Role: Active Directory/Security – Identity & Access
Location: Warsaw, Poland
Type of Hiring: Permanent/Contract
Rate/Salary: Open

Job Description:
Broad knowledge of on-premises products with deep understanding of Active Directory, Windows Server, Identity, Networking, Security
Active Directory Domain Services, design, implementation, optimization, upgrade and administration
Active Directory troubleshooting (AD replication, SYSVOL replication, DNS, performance, etc.)
Domain Name System (DNS), NTLM/Kerberos Authentication and Authorization via access token and access control list (ACL)
Active Directory Disaster Recovery
Group Policies implementation, design and troubleshooting
Experience with RDSWVD
Practical knowledge of TCP/IP (OS firewalls configuration) and networking configuration/troubleshooting (IP, DHCP, DNS, WINS, routing, Windows Firewall, NAT, ports, NPS) etc.
Securing Active Directory, implementation of Active Directory Tiered Administrative Model, restrictions and delegation
Mitigating weak configurations found in Active Directory Domain Services infrastructure
Implementing Microsoft Security Baselines
Privileged Access Workstation (PAW) deployment techniques and maintenance

Experience with any of the following areas would also be very beneficial (the more the better):
Experience with Microsoft Hyper-V Virtualization technology
o Knowledge of Microsoft System Center Virtual Machine Manager
o Knowledge of networking technologies such as VLANs, routing, packet filtering
o Knowledge of storage technologies such as SAN, NPIV, MPIO, storport internals and troubleshooting
o Knowledge of Windows Server performance troubleshooting (perfmon, WPT/xperf)
Windows Clustering
Powershell Scripting
Certificate Authority/PKI
Forefront Identity Manager (FIM) / Microsoft Identity Manager (MIM)
Hybrid Identity – integrating on-premises Active Directory with Azure Active Directory (using eg. Azure AD Connect, Active Directory Federation Services)
Designing, implementing and securing Azure Active Directory
Azure IaaS platform, Azure Governance
MFA/Microsoft Hello for Business
Microsoft Defender for Endpoint