Senior Windows Engineer, Active Directory and Server Platforms

The Role Moderna is expanding our footprint to deliver the greatest possible impact to people through mRNA medicines. Our Cambridge technology hub server team is responsible for the design, implementation, administration, and support of the server environments that support our research and pharmaceutical production. This role requires deep expertise across all core Windows Server roles and features, including Active Directory, DNS, DHCP, Group Policy, and File/Print services. The ideal candidate is a hands‑on technical expert who excels in troubleshooting, automation, and system optimization to ensure stability, scalability, and security across enterprise systems. Here’s What You’ll Do Own the architecture, health, and security of Active Directory, including forests, domains, trusts, and replication topology. Lead advanced integration and troubleshooting of authentication and identity (Kerberos, NTLM, SPNs, delegation, replication). Design and enforce Active Directory security controls, including tiered administration models (Tier 0/1/2) and privileged access strategies. Architect, manage, and secure enterprise PKI (ADCS), including certificate lifecycle, template governance, and CRL distribution. Define and maintain standards for Group Policy design, DNS architecture, and domain‑joined systems. Own the operational health, lifecycle, and performance of enterprise Windows Server platforms (2016/2019/2022/2025). Lead server lifecycle management, including build standards, patching strategy, compliance, and decommissioning. Drive root cause analysis for complex systems, authentication, and performance issues across distributed environments. Define and enforce standards for server configuration, hardening, monitoring, and resiliency. Develop and maintain automation using PowerShell and related tooling to improve consistency and efficiency. Act as a senior escalation point and technical mentor for other engineers. Participate in escalation‑level on‑call, owning resolution of high‑impact incidents. Here’s What You’ll Need (Basic Qualifications) Bachelor’s degree in computer science, engineering, or related field (or equivalent experience). 3–5 years deploying, securing and maintaining a global Active Directory environment. 7–10 years of professional experience supporting Microsoft Windows Server environments including all roles and features. Proven experience operating enterprise‑scale Windows Server environments, including performance, patching, and reliability. Deep ability to troubleshoot authentication, replication, network, and performance issues. Experience with patch management process and tooling, endpoint protection, and server hardening. Here’s What You’ll Bring to the Table (Preferred Qualifications) Microsoft certifications (AZ800/AZ801, SC300, MCSA, MCSE, or equivalent). Experience implementing Active Directory security best practices (tiering models, privileged access controls, hardening). Experience working in hybrid on‑premises and cloud environments (VMware, AWS, Azure). Proficient with Microsoft and third‑party monitoring and management tools. Experience in regulated environments (GXP, DISA‑STIG, CIS, PCI, etc.). Ability to work independently, develop long‑term strategic infrastructure enterprise goals. Pay & Benefits Best‑in‑class healthcare coverage, plus voluntary benefit programs to support your unique needs. A holistic approach to well‑being, with access to fitness, mindfulness, and mental health support. Family planning benefits, including fertility, adoption, and surrogacy support. Generous paid time off, including vacation, volunteer days, sabbatical, global recharge days, and a discretionary year‑end shutdown. Savings and investment opportunities to help you plan for the future. Location‑specific perks and extras. The salary range for this role is $130,800.00 – $209,400.00 (for positions that may be performed in California, the expected salary range is $167,400.00 – $192,600.00, which reflects the range permitted under California Labor Code requirements). This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. An individual’s position within the salary range will be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, experience, skills, performance, and business or organizational needs. The successful candidate may be eligible for an annual discretionary bonus, other incentive compensation, or equity award, subject to company plan eligibility criteria and individual performance. Equal Opportunities Moderna is committed to equal employment opportunity and non‑discrimination for all employees and qualified applicants without regard to a person’s race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. Moderna is an E‑Verify Employer in the United States. We consider qualified applicants regardless of criminal histories, consistent with legal requirements. Accommodations Moderna is committed to offering reasonable accommodations to qualified job applicants with disabilities. Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations team at View email address on click.appcast.io. Export Control Notice This position may involve access to technology or data that is subject to U.S. export control laws, including the Export Administration Regulations (EAR). As such, employment is contingent upon the applicant’s ability to access export‑controlled information in accordance with U.S. law. Due to the nature of the work and regulatory requirements, only individuals who qualify as U.S. persons (citizens, permanent residents, asylees, or refugees) are eligible for this position. For this role, Moderna is unable to sponsor non‑U.S. persons to apply for an export control license. #J-18808-Ljbffr BioSpace