IT Infrastructure Engineer

Kyivstar; Kentucky; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Office or remote work options

Remote onboarding

Performance bonuses

Learning opportunities

Health and life insurance

Wellbeing program

Mobile communication reimbursement

Job summary

A leading hybrid IT company is looking for a senior engineer to manage enterprise identity and messaging platforms in a hybrid Microsoft environment. Responsibilities include administering Active Directory, managing Exchange Hybrid, and maintaining Public Key Infrastructure. This role offers flexibility with the option to work remotely and provides benefits like performance bonuses, training opportunities, and health insurance. Ideal candidates should have strong Windows Server expertise and intermediate English skills.

Qualifications

• Strong hands-on expertise in Active Directory.
• Proven experience with Exchange (on-prem) and Exchange Hybrid.
• Solid practical experience with PKI management.
• Production experience with Microsoft 365 in hybrid setups.
• Knowledge of ADFS and claims-based authentication.
• Robust background in Windows Server administration.
• Ability to work independently and take ownership.
• Intermediate English proficiency or higher.

Responsibilities

• Lead administration of Microsoft Active Directory.
• Manage Exchange Hybrid and ensure system reliability.
• Design and maintain Public Key Infrastructure.
• Administer Microsoft 365 identity services.
• Support ADFS and ensure secure access control.
• Collaborate on identity-related integrations.
• Drive improvement of messaging architectures.
• Drive continuous improvement of identity and messaging architectures.

Skills

Active Directory administration

Exchange management

Public Key Infrastructure (PKI)

Microsoft 365 / Entra ID

ADFS / SSO implementation

Windows Server expertise

Independence and leadership

Intermediate English proficiency

Education

Bachelor's degree in Computer Science or related

Tools

PowerShell

Microsoft 365 Admin Center

Job description

We are looking for a senior, hands‑on engineer to own and evolve our enterprise identity and messaging platforms in a hybrid Microsoft environment.

About us

Kyivstar.Tech is a Ukrainian hybrid IT company and a resident of Diia.City. We are a subsidiary of Kyivstar, one of Ukraine's largest telecom operators.

Our mission is to change lives in Ukraine and around the world by creating technological solutions and products that unleash the potential of businesses and meet users' needs.

Over 500+ KS.Tech specialists work daily in various areas: mobile and web solutions, as well as design, development, support, and technical maintenance of high‑performance systems and services.

We believe in innovations that truly bring quality changes and constantly challenge conventional approaches and solutions. Each of us is an adherent of entrepreneurial culture, which allows us never to stop, to evolve, and to create something new.

What you will do

• Lead the administration and evolution of Microsoft Active Directory in a complex enterprise environment.
• Own Exchange and Exchange Hybrid (on‑premises and Exchange Online), ensuring reliability, security, and seamless coexistence.
• Design, operate, and maintain Public Key Infrastructure (PKI), including certificate lifecycle management.
• Administer and develop Microsoft 365 / Entra ID identity services, roles, and access models.
• Implement and support ADFS / SSO and federation scenarios for internal and external applications.
• Ensure secure access control, authentication, and authorization across platforms.
• Collaborate with network, platform, and application teams on identity‑related integrations.
• Drive continuous improvement of identity and messaging architectures and operational practices.

Qualifications and experience needed

• Strong hands‑on expertise in Active Directory (architecture, trusts, GPO, troubleshooting).
• Proven experience with Exchange (on‑prem) and Exchange Hybrid.
• Solid practical experience with PKI (Root/Issuing CAs, templates, CRL/OCSP).
• Production experience with Microsoft 365 / Entra ID in hybrid environments.
• Practical knowledge of ADFS / SSO, federation, and claims‑based authentication.
• Strong Windows Server background in enterprise environments.
• Ability to work independently, take ownership, and act as a technical lead.
• English proficiency: Intermediate or higher.

What we offer

• Office or remote — it's up to you. You can work from anywhere, and we will arrange your workplace.
• Remote onboarding.
• Performance bonuses for everyone (annual or quarterly — depends on the role).
• We train employees: the opportunity to learn through the company’s own library, internal resources and programs from partners.
• Health and life insurance.
• Wellbeing program and corporate psychologist.
• Reimbursement of expenses for Kyivstar mobile communication.