Active Directory & Entra ID Engineer (Remote)

Project overview

For an ongoing identity security project as part of a comprehensive IT transformation, we are looking for an experienced Active Directory & Entra ID Engineer. The software company is modernizing its Microsoft infrastructure and needs support in the security-related restructuring of the hybrid Active Directory and Entra ID landscape.

Responsibilities

• Introduction and implementation of a Microsoft AD Tiering model
• Restructuring of the Active Directory and Entra ID environment
• Migration of users, computers, groups, and servers into new OU structures
• Operational implementation with coordination between IT and affected business departments
• AD hardening and identity security measures

Requirements

Advantageous:

Windows LAPS, gMSA, Kerberos, Microsoft Intune, MFA, Windows Hello for Business, Microsoft Graph, BitLocker, PIM, EPM, AD CS, and PingCastle.

German and English at a very good level (C1+)

Assignment: Remote, Full-time, from now until 28.02.2027. Payment terms 30 days.

• At least 5 years of practical experience with Active Directory and hybrid Microsoft identity environments
• Sound knowledge of AD Tiering, OU structures, Group Policies, and authorization concepts
• Confident command of Microsoft Entra ID and Entra Connect
• PowerShell skills for automating administrative tasks
• Experience with AD hardening and identity security
• Strong communication skills, especially for user migrations

Project details

• Start: asap
• Duration: asap - 28.02.2027
• Remote: onsite
• Location: DE
• Languages: German