Wintel Engineer

The Company

Egon Zehnder is trusted advisor to many of the world’s most respected organizations and a leading Executive Search firm, with more than 600+ consultants and 71 offices in 37 countries spanning Europe, the Americas, Asia Pacific, the Middle East and Africa. Our clients range from the largest corporations to emerging growth companies, government and regulatory bodies, and major educational and cultural institutions. The firm is a private partnership which allows us to operate independent of any outside interests. As a result of this unique culture, Egon Zehnder has the highest professional staff retention rate for a global firm in our profession. We have a blue-chip client base across all industries and operate at the Board and senior management level.

Knowledge Centre India (KCI)

Knowledge Center India (KCI) is the central engine that drives the operational value for the firm. Established in 2004, KCI has evolved over the years from purely operational efficiencies into more value-added service offerings, becoming a true business partner. There are various teams based at KCI that work with Global Offices, Practice Groups, and the Management across all aspects of the firm's business life cycle. With a headcount of more than 500, the center has 5 core teams working including Experts, Research Operations, Visual Solutions, Projects/CV Capture and Digital IT, working round the clock on many mission critical elements.

Who We Are!

We are part of Digital-IT team established 17 years ago in Gurgaon, India to provide technology support and rollout digital initiatives to 70 plus global offices. Digital IT has six key pillars – Collaboration Technology; Functional Technology; Digital Technology; Security & Architecture; Infrastructure & Services, Digital Success to support business and to take lead on digital transformation initiatives with the total strength of 200+ team members across the globe.

Requirements

The Senior Wintel Engineer is responsible for the design, administration, automation, security, and modernization of enterprise Windows infrastructure, identity services, virtualization platforms, cloud services, messaging systems, endpoint management, and security technologies. This role serves as a technical SME for Windows, Active Directory, Entra ID, Messaging, Automation, Virtualization, VDI, and Microsoft Cloud technologies.

A key expectation of this role is to drive operational excellence through automation, self-healing solutions, infrastructure-as-code principles, and process optimization while ensuring platform stability, security, compliance, and scalability across global environments.

Key Responsibilities

1. Automation & Platform Engineering (Primary Focus)

- Design, develop, and maintain automation solutions across infrastructure, identity, messaging, virtualization, and endpoint platforms.
- Develop advanced PowerShell automation for operational tasks, provisioning, compliance, monitoring, reporting, and remediation.
- Automate server builds, patching, configuration management, health checks, certificate renewals, user lifecycle processes, and monitoring activities.
- Create self-healing solutions to reduce repetitive operational workload.
- Develop integrations utilizing:
- Microsoft Graph API
- Exchange PowerShell
- Azure PowerShell
- REST APIs

- Build dashboards, reporting solutions, and operational monitoring automation.
- Implement Infrastructure as Code (IaC) and configuration management practices where applicable.
- Automate security remediation and compliance reporting activities.
- Continuously identify opportunities to eliminate manual operational tasks and improve service efficiency.
- Create and maintain operational runbooks, SOPs, and automation documentation.
- Act as an automation champion within Infrastructure and Operations teams.

2. Windows Infrastructure & Identity Services

- Administer and support Microsoft Active Directory infrastructure including domains, forests, trusts, DNS, DHCP, and Group Policy.
- Manage:
- User lifecycle management
- Group management
- Computer object administration
- Organizational Units
- Security delegation

- Design and implement Group Policies and security baselines.
- Manage Microsoft Entra ID (Azure AD) environments including:
- Users and Groups
- Dynamic Groups
- Conditional Access
- Administrative Units
- MFA
- Passwordless Authentication
- SSO
- Identity Governance
- Privileged Identity Management (PIM)

- Support Hybrid Identity architecture through Entra Connect and Cloud Sync.
- Manage enterprise password policies using Specops.
- Support Active Directory security, monitoring, auditing, and recovery using Semperis DSP and ADFR.
- Administer Microsoft Certificate Services and Public Key Infrastructure (PKI).
- Support Zero Trust identity initiatives and privileged access management.

3. Windows Server Administration & Cloud Operations

- Build, configure, maintain, upgrade, harden, and decommission Windows Server environments.
- Administer Windows Server 2019, 2022, and future enterprise server operating systems.
- Support physical and virtual server infrastructure globally.
- Manage:
- Server patching
- Security updates
- Vulnerability remediation
- Compliance initiatives

- Support Azure-based infrastructure services including:
- Azure Virtual Machines
- Azure Storage
- Azure Backup
- Azure Monitoring
- Azure Update Management

- Participate in datacenter modernization and cloud migration projects.
- Administer backup and recovery platforms.
- Troubleshoot performance, capacity, availability, and reliability issues.
- Support containerized workloads and application hosting platforms including Azure Kubernetes Service (AKS).

4. Virtualization, VDI & Compute Platforms

- Administer VMware ESXi infrastructure hosted on Cisco UCS platforms.
- Manage Microsoft Hyper-V environments and cluster infrastructure.
- Provision, maintain, optimize, and troubleshoot enterprise virtual machines.
- Perform capacity planning, performance tuning, and lifecycle management.
- Support Virtual Desktop Infrastructure (VDI) platforms including:
- Azure Virtual Desktop (AVD)
- Citrix Virtual Apps & Desktops
- VMware Horizon

- Manage:
- VDI Golden Images
- FSLogix Profiles
- Application Layering
- Host Pools
- Session Optimization

- Troubleshoot virtual desktop performance and user experience issues.
- Support GPU-enabled virtual desktop solutions where applicable.
- Collaborate with Endpoint Engineering teams to deliver modern workplace capabilities.

5. Messaging & Collaboration Services

- Administer Exchange Online and Exchange On-Premises infrastructure.
- Manage:
- Mail Flow
- Connectors
- Transport Rules
- RBAC
- Retention Policies
- Mailbox Lifecycle Operations

- Perform messaging troubleshooting and root cause analysis.
- Support Exchange migrations and modernization initiatives.
- Manage:
- Email Tracking
- Compliance
- Archiving
- Monitoring
- Reporting

- Support integrations with:
- Proofpoint
- Templafy
- JungleMail
- Trend Micro ScanMail

6. Email Security & Protection

- Administer Proofpoint security platforms.
- Manage:
- TAP
- TRAP
- CLEAR
- Email Firewall Rules
- Anti-Spam Policies
- Anti-Malware Protection
- Imposter Protection

- Investigate email threats and security incidents.
- Lead vendor escalations and email security improvements.

7. Endpoint & Security Management

- Administer Microsoft Defender Application Control (WDAC).
- Manage application control and code integrity policies.
- Support Microsoft Intune administration.
- Support Windows 11 device compliance and security standards.
- Manage BitLocker encryption programs.
- Support Microsoft Sentinel SIEM operations and investigations.
- Implement security baselines and hardening controls.
- Support Zero Trust and endpoint security initiatives.

8. Endpoint Management & Patch Administration

- Administer Microsoft SCCM infrastructure.
- Manage:
- Software Deployment
- Operating System Deployment
- Collections
- Reporting
- Application Packaging

- Implement endpoint automation and remediation solutions.
- Lead operating system and application patching activities.
- Support vulnerability management and VAPT remediation programs.
- Ensure compliance SLAs are achieved.

9. Backup, Disaster Recovery & Business Continuity

- Administer AvePoint backup solutions for:
- OneDrive
- SharePoint
- Teams
- Exchange Online

- Manage Azure Backup Server.
- Validate backup integrity and recovery procedures.
- Support disaster recovery testing and planning.
- Ensure platform resiliency and recovery readiness.

10. Monitoring & Operational Excellence

- Administer:
- SCOM
- Site24x7
- HPE OneView
- Azure Monitoring

- Monitor platform health and service availability.
- Perform root cause analysis for major incidents.
- Create proactive monitoring and alerting automation.
- Drive continuous service improvement initiatives.
- Maintain operational documentation, recovery procedures, and technical knowledge repositories.

Required Technical Skills

Identity & Directory Services

- Active Directory
- Microsoft Entra ID
- Entra Connect
- Conditional Access
- PIM
- MFA / Passwordless Authentication
- Specops
- Semperis
- PKI / Certificate Services

Windows Platform

- Windows Server 2019/2022
- Group Policy
- DNS
- DHCP
- PowerShell

Cloud Technologies

- Microsoft Azure
- Azure Virtual Machines
- Azure Virtual Desktop
- Azure Backup
- Azure Monitor
- Azure Automation
- Azure Kubernetes Service (AKS)

Messaging

- Exchange Online
- Exchange On-Premises
- Proofpoint
- Microsoft 365 Administration

Virtualization & VDI

- VMware ESXi
- Cisco UCS
- Hyper-V
- Azure Virtual Desktop
- Citrix
- VMware Horizon
- FSLogix

Endpoint Management

- SCCM
- Intune
- WDAC
- BitLocker
- Windows 11

Monitoring & Backup

- SCOM
- Site24x7
- HPE OneView
- AvePoint
- Azure Backup Server

Security

- Microsoft Sentinel
- Zscaler ZIA
- Zscaler ZDX
- Trend Enterprise Application Control
- Trend Deep Security
- Vulnerability Management

Automation (Mandatory)

- Advanced PowerShell Scripting
- Microsoft Graph API
- REST APIs
- Infrastructure Automation
- Process Automation
- Self-Healing Solutions
- Azure Automation
- Infrastructure as Code Concepts
- Automation Runbook Development

Experience Requirements

- 4 - 8+ years of experience in Windows Infrastructure, Cloud, Messaging, and Enterprise Operations.
- Proven experience managing large-scale Windows, Entra ID, and Microsoft 365 environments.
- Strong background in automation and scripting with PowerShell.
- Experience building self-service and self-healing operational solutions.
- Experience supporting VMware, Hyper-V, Azure, VDI, and Messaging platforms.
- Experience leading infrastructure modernization and cloud transformation initiatives.
- Experience supporting global 24x7 enterprise environments.

Key Competencies

- Automation First Mindset
- Advanced Troubleshooting Skills
- Platform Engineering & Modernization
- Identity & Security Architecture
- Operational Excellence
- Infrastructure Security & Compliance
- Incident & Problem Management
- Documentation & Knowledge Sharing
- Project Delivery & Technical Leadership
- Continuous Improvement
- Stakeholder Management
- Mentoring and Technical Coaching

Success Measure for this Role

A successful Senior Wintel Engineer is not measured solely by server uptime, but by their ability to automate repetitive work, reduce operational toil, improve platform security, modernize infrastructure, accelerate issue resolution, and drive measurable improvements across Windows, Identity, Cloud, Messaging, and End User Computing services.

Benefits

EZIRS Commitment to Diversity & Inclusion

Egon Zehnder Information Research & Services (EZIRS) aims for a diverse workplace and strive to continuously lead with our firm values. We respect personal values of every individual irrespective of race, national or social origin, gender, religion, political or other opinion, disability, age and sexual orientation as warranted by basic rights enshrined in the UN Declaration of HuBenefits

Benefits which make us unique

At EZ, we know that great people are what makes a great firm. We value our people and offer employees a comprehensive benefits package. Learn more about what working at Egon Zehnder can mean for you!

Benefits Highlights:

- 5 Days working in a Fast-paced work environment
- Work directly with the senior management team
- Reward and Recognition
- Employee friendly policies
- Personal development and training
- Health Benefits, Accident Insurance

Potential Growth for you!

We will nurture your talent in an inclusive culture that values diversity. You will be doing regular catchups with your Manager who will act as your career coach and guide you in your career goals and aspirations.

Location

The position is based at Egon Zehnder’s KCI office in Gurgaon, Plot no. 29, Institutional Area Sector 32.

EZIRS Commitment to Diversity & Inclusion

Egon Zehnder Information Research & Services (EZIRS) aims for a diverse workplace and strive to continuously lead with our firm values. We respect personal values of every individual irrespective of race, national or social origin, gender, religion, political or other opinion, disability, age and sexual orientation as warranted by basic rights enshrined in the UN Declaration of Human Rights. We believe diversity of our firm is central to the success and enables us to deliver better solutions for our clients. We are committed to creating an inclusive environment and supportive work environment, where everyone feels comfortable to be themselves and treated with dignity and respect and there is no unlawful discrimination related to employment, recruitment, training, promotion or remuneration.

Egon Zehnder is an Equal Opportunity Employer

Egon Zehnder provides equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, disability, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity.