System Engineer Active Directory & PKI (REF2426L)

Company Description

The largest ICT employer in Hungary, Deutsche Telekom IT Solutions (formerly IT-Services Hungary, ITSH) is a subsidiary of the Deutsche Telekom Group. Established in 2006, the company provides a wide portfolio of IT and telecommunications services with more than 5000 employees. ITSH was awarded with the Best in Educational Cooperation prize by HIPA in 2019, acknowledged as one of the most attractive workplaces by PwC Hungary’s independent survey in 2021 and rewarded with the title of the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team.

Job Description

Key Responsibilities:

• Active Directory Windows Server Related Functional Support for GPO, ADFS and Other Domain Relevant Services
• Troubleshoot Active Directory Certificate Services, HSMs, Certificate Enrollment Web Services, Certificate Enrolment Policy Web Service, and Internet Information Services (IIS)
• Interact with customers, service managers, and operational support teams to design, test, and deploy security and/or automation solutions to meet business needs
• Analyze current Active Directory environment to identify both technical and operational challenges and develop continuous improvement action plans
• Federated Identity Management, Azure ADFS, and third-party federated services
• Aid with defining and developing the strategic plan for Public Key Infrastructure (PKI) and assist with the implementation of PKI and other certificate related technologies
• Create and maintain system documentation for certificate-based technologies, including installation, configuration, and appropriate troubleshooting steps
• Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation
• Ability to troubleshoot servers and infrastructure equipment, assess networking requirements and provide solutions, and make accurate and independent decisions under pressure

Qualifications

• Active Directory Windows Server Related Functional Support for GPO, Radius, CA, ADFS and Other Domain Relevant Services
• Sound experience in the areas of Active Directory Domain Services (ADDS) - Incl. Microsoft Tier model (Bastion / Red Forrest)
• Microsoft or 3rd party management and monitoring solutions (Prometheus, Grafana)
• Independently manage and perform engineering role for large scale Active Directory efforts and initiatives.
• Knowledge of HSM (Hardware Security Module) for PKI key management and Secrets Repository (Vault functions)
• Experience in the area of ADDC (multi-level PKI infrastructure incl. for machine and user certificates)
• Experience in the lifecycle of IAM identities
• Independent, service-oriented and motivated to find solutions to complex problems.
• Programming and automation skills (preferably Ansible, PowerShell)
• Good in written and spoken English or German

Additional Information

Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.

* Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.