Microsoft Windows Infrastructure Security and Domain Administrator

About the role

We are looking for a skilled professional to design, administer, and secure a complex Microsoft Windows infrastructure. The role combines domain administration, server management, and security hardening across on‑premises and cloud environments.

Key responsibilities

• Design, deploy and maintain Active Directory Domain Services, including forests, domains, trusts and Group Policy Objects.
• Manage Azure Active Directory, Azure AD Connect, and hybrid identity solutions.
• Install, patch and support Windows Server (2016/2019/2022) and core services such as DNS, DHCP, DFS, and File/Print.
• Implement and maintain virtualization platforms (Hyper‑V or VMware) and perform system monitoring, performance tuning and capacity planning.
• Harden servers and AD according to CIS Benchmarks and NIST guidelines, manage patch cycles and endpoint protection (Microsoft Defender, CrowdStrike).
• Configure security tools like Microsoft Defender for Identity and Azure Sentinel, conduct audits, vulnerability assessments and incident response.
• Automate routine tasks with PowerShell and apply Infrastructure‑as‑Code using Ansible, Terraform or DSC.

Required profile

• Minimum 2 years of experience in Windows infrastructure, AD/Azure AD administration, and security hardening.
• Degree in Computer Science, Computer Engineering or related field (Bachelor, Master or Diploma).
• Strong analytical and problem‑solving abilities.

Required skills

• Active Directory, Azure Active Directory, Azure AD Connect
• Group Policy, Identity and Access Management, RBAC
• PowerShell scripting
• Hyper‑V, VMware virtualization
• Ansible, Terraform, Desired State Configuration (DSC)
• Microsoft Defender for Endpoint, CrowdStrike, Defender for Identity, Azure Sentinel
• Windows Server 2016/2019/2022
• DNS, DHCP, DFS, File/Print services
• Patch management and server hardening (CIS, NIST)