PKI, AD Architect and Configuration Manager

Project overview

DIO, through the joint IT program, is responsible for establishing a new common IT platform that will replace the current platforms in DIO.

Description of Delivery

The PKI, AD Architect and Configuration Manager will be responsible for both the design and practical configuration of the Public Key Infrastructure (PKI) and Active Directory (AD) environment. The resource will ensure that the PKI and AD structure is modern, secure, and scalable, supporting the need for certificate management, organization, access control, and integration with other infrastructure.

The work includes mapping, analysis, documentation, solution design, and implementation of PKI and AD-related components – including domains, organizational units (OUs), groups, group policies (GPOs), rights models, and delegated administration. Windows Server provides a central platform for both Active Directory Certificate Services (PKI) services and the AD infrastructure.

The role will also involve practical implementation of changes, including configuration of PKI and AD, setup of GPOs, testing, and collaboration with migration teams for a secure transition from the existing to the new structure.

The PKI, AD Architect and Configuration Manager is responsible for:

Competency Requirements

Authorization: Limited

A security agreement must be entered into between the consultant's company and the program.

The content/tasks of the development assistance must be adaptable if necessary.

Start Date: ASAP

• Designing the future PKI and AD structure based on business requirements, security principles, and technical best practices
• Configuring domains, OUs, groups, and GPOs in line with approved design
• Quality assurance and implementation of changes in the AD environment, including rights management and governance models
• Establishing and maintaining standards and procedures for the operation and administration of PKI and AD
• Documenting both design choices and technical implementation
• Facilitating technical and functional workshops with relevant professional environments
• Contributing to the planning and execution of migration from existing AD environment(s)
• Participating in testing and validation of the solution in collaboration with test and migration teams
• Ensuring secure and stable operations during the transition from the old to the new AD structure
• Mapping existing PKI and AD structures, practices, and use cases
• Preparing and documenting the new structure for AD, including detailed configuration descriptions
• Configuring and setting up GPOs, OU structure, groups, and permissions according to design
• Contributing to the development of access models and delegated administration
• Participating in and leading workshops for requirements gathering and solution discussion
• Preparing and following up on migration plans and test scenarios
• Producing training and information material related to new PKI and AD solutions
• Collaborating closely with security teams and other infrastructure resources for a holistic solution
• Long and solid experience with design and operation of Active Directory in medium to large environments
• In-depth knowledge of GPOs, OU structure, group strategy, and access control
• Long and solid experience with migration and consolidation of AD environments
• Experience with integration between AD and other infrastructure solutions
• Experience with setup and operation of PKI infrastructure
• Experience with documentation and change management in critical environments
• More than 8 years of experience with the tasks
• The minimum formal qualification is a Master's degree or equivalent in the IT field. Long and documented experience can compensate for the Master's degree requirement.

Project details

30.09.2027

Option: The assistance can be extended by agreement in line with the duration of the measures initiated by the joint IT.

Scope: 1,800 hours

Oslo BG6

Candidates are assessed on a rolling basis.

Contact us for a competency matrix

#AHV60922

• Start: flexible
• Duration: 10-12 months
• Remote: onsite
• Location: Oslo, Norway, NO
• Languages: Norwegian