Perform and evaluate technical assessments of complex Microsoft infrastructures (Active Directory, AD CS, PKI, Windows Server)
Analyze critical security risks in complex legacy and hybrid environments and define sustainable remediation measures
Architect, plan and implement demanding migration and security projects in Windows Server environments
Act in a consultative role on client projects (travel approximately 10–20%) with deep technical involvement, including workshops and decision support
Prepare architecture designs and technical documentation for secure, scalable solutions
Further develop modern identity services with an increasing focus on Microsoft Entra ID / Azure AD
Requirements
Several years of hands-on experience with Active Directory, including in-depth knowledge of AD security hardening, AD CS / PKI, and Windows Server administration
Ability to work independently and take ownership in projects
Additional technical experience, e.g., with failover clusters, PowerShell automation, auditing & security logging, or Entra ID / Azure AD