For our client, we are looking for a Senior IT Infrastructure Engineer. The role is part of an international IT environment and focuses on the design, security, reliability, and long-term development of the company’s Active Directory and identity infrastructure.

The Senior IT Infrastructure Engineer is responsible for the architecture, operation, and continuous improvement of the Active Directory environment. The position acts as a senior technical authority for Windows Server–based identity services in multi-domain and multi-forest environments, including hybrid integration with cloud identity platforms.

The role ensures high availability, security, and performance of authentication and identity services while supporting business requirements.

JOB DESCRIPTION

• Active Directory Management: Design, manage, and maintain Active Directory Domain Services, including administration of multi-domain and multi-forest environments, lifecycle management of domain controllers and AD architecture.
• Hybrid Identity & Cloud Integration: Design and support hybrid identity solutions across on‑premises AD and cloud environments, administer directory synchronization (Entra ID / Azure AD Connect), and support authentication services in hybrid setups.
• Core Services & Troubleshooting: Manage Group Policy and AD‑integrated DNS, troubleshoot complex authentication and directory issues, and act as an escalation point for critical incidents.
• Security, Compliance & Governance: Strengthen AD security and access control, support backup, recovery, audit, and compliance activities, and cooperate with security teams on risk mitigation.
• Automation & Collaboration: Automate administrative tasks using PowerShell, act as a subject matter expert for identity services, and collaborate closely with infrastructure, cloud, and security teams.

CANDIDATE PROFILE

• Strong expertise in Active Directory, Group Policy, DNS, and replication
• Hands-on experience with Windows Server and domain controller management
• Knowledge of hybrid identity and directory synchronization concepts
• Advanced troubleshooting and analytical skills
• Experience with PowerShell scripting
• Understanding of identity security and access control principles
• 5+ years of experience with Microsoft Active Directory in enterprise environments
• Experience with multi-domain / multi-forest and hybrid or cloud environments is an advantage
• Bachelor’s degree in IT or equivalent practical experience
• Microsoft certifications related to Windows Server or identity technologies are a plus

WE OFFER

• New, modern work facilities in Liberec (Doubí)
• Home Office (2 days at office)
• Flexible working hours
• Competitive compensation based on experience and technical level
  • Quarterly performance bonuses
  • Meal allowance (CZK 140/day)
  • Transport allowance
  • Multisport card
  • CZK 5,880 annual contribution to a Pluxee benefits card
  • Company season tickets for sports and leisure activities 
  • Subsidized refreshments at the workplace
  • Professional training and education
  • Regular company events