Active Directory Administrator (L3 Support)

MPower Plus; Województwo pomorskie; Hybrid; PLN 70,000 - 90,000; Full time

Job summary

MPower Plus is seeking an experienced Active Directory Administrator in Gdansk, Poland, on a hybrid contract basis. The role covers AD DS administration across multi-domain environments, GPO design, RBAC/PAM enforcement, and Azure AD integration within a security-conscious setup.

The ideal candidate will handle AD replication issues, forest recovery planning, and 24x7 shift readiness as required, with strong documentation and communication skills.

Qualifications

• Strong expertise in Active Directory design and administration across multi-domain environments.
• Experience implementing domain/forest trusts, FSMO roles, sites, replication, and schema upgrades.
• Hands-on troubleshooting of AD replication, DNS, and trust failures.

Responsibilities

• Lead administration of AD DS across multi-domain/multi-forest environments.
• Design and manage AD structure including domain/forest trusts, FSMO roles, sites, replication, and schema upgrades.
• Hands-on troubleshooting of AD replication, DNS, and trust failures.
• Manage GPO design, optimization, and change lifecycle.
• Ensure RBAC, Least Privilege, and PAM are enforced.
• Integrate with Azure AD / Entra ID, SSO / MFA solutions, ADFS / SAML / OAuth.
• Implement security benchmarks per CIS and project standards.
• Monitor and respond to AD-related security incidents including Kerberos issues.
• Support audits and ensure health of system state backups and Azure AD Connect sync.
• Disaster recovery planning for AD forest and periodic DR drills.

Skills

Active Directory

AD DS Admin

Azure AD / Entra ID

GPO design

RBAC / PAM

ADFS / SAML

Windows Server

DNS / Kerberos

AD replication

ADCS / PKI

Tools

Windows Server

DFS

DHCP

ADFS

Azure AD Connect

Job description

We are currently hiring for a leading IT client based in Poland on a contract basis.

Please find the role details below, and let me know if you are interested.

Job Role: Active Directory Administrator

Job Location: Gdansk, Poland / Hybrid (3 days onsite / week- Must)

Contract Duration- 6 Months+ (Up to 12 Months +)

Active Directory Job Responsibility:

Skills-

• Lead administration of AD DS across multi-domain/multi-forest environments.
• Design and manage AD structure including Domain/forest trust relationships, FSMO roles, Sites and replication strategy & Schema extensions and upgrades
• Hands on experience and strong troubleshooting skill in AD replication, Sites, KCC, etc., experience in planning and implementation of Active Directory Replication.
• Manage GPO design, optimization, hardening, and change lifecycle.
• Perform advanced troubleshooting of authentication, DNS-integrated issues, replication delays, and trust failures.
• Ensure enforcement of Role-Based Access Control (RBAC), Least Privilege, and Privileged Access Management (PAM).
• Manage integration with: Azure AD / Entra ID, SSO / MFA solutions, Federation Services (ADFS) / SAML / OAuth
• Implement and maintain security benchmark as per project standard /CIS.
• Monitor and respond to AD-related security incidents such as Kerberos abuse, ticket manipulation, AD privilege escalation attempts, Audit trail gaps and anomalies
• Support audits and ensure enforcement of security baselines, password policies, account policies and fine grain policies,
• Must have worked on deleted objects restoration.
• Must have hands on experience on getting AD reports like, active users and other AD reports.
• Basic understanding of ADCS, Root CA, subordinate CAs, creation of CSRs, knowledge on CRL
• Must have knowledge on all the Ports.
• Sound knowledge on NTP servers and troubleshooting.
• Strong Understanding of ADSI edit concepts.
• Manage AD Forest recovery plans and periodic disaster recovery drills as per ISO compliance.
• Ensure health of system state backups, Azure AD Connect sync validations, and replication integrity.
• Knowledge on ADFS is an added advantage.
• Enhance customer satisfaction by responding to all customer filed issues specific to AD & Windows and providing relief either through self or by driving visibility of the issues upstream to ensure they get fixed.
• Improve product supportability and serviceability by actively participating in new design development to provide feedback to drive increased stability of AD and Windows platforms for enhanced customer satisfaction.
• An ability to learn new technologies quickly good time management skills with strong documentation skills.
• Good communication skills both written and verbal.
• Identify opportunities for efficiencies in work process and innovative approaches to completing scope of work.
• Work with Local & Global Teams
• Perform in 24 x 7 environment in shift roster and attend calls whenever assigned
• Willing to Work on Shifts based on the projects need
• Experience in providing RCAs for Priority tickets.
• To provide technical support to clients, respond promptly to issues reported by clients, conducting root cause analysis and going through various testing scenarios for thorough resolution.
• Develop and maintain operational documentation and specifications on system builds, disaster recovery, and standard operating procedures.
• Drive root cause analysis and provide feedback to improve customer architecture changes.
• Drive customer escalated issues to closure by providing workarounds and fixes in a timely manner.
• Good ITIL knowledge

Wintel

• Good knowledge on OS troubleshooting, experience in OS performance issues.
• Good Knowledge and troubleshooting skills on Windows server (Blue Screen Errors, performance issues, permissions issues)
• Good troubleshooting skill in Windows server recovery.
• Understanding and troubleshooting skill of Windows Cluster.
• Participate in Windows Server patch management, cluster validation and performance optimization.
• Expert knowledge in DHCP, Scopes and understanding super scopes and troubleshooting of any issues.
• Must have hands on experience in File share servers and DFS and troubleshooting.

Required:

• Need Immediate or 2 to 3 weeks joiner.
• Work Permit Holder for Poland or EU Nationals.