Windows Server Administrator

Act Digital; Viseu; Presencial; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

A Act Digital procura um Senior Windows Systems Administrator para desenhar, manter e securar infraestruturas Windows empresariais. Você atuará na gestão de AD, GPO, PKI e PAM, com foco em automação, conformidade e excelente operação.

O candidato ideal possui forte experiência com PowerShell, Terraform/Ansible e gestão de patches/em circunstâncias críticas, assegurando disponibilidade e escalabilidade do ambiente.

Qualificações

• 5+ anos gerenciando ambientes Windows Server empresariais.
• Experiência extensa em Active Directory, GPO, DNS e multi‑domínios.
• Automação com PowerShell; IaC com Terraform/Ansible.
• Hardening de segurança, gestão de vulnerabilidades e conformidade.
• Gestão de patching e implantação de software em ambientes corporativos.
• Conhecimento de PAM, PKI e serviços de certificação Windows.

Responsabilidades

• Projetar, manter e assegurar infraestruturas Windows corporativas.
• Automatizar operações com PowerShell e ferramentas IaC.
• Gerir identidades, AD, GPOs e AD Connect/CI.
• Coordinar patching, deployments e monitoramento de performance.
• Contribuir para a continuidade de negócios e resposta a incidentes.

Conhecimentos

Active Directory

GPO

DNS

PowerShell

Terraform

Ansible

Windows Server

IAM / PAM

PKI

LAPS

Ferramentas

SCCM

WSUS

Citrix

Descrição da oferta de emprego

Descrição do cargo

What You'll Be Doing

As a Senior Windows Systems Administrator, you'll play a key role in designing, maintaining, and securing enterprise Windows infrastructure while driving automation and operational excellence.

Identity & Active Directory

• Administer and maintain large-scale, multi-domain Active Directory environments, including Domain Controllers, Organizational Units, Group Policy Objects (GPOs), trusts, DNS integration, and security groups.
• Design and manage identity lifecycle processes, including automated Joiner, Mover, and Leaver (JML) workflows.
• Implement and maintain security best practices using LAPS, Group Policy, and Active Directory hardening.

Privileged Access & Security

• Administer Privileged Access Management (PAM) platforms, including privileged account onboarding, vault administration, credential lifecycle management, and secure authentication integration.
• Manage enterprise Public Key Infrastructure (PKI) and Windows Certificate Services, including certificate issuance, renewal, automation, and SSL/TLS lifecycle management.
• Implement Windows Server hardening aligned with recognized security standards such as:
• CIS Benchmarks
• NIST
• ANSSI
• Microsoft Security Baselines
• PingCastle recommendations
• Support vulnerability remediation and security compliance initiatives across enterprise infrastructure.

Infrastructure Automation

• Develop automation using PowerShell and Infrastructure as Code (IaC) tools to simplify administration, improve consistency, and reduce manual operations.
• Contribute to infrastructure provisioning and configuration management using tools such as Terraform and Ansible.
• Automate operational workflows, reporting, patching, and infrastructure maintenance.

Windows Infrastructure Operations

• Administer Windows Server 2019/2022 environments, including clustering, failover services, and enterprise server infrastructure.
• Manage operating system patching and software deployment using enterprise management platforms.
• Coordinate emergency patching activities while maintaining high service availability.
• Support secure remote administration through technologies such as Remote Desktop Services, Network Level Authentication (NLA), Just-In-Time (JIT) administration, and VPN integration.

Monitoring & Operational Excellence

• Monitor infrastructure health, capacity, availability, and performance using centralized monitoring and observability platforms.
• Perform proactive capacity planning and identify opportunities to improve reliability and operational efficiency.
• Support disaster recovery planning, backup validation, failover testing, and business continuity exercises.
• Produce and maintain high-quality technical documentation, operational procedures, and infrastructure standards.

Collaboration

• Work closely with Infrastructure, Security, Networking, Identity & Access Management, DevOps, and Operations teams to deliver secure and scalable infrastructure solutions.
• Participate in Change Advisory Boards (CAB), incident management, root cause analysis, and continuous service improvement initiatives.
• Contribute to architecture discussions, modernization projects, and cloud transformation initiatives.

What We're Looking For

Required Experience

• 5+ years of experience administering enterprise Windows Server environments.
• Extensive experience managing:
• Windows Server 2019/2022
• Active Directory
• Group Policy (GPO)
• Multi-domain environments
• DNS
• Windows Clustering
• Strong experience with enterprise security and identity management.
• Hands‑on experience with PowerShell automation.
• Experience implementing Infrastructure as Code using Terraform, Ansible, or similar automation tools.
• Strong knowledge of Windows security hardening, vulnerability management, and compliance.
• Experience with enterprise patch management and software deployment platforms.
• Good understanding of networking fundamentals, including:
• TCP/IP
• DNS
• VPN
• Active Directory Sites & Services
• Experience supporting production environments with structured incident, change, and problem management processes.

Technical Stack

Infrastructure

• Windows Server 2019 / 2022
• Active Directory
• Group Policy (GPO)
• LAPS
• DNS
• PKI
• Windows Certificate Services
• SSL/TLS
• Windows Clustering

Security

• Privileged Access Management (PAM)
• CyberArk
• Password Manager Plus
• CIS Benchmarks
• NIST
• ANSSI
• PingCastle
• Audit & Compliance
• Vulnerability Management

Automation

• PowerShell
• Terraform
• Ansible
• YAML
• Python (nice to have)

Infrastructure Management

• WSUS
• SCCM
• Patch Manager Plus
• Ivanti
• Remote Desktop Services
• NLA
• JIT Administration

Monitoring & Observability

• LogicMonitor
• WhatsUP Gold
• PagerDuty
• Coralogix
• Azure Log Analytics

Virtualization

• Citrix (Application Publishing & VDI)

Nice to Have

• Experience with Git version control.
• Familiarity with AI-assisted scripting tools such as Microsoft Copilot.
• Experience with enterprise Citrix environments.
• Experience working in highly regulated industries such as financial services, banking, healthcare, telecommunications, or critical infrastructure.
• Relevant certifications, including:
• Microsoft Certified: Windows Server Hybrid Administrator
• CompTIA Security+
• CyberArk Certified Implementation Specialist