Research Scientist, Kaggle
Google (10000+ pracowników)
Programowanie Frontend
Programowanie Backend
Poland
Pełny etat
Law
Doctoral degree
Java
Master's degree
C++
JavaScript
Natural language processing
AI
Python
Mobile devices
Active Directory Administrator
co.brick Talents
Administracja systemami
Cyberbezpieczeństwo
Wsparcie techniczne
Just Join IT
Gliwice(Poland)
Zdalnie
Pełny etat
Senior
25,200 - 27,720 PLN / miesiąc
Active Directory
Quest Active Administrator
Group Policy (GPO)
Windows Server
co.brick talents — powered by AI, powered by people.
Role: Active Directory Administrator (Quest Active Administrator)
Location: Remote (occasional on-site visits to Bamberg, Germany)
Start Date: November 3, 2026
Duration: 6 months (B2B contract)
Rate: 150 – 165 PLN/h + VAT
Languages Required: English (C1), German (B2)
Project Overview
We are looking for an experienced Active Directory Administrator with strong hands-on expertise in Quest Active Administrator, Windows Server, Active Directory, and Group Policy Management to support a strategic IT infrastructure modernization project for an enterprise client based in Germany.
The primary objective is to upgrade the existing Quest Active Administrator platform, execute a seamless migration to Windows Server 2025, and enhance security delegations, database configurations, and Group Policy management processes in alignment with Tier 0 security best practices.
Key Responsibilities
Quest Active Administrator Upgrade:
Upgrade Quest Active Administrator from version 8.9.0.301 to 8.9.1.9.
Update Active Administrator agents across all relevant Domain Controllers.
Ensure post-upgrade platform stability, monitoring, and verification of core services.
Windows Server 2025 Migration & Database Architecture:
Migrate the existing environment to Windows Server 2025.
Migrate existing databases or provision/configure new database instances.
Evaluate the feasibility of leveraging Azure SQL Managed Database services.
Optimize database logging and archive configurations.
Implement and configure Group Managed Service Accounts (gMSA).
Enforce least-privilege service permissions following Active Directory Tier 0 architecture.
Active Directory Delegation & Template Optimization:
Audit, consolidate, and streamline existing security delegations and administration templates.
Identify and eliminate redundant or duplicate template configurations.
Review, optimize, and maintain PowerShell scripts used for standard Organizational Units (OUs).
Enhance consistency, maintainability, and governance of AD administration workflows.
Group Policy Management (GPO):
Clean up and prune GPO history associated with unused or decommissioned Group Policy Objects.
Optimize GPO backup and recovery structures.
Maintain and test granular, attribute-level object backup and recovery mechanisms.
Platform Operations:
Manage day-to-day security delegations within Quest Active Administrator.
Administer and troubleshoot log collectors across target Domain Controllers.
Candidate Profile & Requirements
Technical Expertise:
Proven, hands-on administration and upgrade experience with Quest Active Administrator and its agent architecture.
Strong background in Microsoft Active Directory and Domain Controller lifecycle management.
Practical experience working in Windows Server enterprise environments (Windows Server 2025 experience or readiness is strongly preferred).
Solid database administration/migration experience (SQL Server / Azure SQL Database).
Firm grasp of Tier 0 security principles, identity hardening, and Group Managed Service Accounts (gMSA).
Deep experience managing, backing up, recovering, and auditing Group Policy Objects (GPOs).
Strong proficiency in PowerShell for directory automation, template maintenance, and script auditing.
Languages & Soft Skills:
English: Minimum C1 (fluent technical communication, written and spoken).
German: Minimum B2 (professional communication with local stakeholders).
Strong analytical and troubleshooting mindset with a high focus on operational stability and security compliance.
Willingness to travel occasionally to Bamberg, Germany for coordinated on-site project phases.
Key Deliverables
Fully upgraded and validated Quest Active Administrator platform (v8.9.1.9).
Completed migration to Windows Server 2025.
Hardened service account structure (gMSA, Tier 0 isolation).
Streamlined, deduplicated AD delegation templates and reviewed OU PowerShell automation.
Consolidated GPO repository, backup archives, and cleaned historical logs.