Architect Active Directory Service - Remote (95%)

Requirements

We look forward to your application, stating your availability and your hourly rate for remote and on-site assignments. Sending application documents via unencrypted email can be insecure. Alternatively, they can be sent by post or via online application.

• Fluent German and good English skills.
• Experience with the IT security standard "BSI-Grundschutz".
• Experience in complex Microsoft Active Directory enterprise environments (from 2016 including core variants) with multi-forest and multi-domain structures including geo-redundant replication topologies.
• Experience in creating concepts (architecture concepts, information security concepts, design specifications, PoC result documents, technical support manuals, deployment including data migration). including modeling the architecture in appropriate IT modeling tools such as ARIS or Alfabet.
• Experience in planning and designing Microsoft Active Directory in complex enterprise environments.
• Experience in planning and designing security architectures for privileged administration according to the Microsoft ESAE concept, including the design of a security concept according to the Microsoft Tiering Model in enterprise environments.
• Experience in hardening Microsoft Active Directory, including hardening the protocols NTLM, LDAP, TLS, Kerberos / Keytabs, and SMB in enterprise environments.
• Experience in the design and execution of AD hardening measures using Authentication Silos, Credential Guard / Remote Credential Guard, and Protected Users in enterprise environments.
• Experience in planning, designing, and implementing Privileged Access Workstations (PAW) in the ESAE context in enterprise environments.
• Experience in designing Windows IPSec in the ESAE context in enterprise environments.
• Automation/Scripting/Shell scripting via PowerShell and Ansible.
• Experience in planning, designing, and implementing backup and recovery tools using Microsoft System Center Data Protection Manager (DPM) in enterprise environments.
• Experience in planning, designing, and implementing deployment and server management tools using Microsoft System Center Configuration Manager (SCCM) in enterprise environments.
• Experience in designing and implementing deployment tools using Microsoft Deployment Toolkit (MDT) in enterprise environments.
• Experience in planning, designing, and implementing hypervisor infrastructures using Microsoft Hyper-converged Infrastructure (HCI Clusters) in enterprise environments.
• Experience in planning and designing privileged AD forests for the use of PAM infrastructures in enterprise environments.
• Experience in planning, designing, and implementing Microsoft Public Key Infrastructures (PKI) with Certificate Enrollment Policy Servers and CDP and OCSP Responders in enterprise environments.
• Experience in analyzing and evaluating vulnerabilities in enterprise Active Directory environments and in using the analysis tools PingCastle, BloodHound, and Semperis Purple Knight.
• Experience in monitoring Active Directory as well as in analyzing and evaluating log data using Microsoft SCOM monitoring and IBM QRadar SIEM solutions in enterprise environments.
• Experience in performance analysis and implementation of optimization measures in Active Directory environments based on the architect role in enterprise environments.
• Experience in designing and managing security groups and role-based access control concepts in enterprise environments.
• Experience with agile working methods and frameworks (Scrum, Kanban, or SAFe).
• Experience with incident, change, and release management tools, CMDBs.

Project details

asap

End: 31.12.2030

Remote (95%), Munich

Support as a Solution Architect in the Active Directory Service for various projects.

• Development of relevant architecture and service components according to EPDF and BSI guidelines
• Identification and implementation of automation potentials for Active Directory
• Documentation and maintenance of relevant service and operational documentation
• Documentation and integration of further developed architecture components into release and patch management
• Creation and adaptation of handover documentation for operations
• Analysis and optimization of Active Directory processes and workflows
• Modeling and updating of technical and procedural changes in ARIS and Alfabet
• Evaluation of new Active Directory products including test planning and documentation
• Introduction and further development of solutions in regular operation
• Analysis and processing of compliance issues
• Processing of changes, problems, and incidents for Active Directory
• Start: ab sofort
• Duration: 50 Monate
• Remote: remote
• Location: München, Deutschland, DE
• Languages: German