Active Directory / Entra ID Engineer

Nasze wymagania: Minimum 5 years of professional experience after education, including at least 4 years in a similar role English proficiency at B2 level Extensive experience with Active Directory, domain controllers, and Microsoft Entra ID (Azure AD) Extensive hands-on experience with Active Directory, domain controllers, and Microsoft Entra ID (Azure AD), including administration of AD services, Group Policy management, AD Sites and Services, domains and trusts, schema management, replication, security best practices, troubleshooting, PowerShell automation for AD, authentication and authorization processes, DNS, and AD backup and recovery Experience with ticketing systems and ITIL-based change, configuration, and release management processes Proactive attitude, team-oriented mindset, self-motivation, and strong user focus Ability to operate and design in a hybrid environment (AD DS + Entra ID), including identity synchronization and coexistence Readiness to take end-to-end ownership of AD/Entra services (availability, performance, incident and problem management) Strong focus on security best practices (least privilege, tiering, secure delegation, hardened domain controllers) Ability to work within ITIL processes, including change planning, risk assessment, rollback, and validation Automation mindset with strong PowerShell usage (bulk operations, reporting, health checks, scripting standards) Strong troubleshooting skills across AD replication, DNS, authentication, GPO processing, and Entra access/sign-in issues Ability to manage Group Policy governance (ownership, versioning, testing, phased rollout) Experience with AD replication topology and site management (site links, latency optimization, DC placement) Ability to design and manage domains and trusts securely (authentication boundaries, SID filtering, trust hardening) Experience with schema-related changes under strict governance (impact analysis, approvals, testing, rollback planning) Knowledge of AD backup and recovery procedures, including participation in disaster recovery scenarios Strong understanding of AD-integrated DNS and troubleshooting name resolution issues Good understanding of authentication and authorization mechanisms (Kerberos, NTLM, group membership, token behavior) Ability to work in a ticket-driven environment with clear documentation and traceability Strong user-oriented mindset with ability to prioritize based on business impact Strong communication and collaboration skills with both technical and non-technical stakeholders Ability to produce and maintain high-quality documentation (runbooks, SOPs, knowledge base) Experience with monitoring and health checks of AD/Entra environments and acting on trends Understanding of governance, compliance, and security controls (audit, approvals, segregation of duties) O projekcie: In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for an experienced Active Directory / Entra ID Engineer to support and maintain identity services in a hybrid environment. The role focuses on Active Directory, Microsoft Entra ID, and related infrastructure, ensuring high availability, security, and efficient authentication and authorization services across the organization. Location: Warsaw (hybrid model of work) Type of employment: B2B contract or standard employment contract Project languages: English Zakres obowiązków: Active Directory administration Managing and maintaining Active Directory (AD), Microsoft Entra ID, Group Policies, AD Sites and Services, and domain/forest trusts Updating technical documentation and operating procedures Troubleshooting Active Directory, Microsoft Entra ID, and related components Implementing changes in accordance with ICT change management procedures Incident management Designing and implementing cross-system authentication and authorization solutions User access management Performing other duties as assigned by the supervisor Oferujemy: Private medical care with dental care (covering 70% of costs). Family package option possible Multisport card (also for an accompanying person) Life insurance Work with talented engineers on large-scale, technically challenging projects