Senior IT Infrastructure Engineer (Active Directory & Hybrid Identity)

Quick Facts

• Role: Senior IT Infrastructure Engineer (Active Directory & Hybrid Identity)

Description

Manage and evolve the organization’s Active Directory environment as a senior technical authority for Windows Server–based identity services across multi-domain and multi-forest setups. Design and support hybrid identity integrations with cloud identity (Entra ID) including directory synchronization and authentication across on-prem and cloud. Ensure high availability, security, performance, and continuous lifecycle improvements, while automating operations and providing advanced escalation support.

Responsibilities

• Lead and manage AD DS across multi-domain and multi-forest environments
• Design and maintain domain controllers and overall AD architecture
• Ensure high availability, performance, and lifecycle management
• Design and support hybrid identity (on-prem AD + cloud)
• Manage directory synchronization (Entra ID / Azure AD Connect)
• Support authentication across cloud and on-prem environments
• Manage Group Policy and AD-integrated DNS
• Troubleshoot complex authentication and directory issues
• Provide advanced escalation support for critical incidents
• Strengthen AD security and access control
• Support backup, recovery, audits, and compliance activities
• Collaborate with security teams for risk mitigation
• Automate processes using PowerShell
• Act as SME and support team development
• Collaborate across infrastructure, cloud, and security teams

Requirements

• 5–8+ years of experience with Microsoft Active Directory in enterprise environments
• Track record in designing, implementing, and managing enterprise Active Directory environments
• Strong expertise in AD DS, Group Policy, DNS, and replication
• Solid experience with Windows Server and domain controller management
• Understanding of hybrid identity and directory synchronization
• Advanced troubleshooting and analytical problem-solving skills
• PowerShell scripting/automation experience
• Knowledge of identity security and access control principles
• Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience)
• Multi-domain/multi-forest experience preferred
• Hybrid identity/cloud experience preferred

Benefits

• Family-oriented approach and individual approach
• High-quality employment; flexible working hours
• On-site work in Liberec (5 days/week)
• Quarterly bonuses and meal allowance (CZK 140/day)
• Transport allowance
• Multisport card
• CZK 5,880/year contribution to Pluxee card
• Company season tickets for leisure activities (hockey, football, iQLANDIA, ZOO)
• Subsidized refreshments at the workplace
• Education and company events