Engineer - IT Data Center (Microsoft & Servers Infrastructure) (Mazar)

• Responsible for the operation, administration, security, availability and continuous improvement of ATOMA Microsoft infrastructure, with primary ownership of Windows Server, Active Directory, Microsoft 365, Azure/Entra services, SCCM/WSUS and related enterprise Microsoft platforms. The position also provides cross-platform support for VMware, Linux, enterprise storage, backup, physical server hardware, monitoring and Disaster Recovery to ensure reliable Data Center services across Primary and DR sites.

·         Administer and maintain Windows Server infrastructure and related Microsoft services across Primary and Disaster Recovery Data Centers.

·         Administer Active Directory Domain Services, Group Policy, DNS, DHCP, LDAP integrations, identity services, trusts, replication and domain health.

·         Administer Microsoft 365 services, including Exchange Online, Microsoft Entra ID, authentication, mail flow, Teams, OneDrive, SharePoint and tenant-level operational support within approved responsibilities.

·         Support Azure services and Microsoft Entra integrations used by ATOMA, including identity synchronization, role-based access and hybrid identity components.

·         Administer SCCM/Microsoft Configuration Manager, WSUS, patch management, software deployment, inventory and compliance reporting for Windows servers and approved endpoints.

·         Administer Windows infrastructure services including RDS, IIS, DFS/File Services, PKI/Certificate Services, SMTP and related Microsoft server roles.

·         Support on-premises Exchange/SMTP services and hybrid mail dependencies where applicable, including troubleshooting of mail flow and certificate-related issues.

·         Use PowerShell and approved automation methods to standardize administration, reporting, health checks, user/service operations and repetitive support activities.

·         Monitor Microsoft platform availability, capacity, performance, event logs, replication, service health and security status; take corrective action before business impact occurs.

·         Implement approved Microsoft security baselines, hardening standards, privileged access controls, patching and remediation actions in coordination with Information Security.

·         Manage Microsoft-related SSL/TLS certificates, PKI dependencies, service certificates and renewal/deployment activities in coordination with application and security teams.

·         Provide Tier 2/Tier 3 support for major Windows, Microsoft 365, Azure/Entra, SCCM and identity incidents; perform root-cause analysis and preventive actions.

·         Administer and support Veeam Backup and Recovery for Windows Server, Active Directory and other Microsoft workloads, including backup jobs, repositories, schedules, retention, monitoring, troubleshooting and restore operations.

·         Perform regular backup and restore validation using Veeam and Veritas NetBackup to ensure recoverability of Microsoft infrastructure services.

·         Administer and support enterprise Privileged Access Management (PAM) solutions, including PAM360 or equivalent platforms, for secure administrative access to Windows Server, Active Directory, Microsoft infrastructure and Data Center systems.

·         Manage privileged accounts, password vaulting, administrative access policies, session controls and privileged-access audit logs.

·         Support Microsoft DNS integration with Pi-hole DNS infrastructure, including conditional forwarding, upstream DNS configuration, name-resolution troubleshooting and coordination with the Linux infrastructure engineer.

·         Support VMware vSphere/ESXi/vCenter operations, virtual machine provisioning and troubleshooting as a secondary responsibility and provide cross-coverage to the virtualization team.

·         Provide operational support for enterprise Linux servers, storage platforms, backup jobs and Data Center server hardware when required for incident recovery or cross-team coverage.

·         Support Dell, HPE and Huawei server platforms, including hardware health monitoring, firmware/driver coordination, warranty troubleshooting and vendor escalation.

·         Participate in backup and restore validation using enterprise backup platforms, and ensure Microsoft workloads are protected according to approved backup and retention requirements.

·         Participate in Disaster Recovery planning, testing and recovery of Windows, identity, Microsoft 365 integration and supporting infrastructure services.

·         Maintain accurate system documentation, build standards, configuration records, architecture diagrams, operational procedures and knowledge-base articles.

·         Follow ITIL-aligned incident, problem and change management processes and ensure assigned tickets, changes and actions are documented and closed within agreed service levels.

·         Provide 24x7/on-call support when required for critical Microsoft infrastructure incidents, maintenance activities or Data Center/DR operations.

Education:

·         Education: Bachelor's degree (BCS) in Computer Science, Information Technology, Computer Engineering or a related field from a reputable university of Afghanistan or abroad.

Experience:

·         Minimum 8+ years of relevant experience in Enterprise Infrastructure and Data Center Operations, including hands-on experience in a telecommunications company or telecom service-provider environment. Strong practical experience in Microsoft Windows Server administration, Active Directory, Microsoft 365, Azure/Entra, SCCM/WSUS and enterprise Microsoft services is required. Experience with VMware, Linux, enterprise storage, backup and server hardware is required for cross-platform support. Experience in supporting 24x7 mission-critical infrastructure and Disaster Recovery operations is required.

Training & Preferred Certifications:

·         MCSE / Microsoft Certified Solutions Expert (legacy) or current Microsoft Windows Server / Windows Server Hybrid administration certification

·         MCP / Microsoft Certified Professional (legacy) or equivalent Microsoft role-based certification

·         Microsoft 365 administration certification (Microsoft 365 Certified or equivalent)

·         Microsoft Azure Administrator / Azure Fundamentals or equivalent Azure certification

·         Microsoft Security, Identity or Entra-related certification is an advantage

·         VMware VCP, Linux administration, ITIL Foundation or fundamental networking certification is an advantage

Interested Afghan nationals can send their applications and resumes (with three valid references) by Sep 25, 2026.

Please mention the name of the position and your province in your e-mail subject line.

Only the applications received from the individuals residing in the mentioned province who meet the requirements will be considered.

Applications received after the deadline and those that do not meet the requirements mentioned above will not be considered.