Sr IT Infrastructure Engineer

Pracovní nabídka

Sr IT Infrastructure Engineer is responsible for the architecture, security, reliability, and continuous evolution of the organization’s Active Directory environment. This role acts as a senior technical authority for Windows Server–based identity services, operating across multi-domain and multi-forest environments and integrating Active Directory with cloud-based identity platforms in a hybrid setup.

The position focuses on ensuring high availability, security, and performance of authentication services while supporting business needs and strengthening the overall identity infrastructure.

Essential Duties and Responsibilities:

Active Directory Oversight & Strategy

• Lead and manage AD DS across multi-domain and multi-forest environments.
• Design and maintain domain controllers and overall AD architecture.
• Ensure high availability, performance, and lifecycle management.

Hybrid Identity & Cloud Integration

• Design and support hybrid identity solutions (on-prem AD + cloud).
• Manage directory synchronization (Entra ID / Azure AD Connect).
• Support authentication across cloud and on-prem environments.

Core Services (GPO, DNS, Troubleshooting)

• Manage Group Policy and AD-integrated DNS.
• Troubleshoot complex authentication and directory issues.
• Provide advanced escalation support for critical incidents.

• Security, Compliance & Governance
• Strengthen AD security and access control.
• Support backup, recovery, audits, and compliance activities.
• Collaborate with security teams on risk mitigation.

Automation, Leadership & Collaboration

• Automate processes using PowerShell.
• Act as SME and support team development.
• Collaborate across infrastructure, cloud, and security teams.

Knowledge, Skills and Abilities:

• Active Directory & Identity: Strong expertise in AD DS, Group Policy, DNS, and replication.
• Windows Server: Solid experience with Windows Server environments and domain controller management.
• Hybrid Identity: Understanding of hybrid identity and directory synchronization concepts.
• Troubleshooting: Advanced analytical and problem-solving skills.
• Automation: Experience with PowerShell scripting.
• Security & Compliance: Knowledge of identity security and access control principles.

Educational/Certification Requirement:

• Bachelor’s Degree in Computer Science, Information Systems, or related field (or equivalent experience).
• Microsoft certifications related to Windows Server or identity technologies are considered a plus.

Experience Requirement:

• Proven track record in designing, implementing, and managing enterprise Active Directory environments.

Work Experience:

• 5–8+ years of experience with Microsoft Active Directory in enterprise environments.
• Experience with multi-domain or multi-forest environments preferred.
• Experience with hybrid identity or cloud environments is an advantage.

We offer:

• Family character of the company with custom production outside the automotive industry
• Individual approach
• Facilities of a newly built production hall in Doubí in Liberec
• High quality employment
• Flexible working hours
• We will take into account your experience with attractive benefits (quarterly bonuses, meal allowance CZK 140/day, transport allowance, Multisport card, CZK 5,880/year contribution to Pluxee card, company season tickets for leisure activities - hockey, football, iQLANDIA, ZOO, subsidized refreshments at the workplace, education, company events)