Directory Services Engineer

• Krakow, Poland
• Information Security

Aon sp. z o. o

Job Responsibilities:

• Assist the Active Directory (AD) Services Team’s Architects in support of: Inter-Forest User Migrations, Account Management and Provisioning, and AD Infrastructure & Enterprise Solutions
• Demonstrate strong analytical, troubleshooting, and problem-solving skills related to Application remediation
• Support Active Directory management tools, automations, and backups
• Maintain a solid understanding of business issues and technical solutions encountered during the migration of single forest or multi-forest Active Directory environments
• Ability to manage multiple priorities, commitments, and projects
• Maintain a strong learning aptitude and ability to learn new technologies independently
• Excellent interpersonal skills and the ability to work in a team environment and interact with all levels of management as well as customers

Required Skills:

• 5+ years of experience in Active Directory migrations, design, and implementations
• Experience working with large, complex Active Directory migrations for customers, prospects, or clients
• Advanced knowledge in AD architecture and infrastructure (LDAP, Directory Replication, group policy, security, schema changes, domain controllers management)
• Advanced knowledge of DNS, Kerberos, Windows Authentication and Single Sign On (SSO)
• Advanced knowledge of Azure AD, Office 365, Active Directory Federation Services and Microsoft Azure
• Knowledge of Microsoft Certificate Services/PKI infrastructure
• Advanced knowledge of Windows Server 2012, 2016 and 2019
• Demonstrate a conceptual understanding of Microsoft’s Directory Sync products (ie. DirSync, ForeFront Identity Manager)
• Require ability to read, understand, and draw conclusions from basic network traces as they relate to client-server communications
• Strong TCP/IP networking knowledge
• Knowledge of identity life cycle onboarding and offboarding processes
• Account Management and Provisioning: Strong knowledge of permissions that are granted natively to various Microsoft Built-In Groups to perform Active Directory Administrative Functions
• Knowledge of native permissions granted when building AD objects
• Knowledge of permissions granted natively to Built-In Groups via GPOs and/or Local Policies
• Active Directory Infrastructure & Enterprise Solutions: Ability to read product documentation to conceptualize and implement solutions, build Domain Controllers and Member Servers to support Enterprise Solutions
• Thorough functional understanding and ability to configure Active Directory Server Roles (CAs, IIS, File/Print, DNS)
• Working knowledge of GPOs, AD Sites, Replication Topology, and native AD troubleshooting tools

We offer:

• Diverse and inclusive workplace - we value openness and authenticity and believe in the power of feedback
• Flexible remote work environment
• Employee-appreciation culture (multiple recognition programs)
• The best medical cover on the market with free dental care
• Wellbeing awareness (access to free mental health helpline, Stay-Well Day off, lectures, sports and more)
• Generous benefits package (personal accident insurance, benefit platform for vouchers and more)
• Internal career opportunities, individual development plan, professional development training and resources
• Lots of social events, charity actions and opportunities to integrate with colleagues