Opis oferty
NORDEA Bank Abp SA Oddział w Polsce
Warszawa, Polska
Miejsce pracy: Warszawa
About our team
Our Core Engineering Team is the backbone of Nordea global technology ecosystem. We are a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization. We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.
Main responsibilities in this role:
* Platform Lifecycle & Roadmap Strategy: Define, publish, and execute the multi-year technical roadmap for enterprise Windows Server platforms. Manage version lifecycles, core baseline configurations, and long-term servicing channel (LTSC) migration paths to eliminate technical debt before End-of-Life (EOL) or End-of-Support (EOS) dates.
* On-Premise Architecture & Standardization: Design, build, and govern the enterprise Windows "Gold Image" blueprints (WIM/ISO) for bare-metal deployments and hypervisors (VMware, Openshift). Establish standardized OS profiles, registry baselines, and core subsystem configurations across the entire corporate data center footprint.
* Infrastructure Automation & Orchestration: Own the design and implementation of automated Windows provisioning pipelines and configuration management frameworks. Enforce Infrastructure as Code principles using tools like PowerShell DSC, Terraform, and Microsoft Endpoint Configuration Manager (MECM/SCCM) to ensure configuration consistency and eliminate manual drift.
* Security, Compliance & Patch Governance: Define platform hardening baselines in alignment with Microsoft Security Baselines, CIS Benchmarks, NIST, and internal InfoSec policies via Group Policy Objects (GPOs) and Intune. Architect and oversee the automated patch deployment pipeline, ensuring vulnerabilities are remediated within strict corporate SLAs without disrupting application availability.
* Capacity, Performance & Compute Planning: Monitor and analyze enterprise-wide Windows infrastructure telemetry to forecast future compute, memory, and storage requirements. Partner with hardware engineering team to evaluate next-generation server technology and guide hardware refresh cycles based on platform demands.
* Identity, Networking & Storage Integration: Govern the integration standards between the Windows Server platform and centralized enterprise infrastructure. This includes robust Active Directory / Entra ID identity fabrics, core network services (Microsoft DNS, DHCP), and enterprise storage protocols.
* Vendor & Total Cost of Ownership (TCO) Management: Act as the primary technical interface for Microsoft vendor. Manage Microsoft Enterprise Agreements, software assurance benefits, core-based licensing models, and handle high-severity technical Microsoft Premier/Unified Support escalations.
Who you are
Desirable experience and skills (you don't have to have them all, to be a good candidate):
* Enterprise Windows Expertise: Deep knowledge of Windows Server operating system internals (including Registry architecture, LSASS, and WMI/CIM providers), Performance Monitor (PerfMon) analysis, advanced crash dump analysis, and complex system initialization/boot troubleshooting.
* On-Premise Infrastructure: Solid experience hosting Windows Server workloads on enterprise hypervisors (VMware, Hyper-V, Azure Stack HCI) and managing physical server infrastructure hardware lifecycle interfaces (HPE iLO, Dell iDRAC).
* Scripting & Automation: Proficient in writing, auditing, and scaling advanced PowerShell modules, PowerShell DSC (Desired State Configuration), Terraform templates, and enterprise configuration deployment via MECM/SCCM or Intune.
* Enterprise Identity & Storage: Experience architecting and integrating core infrastructure components with enterprise Active Directory (AD), Azure AD/Entra ID, Group Policy Object (GPO) frameworks, and mapping high-performance Windows storage via SMB/CIFS protocols and Fibre Channel SAN/NAS arrays.
* Platform Ownership Mindset: Ability to treat infrastructure as a scalable internal product, prioritizing features, upgrades, and technical debt based on business value. Experience in calculating, optimizing, and justifying the Total Cost of Ownership (TCO) for hardware, Microsoft Enterprise Agreements (EA), core-based licensing models, and Software Assurance contracts.
* Stakeholder Influence: Strong communication skills to bridge technical execution with leadership priorities, collaborating across InfoSec, Network, and Applications teams. Act as the primary technical point of contact for enterprise vendors (Microsoft), managing Microsoft Premier/Unified Support contracts, escalations, and technical alignment. Capability to manage an infrastructure backlog, deciding when to prioritize technical debt (e.g., OS version upgrades, security baselines) versus onboarding new business capabilities.
* Lifecycle & Continuity Management: Experience architecting high-availability (HA) via Windows Server Failover Clustering (WSFC) and disaster recovery (DR) solutions tailored to on-premise constraints. Orchestrating complex, multi-year migration strategies for thousands of Windows servers before versions reach End of Extended Support (EOS/EOL), minimizing business disruption.
It would be ideal if you also:
* Proficient in English, spoken and written B2/C1.
* Experienced working in a financial institution.
Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.
Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.
Please include permit for processing personal data in CV as following:
In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.
The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: https://jobeax.com/link/ynGIXoVFd0lSu8zE
We reserve the right to reply only to selected applications.