Windows Systems Engineer (Windows Server/Active Directory/CyberArk) - Hybrid Porto (4 days/week[...]

HumanIT Digital Consulting; Porto; Presencial; EUR 21 000 - 26 000; Tempo integral

Resumo da oferta

HumanIT Digital Consulting is seeking a Senior Windows Systems Engineer to join a security-focused infrastructure team in Porto on a hybrid basis. The role emphasizes hands-on management of multi-domain Active Directory, CyberArk vaults, and security hardening across large Windows Server environments.

You will work with IAM, Security, and Network teams across geographies, contributing to incident response and change processes while advancing automation using PowerShell, Ansible, and Terraform.

Qualificações

• 5+ years of hands-on Windows Server administration (2019/2022) and domain controllers.

Responsabilidades

• Own multi-domain Active Directory environments and privileged access management.
• Manage PKI services, server hardening, patching, and DR for production and DR.
• Automate tasks with PowerShell, Ansible, Terraform; support Citrix/VDI environments.

Conhecimentos

Windows Server administration

Active Directory

CyberArk PAM

PowerShell

RDP/NLA

Windows security hardening

Remote access management

distributed teams collaboration

Ferramentas

Ansible

Terraform

WSUS

SCCM

Patch Manager Plus

Ivanti

Citrix VDI

Descrição da oferta de emprego

Windows Systems Engineer (Windows Server/Active Directory/CyberArk) - Hybrid Porto (4 days/week office)

Job Openings Windows Systems Engineer (Windows Server/Active Directory/CyberArk) - Hybrid Porto (4 days/week office)

About the job Windows Systems Engineer (Windows Server/Active Directory/CyberArk) - Hybrid Porto (4 days/week office)

Windows Systems Engineer (Windows Server/Active Directory/CyberArk) - Hybrid Porto (4 days/week office)

ABOUT THE OPPORTUNITY

Our client, a well-established organization operating critical financial market infrastructure, is looking for a Senior Windows Systems Engineer to join its Infrastructure & Security organization. This is a hands-on role operating and securing large, multi-domain Windows Server environments that underpin mission-critical financial systems, working alongside Network, Security, DevOps, and IAM teams across multiple geographies.

PROJECT & CONTEXT

You'll take ownership of multi-domain Active Directory environments, privileged access management, PKI services, server hardening, patching, and disaster recovery for production and DR environments. The role spans day-to-day operations (domain controllers, GPOs, CyberArk vaults, certificate lifecycle, RDP/remote access security) as well as automation and continuous improvement through PowerShell, Ansible, and Terraform. You'll also support Citrix session-based and VDI environments, participate in incident response and CAB processes, and monitor infrastructure health across a distributed, multi-country team.

WHAT WE'RE LOOKING FOR (Required)

• 5+ years of hands-on Windows Server administration, including Windows Server 2019 and 2022, domain controllers, clustering, and enterprise infrastructure
• Advanced Active Directory experience in multi-domain environments: GPOs, LAPS, security groups, trusts, and identity lifecycle (JOINER/LEAVER) workflows
• Hands-on CyberArk PAM and Password Manager Plus experience, including privileged account onboarding and vault administration
• Intermediate to advanced PowerShell scripting skills
• Experience with Ansible, Terraform, and infrastructure-as-code practices for cross-platform automation
• Strong understanding of Windows security hardening, audit logging, vulnerability management, and compliance frameworks (CIS Benchmarks, NIST, etc.)
• Experience with RDP, NLA, Just-In-Time access, VPNs, TCP/IP, DNS, and Active Directory site topology
• Experience with WSUS, SCCM, Patch Manager Plus, Ivanti, and automated software deployment
• Experience with incident response, technical documentation, CAB procedures, and change management
• Ability to work effectively with distributed teams across multiple countries and time zones

NICE TO HAVE (Preferred)

• Windows Certificate Authority / PKI administration and SSL/TLS certificate lifecycle management
• Citrix session-based and VDI environment support, including application publishing
• Experience with monitoring tools such as LogicMonitor, WhatsUP Gold, PagerDuty, Coralogix, or Azure Log Analytics
• Experience with disaster recovery failover testing and backup validation

Note: I omitted the Compensation section — the job description only includes a "Maximum Salary" (€2,100) with no minimum value, and the format requires both to build the €X–€Y/month range.