Senior Windows Engineer, Active Directory and Server Platforms

Overview Moderna is expanding its footprint to deliver impact through mRNA medicines. Our Cambridge technology hub server team is responsible for designing, implementing, administering, and supporting the server environments that enable research and pharmaceutical production. Responsibilities Own the architecture, health, and security of Active Directory, including forests, domains, trusts, and replication topology. Lead advanced integration and troubleshooting of authentication and identity (Kerberos, NTLM, SPNs, delegation, replication). Design and enforce Active Directory security controls, including tiered administration models (Tier 0/1/2) and privileged access strategies. Architect, manage, and secure enterprise PKI (ADCS), including certificate lifecycle, template governance, and CRL distribution. Define and maintain standards for Group Policy design, DNS architecture, and domain‑joined systems. Own the operational health, lifecycle, and performance of enterprise Windows Server platforms (2016/2019/2022/2025). Lead server lifecycle management, including build standards, patching strategy, compliance, and decommissioning. Drive root‑cause analysis for complex systems, authentication, and performance issues across distributed environments. Define and enforce standards for server configuration, hardening, monitoring, and resiliency. Develop and maintain automation using PowerShell and related tooling. Act as senior escalation point and technical mentor for other engineers. Participate in escalation‑level on‑call, owning resolution of high‑impact incidents. Qualifications Basic Qualifications Bachelor’s degree in computer science, engineering, or a related field (or equivalent experience). 3–5 years of experience deploying, securing, and maintaining a global Active Directory environment. 7–10 years of professional experience supporting Microsoft Windows Server environments, including all role and features. Proven experience operating enterprise‑scale Windows Server environments, including performance, patching, and reliability. Deep ability to troubleshoot authentication, replication, network, and performance issues. Experience with patch management process and tooling, endpoint protection, and server hardening. Preferred Qualifications Microsoft certifications (AZ800/AZ801, SC300, MCSA, MCSE, or equivalent). Experience implementing Active Directory security best practices (tiering models, privileged access controls, hardening). Experience working in hybrid on‑premises and cloud environments (VMware, AWS, Azure). Proficiency with Microsoft and third‑party monitoring and management tools. Experience in regulated environments (GXP, DISA‑STIG, CIS, PCI, etc.). Ability to work independently and develop long‑term strategic infrastructure goals. Benefits Best‑in‑class healthcare coverage plus voluntary benefit programs. Holistic wellness program with access to fitness, mindfulness, and mental health support. Family‑planning benefits, including fertility, adoption, and surrogacy support. Generous paid time off—including vacation, volunteer days, sabbatical, global recharge days, and discretionary year‑end shutdown. Savings and investment opportunities. Location‑specific perks and extras. Pay & Benefits The salary range for this role is $130,800.00 – $209,400.00. This range reflects the lowest to highest salary we believe we would pay for this role at the time of posting. Salary determination will be based on competencies, education, qualifications, certifications, experience, skills, performance, and business needs. The successful candidate may be eligible for an annual discretionary bonus, other incentive compensation, or equity award. EEO Statement Moderna is committed to equal employment opportunity and non‑discrimination for all employees and qualified applicants without regard to race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other protected characteristic under applicable law. We consider qualified applicants regardless of criminal histories, consistent with legal requirements. Moderna is an E‑Verify Employer in the United States. We are also committed to offering reasonable accommodations to qualified applicants with disabilities. #J-18808-Ljbffr Moderna