Senior Infrastructure Engineer- remote
Posted Updated 7
views
Summary
Senior infrastructure engineer on a 3-month (extendable) remote project to safely decommission legacy Windows domain servers: rehearsing a forest restore, migrating DNS and database/service accounts, transferring FSMO roles, and demoting domain controllers. Core tech: Active Directory/AD DS, DNS, Entra, SQL auth/gMSA, Azure IaaS.
Project duration: 3 months, with the possibility of extension
Mission
Safely decommission the old domain servers after migrating all remaining dependencies and services.
Responsibilities
- Rehearse a full restore of the old directory in a test environment.
- Move the name-resolution service (DNS) off the old servers.
- Clean up the old directory and take a full backup export before teardown.
- Hand over the special roles of the domain servers and switch the three domain servers off one by one, including FSMO transfer and demotion.
- Move the management servers to a setup that no longer requires the old domain.
- Decide with the client what happens to the 52 unknown server records.
- Move database and service accounts off old Windows logins.
- Strong knowledge of Active Directory Domain Services (AD DS), including:
- FSMO
- Replication
- Metadata cleanup
- Forest restore
- Domain Controller demotion
- Experience with DNS migration, including:
- Zones
- Conditional forwarders
- Azure Private Endpoints
- Knowledge of Azure IaaS and server lifecycle.
- Knowledge of SQL Windows authentication and gMSA / Managed Identity.
- Working knowledge of:
- AD CS
- DFS / NTFS permissions
- Entra Domain Services
Benefits
- Full access to foreign language learning platform
- Personalized access to tech learning platforms
- Tailored workshops and trainings to sustain your growth
- Medical insurance
- Meal tickets
- Monthly budget to allocate on flexible benefit platform
- Access to 7 Card services
- Wellbeing activities and gatherings