Take end-to-end accountability for Nordea’s core on-premise enterprise Windows ecosystem. Define its roadmap, technical standards and lifecycle management across physical servers, virtualization and private cloud, using technologies including Windows Server, PowerShell DSC, Terraform and MECM/SCCM.
Nice to have:
Deep knowledge of Windows Server internals, including Registry architecture, LSASS, WMI/CIM providers, PerfMon analysis, crash dump analysis and system initialization or boot troubleshooting.
Experience hosting Windows Server workloads on enterprise hypervisors (VMware, Hyper-V, Azure Stack HCI) and managing physical server hardware lifecycle interfaces (HPE iLO, Dell iDRAC).
Proficiency writing, auditing and scaling PowerShell modules, PowerShell DSC, Terraform templates, and configuration deployments through MECM/SCCM or Intune.
Experience architecting and integrating infrastructure with Active Directory (AD), Azure AD/Entra ID, Group Policy Object (GPO) frameworks, and SMB/CIFS and Fibre Channel SAN/NAS storage.
Ability to treat infrastructure as a scalable internal product and prioritize features, upgrades and technical debt based on business value.
Experience calculating, optimizing and justifying TCO for hardware, Microsoft Enterprise Agreements (EA), core-based licensing and Software Assurance contracts.
Strong communication skills to collaborate across InfoSec, Network and Applications teams and align technical execution with leadership priorities.
Experience managing infrastructure backlogs, vendor support contracts and technical escalations.
Experience architecting high availability with Windows Server Failover Clustering (WSFC) and disaster recovery solutions for on-premise environments.
Experience orchestrating multi-year migrations for thousands of Windows servers before EOS/EOL, minimizing business disruption.
Nice to have:
Spoken and written English at B2/C1 level.
Experience working in a financial institution.
Platform Lifecycle & Roadmap Strategy:
Define, publish and execute the multi-year technical roadmap for enterprise Windows Server platforms.
Manage version lifecycles, baseline configurations and LTSC migration paths to address technical debt before EOL or EOS dates.
On-Premise Architecture & Standardization:
Design, build and govern enterprise Windows Gold Image blueprints (WIM/ISO) for bare-metal deployments and hypervisors such as VMware and OpenShift.
Establish standardized OS profiles, registry baselines and core subsystem configurations across corporate data centers.
Infrastructure Automation & Orchestration:
Design and implement automated Windows provisioning pipelines and configuration management frameworks.
Apply Infrastructure as Code principles using PowerShell DSC, Terraform and Microsoft Endpoint Configuration Manager (MECM/SCCM) to ensure configuration consistency and eliminate manual drift.
Security, Compliance & Patch Governance:
Define platform hardening baselines aligned with Microsoft Security Baselines, CIS Benchmarks, NIST and internal InfoSec policies through Group Policy Objects (GPOs) and Intune.
Architect and oversee automated patch deployment to remediate vulnerabilities within corporate SLAs without disrupting application availability.
Capacity, Performance & Compute Planning:
Monitor and analyze enterprise-wide Windows infrastructure telemetry to forecast compute, memory and storage requirements.
Work with hardware engineering to evaluate server technology and guide hardware refresh cycles.
Identity, Networking & Storage Integration:
Govern integration standards between the Windows Server platform and centralized enterprise infrastructure, including Active Directory / Entra ID, Microsoft DNS, DHCP and enterprise storage protocols.
Vendor & Total Cost of Ownership (TCO) Management:
Act as the primary technical interface for Microsoft.
Manage Microsoft Enterprise Agreements, software assurance benefits and core-based licensing models, and handle high-severity Microsoft Premier/Unified Support escalations.
The recruitment process includes preliminary CV selection, an online interview with the hiring leader and a background check.