Sr IT Infrastructure Engineer is responsible for the architecture, security, reliability, and continuous evolution of the organization’s Active Directory environment. This role acts as a senior technical authority for Windows Server–based identity services, operating across multi-domain and multi-forest environments and integrating Active Directory with cloud-based identity platforms in a hybrid setup.
The position focuses on ensuring high availability, security, and performance of authentication services while supporting business needs and strengthening the overall identity infrastructure and is a full-time corporate role.
The position is designed as an on-site role, requiring employees to be present in the Liberec office five days per week.
Essential Duties and Responsibilities:
Active Directory Oversight & Strategy
- Lead and manage AD DS across multi-domain and multi-forest environments.
- Design and maintain domain controllers and overall AD architecture.
- Ensure high availability, performance, and lifecycle management.
Hybrid Identity & Cloud Integration
- Design and support hybrid identity solutions (on-prem AD + cloud).
- Manage directory synchronization (Entra ID / Azure AD Connect).
- Support authentication across cloud and on-prem environments.
Core Services (GPO, DNS, Troubleshooting)
- Manage Group Policy and AD-integrated DNS.
- Troubleshoot complex authentication and directory issues.
- Provide advanced escalation support for critical incidents.
- Security, Compliance & Governance
- Strengthen AD security and access control.
- Support backup, recovery, audits, and compliance activities.
- Collaborate with security teams on risk mitigation.
Automation, Leadership & Collaboration
- Automate processes using PowerShell.
- Act as SME and support team development.
- Collaborate across infrastructure, cloud, and security teams.
Knowledge, Skills and Abilities:
- Active Directory & Identity: Strong expertise in AD DS, Group Policy, DNS, and replication.
- Windows Server: Solid experience with Windows Server environments and domain controller management.
- Hybrid Identity: Understanding of hybrid identity and directory synchronization concepts.
- Troubleshooting: Advanced analytical and problem-solving skills.
- Automation: Experience with PowerShell scripting.
- Security & Compliance: Knowledge of identity security and access control principles.
Educational/Certification Requirement:
- Bachelor’s Degree in Computer Science, Information Systems, or related field (or equivalent experience).
- Microsoft certifications related to Windows Server or identity technologies are considered a plus.
Experience Requirement:
- Proven track record in designing, implementing, and managing enterprise Active Directory environments.
Work Experience:
- 5–8+ years of experience with Microsoft Active Directory in enterprise environments.
- Experience with multi-domain or multi-forest environments preferred.
- Experience with hybrid identity or cloud environments is an advantage.
We offer:
- Family character of the company with custom production outside the automotive industry
- Individual approach
- Facilities of a newly built production hall in Doubí in Liberec
- High quality employment
- Flexible working hours
- We will take into account your experience with attractive benefits (quarterly bonuses, meal allowance CZK 140/day, transport allowance, Multisport card, CZK 5,880/year contribution to Pluxee card, company season tickets for leisure activities - hockey, football, iQLANDIA, ZOO, subsidized refreshments at the workplace, education, company events)