability to troubleshoot authentication, replication, network, and performance issues.
• Experience with patch management process and tooling, endpoint protection, and server hardening.

Here’s What You’ll Bring to the Table (Preferred Qualifications)

• Microsoft certifications (AZ800/AZ801, SC300, MCSA, MCSE, or equivalent).
• Experience implementing Active Directory security best practices (tiering models, privileged access controls, hardening).
• Experience working in hybrid on premises and cloud environments (VMware, AWS, Azure).
• Proficient with Microsoft and third-party monitoring and management tools.
• Experience in regulated environments (GXP, DISA-STIG, CIS, PCI, etc.).
• Ability to work independently, develop long term strategic Infrastructure enterprise goals.