Senior Windows Platform Engineer

Senior Windows Platform Engineer

High‐Level Responsibilities:

• Provide operational support and engineering ownership for entire Windows Server platforms across production and non‐production environments (hosted in AWS)

• Build, configure, patch, and maintain Windows Server operating systems leveraging gold images in alignment with Optum and MCNA standards

• Support BI and reporting team's platforms running on Windows, including server provisioning, OS upgrades, patching, and platform coordination for systems such as IBM Cognos Analytics, Quadient, and related gateway, application, and database components

• Manage Active Directory–related services supporting Windows applications and platforms, including domain integration, AD‐LDS / LDAP services, service accounts, and access coordination

• Own and administer the Privileged Access Management (PAM) solution (Delinea) for Windows platforms, including onboarding servers, managing privileged access workflows, and supporting audits and security reviews

• Execute Windows operating system upgrades and lifecycle management (e.g., Windows Server 2016 → 2019/2022) driven by security, compliance, and vulnerability requirements

• Support Windows‐based security tooling, including agent deployment, maintenance, and troubleshooting (e.g., Trend Micro, Tanium, Microsoft Defender, Bloodhound, Flexera)

• Partner with security teams to remediate Windows‐specific vulnerabilities and validate security control effectiveness

• Participate in patch management, image‐rotation, and system hardening activities, including contributions to the Optum 180‐day image‐rotation initiative

• Maintain accurate platform documentation, build standards, and operational procedures to support audits, repeatability, and cross‐team continuity