Your responsibilities
About our team
Our Core Engineering Team is the backbone of Nordea global technology ecosystem. We are a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization. We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.
Main responsibilities in this role:
* Platform Lifecycle & Roadmap Strategy: Define, publish, and execute the multi-year technical roadmap for enterprise Windows Server platforms. Manage version lifecycles, core baseline configurations, and long-term servicing channel (LTSC) migration paths to eliminate technical debt before End-of-Life (EOL) or End-of-Support (EOS) dates.
* On-Premise Architecture & Standardization: Design, build, and govern the enterprise Windows "Gold Image" blueprints (WIM/ISO) for bare-metal deployments and hypervisors (VMware, Openshift). Establish standardized OS profiles, registry baselines, and core subsystem configurations across the entire corporate data center footprint.
* Infrastructure Automation & Orchestration: Own the design and implementation of automated Windows provisioning pipelines and configuration management frameworks. Enforce Infrastructure as Code principles using tools like PowerShell DSC, Terraform, and Microsoft Endpoint Configuration Manager (MECM/SCCM) to ensure configuration consistency and eliminate manual drift.
* Security, Compliance & Patch Governance: Define platform hardening baselines in alignment with Microsoft Security Baselines, CIS Benchmarks, NIST, and internal InfoSec policies via Group Policy Objects (GPOs) and Intune. Architect and oversee the automated patch deployment pipeline, ensuring vulnerabilities are remediated within strict corporate SLAs without disrupting application availability.
* Capacity, Performance & Compute Planning: Monitor and analyze enterprise-wide Windows infrastructure telemetry to forecast future compute, memory, and storage requirements. Partner with hardware engineering team to evaluate next-generation server technology and guide hardware refresh cycles based on platform demands.
* Identity, Networking & Storage Integration: Govern the integration standards between the Windows Server platform and centralized enterprise infrastructure. This includes robust Active Directory / Entra ID identity fabrics, core network services (Microsoft DNS, DHCP), and enterprise storage protocols.
* Vendor & Total Cost of Ownership (TCO) Management: Act as the primary technical interface for Microsoft vendor. Manage Microsoft Enterprise Agreements, software assurance benefits, core-based licensing models, and handle high-severity technical Microsoft Premier/Unified Support escalations.
Our requirements
Who you are
Desirable experience and skills (you don't have to have them all, to be a good candidate):
* Enterprise Windows Expertise: Deep knowledge of Windows Server operating system internals (including Registry architecture, LSASS, and WMI/CIM providers), Performance Monitor (PerfMon) analysis, advanced crash dump analysis, and complex system initialization/boot troubleshooting.
* On-Premise Infrastructure: Solid experience hosting Windows Server workloads on enterprise hypervisors (VMware, Hyper-V, Azure Stack HCI) and managing physical server infrastructure hardware lifecycle interfaces (HPE iLO, Dell iDRAC).
* Scripting & Automation: Proficient in writing, auditing, and scaling advanced PowerShell modules, PowerShell DSC (Desired State Configuration), Terraform templates, and enterprise configuration deployment via MECM/SCCM or Intune.
* Enterprise Identity & Storage: Experience architecting and integrating core infrastructure components with enterprise Active Directory (AD), Azure AD/Entra ID, Group Policy Object (GPO) frameworks, and mapping high-performance Windows storage via SMB/CIFS protocols and Fibre Channel SAN/NAS arrays.
* Platform Ownership Mindset: Ability to treat infrastructure as a scalable internal product, prioritizing features, upgrades, and technical debt based on business value. Experience in calculating, optimizing, and justifying the Total Cost of Ownership (TCO) for hardware, Microsoft Enterprise Agreements (EA), core-based licensing models, and Software Assurance contracts.
* Stakeholder Influence: Strong communication skills to bridge technical execution with leadership priorities, collaborating across InfoSec, Network, and Applications teams. Act as the primary technical point of contact for enterprise vendors (Microsoft), managing Microsoft Premier/Unified Support contracts, escalations, and technical alignment. Capability to manage an infrastructure backlog, deciding when to prioritize technical debt (e.g., OS version upgrades, security baselines) versus onboarding new business capabilities.
* Lifecycle & Continuity Management: Experience architecting high-availability (HA) via Windows Server Failover Clustering (WSFC) and disaster recovery (DR) solutions tailored to on-premise constraints. Orchestrating complex, multi-year migration strategies for thousands of Windows servers before versions reach End of Extended Support (EOS/EOL), minimizing business disruption.
It would be ideal if you also:
* Proficient in English, spoken and written B2/C1.
* Experienced working in a financial institution.