Active Directory / Entra ID Engineer
In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for an experienced Active Directory / Entra ID Engineer to support and maintain identity services in a hybrid environment. The role focuses on Active Directory, Microsoft Entra ID, and related infrastructure, ensuring high availability, security, and efficient authentication and authorization services across the organization.
Project information:
Location: Warsaw (hybrid model of work)
Type of employment: B2B contract or standard employment contract
Project languages: English
Key Responsibilities:
Active Directory administration
Managing and maintaining Active Directory (AD), Microsoft Entra ID, Group Policies, AD Sites and Services, and domain/forest trusts
Updating technical documentation and operating procedures
Troubleshooting Active Directory, Microsoft Entra ID, and related components
Implementing changes in accordance with ICT change management procedures
Incident management
Designing and implementing cross-system authentication and authorization solutions
User access management
Performing other duties as assigned by the supervisor
Requirements:
Minimum 5 years of professional experience after education, including at least 4 years in a similar role
English proficiency at B2 level
Extensive experience with Active Directory, domain controllers, and Microsoft Entra ID (Azure AD)
Extensive hands-on experience with Active Directory, domain controllers, and Microsoft Entra ID (Azure AD), including administration of AD services, Group Policy management, AD Sites and Services, domains and trusts, schema management, replication, security best practices, troubleshooting, PowerShell automation for AD, authentication and authorization processes, DNS, and AD backup and recovery
Experience with ticketing systems and ITIL-based change, configuration, and release management processes
Proactive attitude, team-oriented mindset, self-motivation, and strong user focus
Ability to operate and design in a hybrid environment (AD DS + Entra ID), including identity synchronization and coexistence
Readiness to take end-to-end ownership of AD/Entra services (availability, performance, incident and problem management)
Strong focus on security best practices (least privilege, tiering, secure delegation, hardened domain controllers)
Ability to work within ITIL processes, including change planning, risk assessment, rollback, and validation
Automation mindset with strong PowerShell usage (bulk operations, reporting, health checks, scripting standards)
Strong troubleshooting skills across AD replication, DNS, authentication, GPO processing, and Entra access/sign-in issues
Ability to manage Group Policy governance (ownership, versioning, testing, phased rollout)
Experience with AD replication topology and site management (site links, latency optimization, DC placement)
Ability to design and manage domains and trusts securely (authentication boundaries, SID filtering, trust hardening)
Experience with schema-related changes under strict governance (impact analysis, approvals, testing, rollback planning)
Knowledge of AD backup and recovery procedures, including participation in disaster recovery scenarios
Strong understanding of AD-integrated DNS and troubleshooting name resolution issues
Good understanding of authentication and authorization mechanisms (Kerberos, NTLM, group membership, token behavior)
Ability to work in a ticket-driven environment with clear documentation and traceability
Strong user-oriented mindset with ability to prioritize based on business impact
Strong communication and collaboration skills with both technical and non-technical stakeholders
Ability to produce and maintain high-quality documentation (runbooks, SOPs, knowledge base)
Experience with monitoring and health checks of AD/Entra environments and acting on trends
Understanding of governance, compliance, and security controls (audit, approvals, segregation of duties)
We offer:
Private medical care with dental care (covering 70% of costs). Family package option possible
Multisport card (also for an accompanying person)
Life insurance
Work with talented engineers on large-scale, technically challenging projects
Active Directory / Entra ID Engineer
Active Directory / Entra ID Engineer