IT Infrastructure Engineer – Active Directory, Entra ID

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Administer and enhance Active Directory: domain controllers, replication, trust relationships, organizational unit structure, and group policies.

• Ensure the availability of domain services, diagnose authentication, replication, and policy application issues.

• Manage accounts, groups, and delegation of administrative privileges in accordance with the principle of least privilege.

• Maintain PKI: certification authorities, certificate templates, their issuance, renewal, and revocation.

• Administer ADFS and support application integrations with authentication services.

• Implement security measures for Active Directory in collaboration with the information security team.

• Participate in updates, migrations, backups, and recovery checks of Identity services.

• Automate routine operations and checks using PowerShell.

• Investigate complex incidents, resolve root causes, and document technical solutions.

⛳️ Requirements

• Higher education in information technology, computer science, cybersecurity, or a related technical field.

• At least 3 years of hands-on experience administering Active Directory and Windows Server.

• Strong knowledge of AD DS: domains and forests, domain controllers, FSMO roles, replication, trust relationships, and GPOs.

• Understanding of DNS operations in a domain environment, as well as Kerberos, LDAP/LDAPS, and NTLM protocols.

• Practical experience with PKI and AD CS, including an understanding of the lifecycle of digital certificates.

• Familiarity with single sign-on (SSO) principles, federated authentication, and ADFS operations.

• Skills in writing PowerShell scripts for administration, diagnostics, and automation.

• Knowledge of privileged access protection approaches, change auditing, and domain service recovery.

• Conversational English sufficient for discussing technical issues with colleagues and vendor support, as well as reading documentation and correspondence.

• Ability to independently analyze complex problems, assess the impact of changes, and drive tasks to completion.

• Experience with Microsoft Entra ID and hybrid identity will be an advantage.

• Experience integrating Linux/UNIX systems and enterprise applications with Active Directory will be a plus.

• Practical experience with NDES and automated certificate issuance will be beneficial.

• Participation in Active Directory migrations, PKI upgrades, or identity service security enhancement projects will be an asset.

🏝️ Benefits

• Office or remote – the choice is yours.

• Remote onboarding.

• Performance bonuses for everyone (annual or quarterly, depending on the role).

• Employee training: numerous internal resources and partner programs, as well as a dedicated library.

• Health and life insurance for employees.

• Wellbeing program and corporate psychologist.

• Compensation for mobile communication expenses with Kyivstar.