jobapplier

Senior Windows Infrastructure Design Engineer (L3/L3.5)

Keyloop

Skills

Required

  • Directory
  • Microsoft
  • PAM
  • automation
  • DNS
  • Privileged Access Management
  • hardening
  • Windows Server environments
  • DHCP
  • Microsoft Entra ID
  • privileged account controls
  • authentication technologies
  • PowerShell

Preferred

  • Windows
  • L3 / L3.5
  • Domain Services
  • Windows Server infrastructure
  • AD DS
  • replication design

Keyloop bridges the gap between dealers, manufacturers, technology suppliers and car buyers.

We are seeking an experienced Windows Infrastructure Design Engineer to join our Infrastructure Engineering team. This role is responsible for the architecture, engineering, governance and highest-level technical support (L3/L3.5) of the organisation's Windows Server, Active Directory and identity infrastructure across datacentre, cloud and hybrid environments.

The successful candidate will be a senior technical authority for Microsoft server and identity technologies, providing design leadership, operational governance and engineering expertise. The role combines deep Windows and Active Directory knowledge with experience of Privileged Access Management (PAM), automation and modern infrastructure management practices.

The engineer will play a key role in modernising infrastructure services, improving security posture, driving automation and supporting large-scale transformation initiatives across the enterprise estate.

About Keyloop

We empower car dealers and manufacturers to fully embrace digital transformation. How? By creating innovative technology that makes selling cars better for our customers, and buying and owning cars better for theirs.

We use cutting-edge technology to link our clients’ systems, departments and sites. We provide an open technology platform that’s shaping the industry for the future. We use data to help clients become more efficient, increase profitability and give more customers an amazing experience.

Want to be part of it?

Responsibilities

  • Design, implement and

maintain

  • enterprise Windows Server infrastructure and associated platform services.
  • Own the architecture and governance of Active Directory Domain Services (AD DS), including domain, forest, trust and replication design.
  • Design and support Microsoft DNS services hosted on domain controllers and integrated with Active Directory.
  • Define and

maintain

  • standards, reference architectures and operational processes for Windows and identity services.
  • Act as the L3/L3.5 escalation point for complex Windows, Active Directory and authentication-related issues.
  • Design and support enterprise identity and access management solutions, including integration with PAM platforms.
  • Develop and implement security hardening standards in line with industry best practices.
  • Collaborate with security, networking, cloud and application teams to deliver resilient and secure infrastructure services.
  • Design and implement automation solutions using scripting, Infrastructure as Code and API-driven management.
  • Leverage AI-assisted tooling to improve operational efficiency, troubleshooting, reporting and knowledge management.
  • Provide technical leadership for infrastructure transformation, cloud migration and service modernisation programmes.
  • Forest and domain design
  • Group Policy
  • DNS integration
  • Trust relationships
  • Replication
  • Experience supporting

Requirements

  • Extensive experience designing and supporting Microsoft Windows Server environments.
  • expertise

Authentication services

  • Strong understanding of Microsoft DNS, DHCP and certificate services.
  • Experience supporting hybrid identity environments incorporating Active Directory and Microsoft Entra ID.
  • Experience with Privileged Access Management (PAM) solutions and privileged account controls.
  • Strong understanding of authentication technologies including Kerberos, LDAP, NTLM and modern identity protocols.
  • Experience with Windows security hardening and vulnerability remediation.
  • Experience with PowerShell automation and configuration management.
  • Strong troubleshooting and root-cause analysis capability across complex enterprise environments.

Preferred

  • and business-critical infrastructure services.
  • CyberArk, Delinea
  • BeyondTrust
  • or similar PAM platforms.

Pay

We believe people should be paid based on their performance so our pay and benefits reflect this and are designed to attract the very best talent. We encourage everyone in our organisation to explore opportunities which enable them to grow their career through investment in their development but equally by working in a culture which fosters support and unbridled collaboration.

Benefits

  • We’re on a journey to become market leaders in our space – and with that comes some incredible opportunities. Collaborate and learn from industry experts from all over the globe. Work with game-changing products and services. Get the training and support you need to try new things, adapt to quick changes and explore different paths. Join Keyloop and progress your career, your way.
  • An inclusive environment to thrive
  • We’re committed to fostering an inclusive work environment. One that respects all dimensions of diversity. We promote an inclusive culture within our business, and we celebrate different employees and lifestyles – not just on key days, but every day.

Be rewarded for your efforts

  • Keyloop doesn’t require academic qualifications for this position. We select based on experience and potential, not credentials.
  • "At Keyloop, AI is a daily ally: We encourage and train every employee to use our AI tools to boost their creativity and productivity."

We are also an equal opportunity employer committed to building a diverse and inclusive workforce. We value diversity and encourage candidates of all backgrounds to apply.