Active Directory Customer Engineer

Das ist der Job

The chance to use your skills and imagination to push the boundaries of what´s possible.

Darum lohnt es sich

You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.Sonata Software is an Equal Opportunity Employer encouraging diversity in the workplace.

Position: Active Directory Domain Services EngineerLocation: GermanyWork Mode: RemoteExperience: 10+ yearsRole OverviewWe are seeking an experienced Active Directory Domain Services (AD DS) Engineer with strong expertise in designing, architecting, and managing enterprise-scale AD environments.

The ideal candidate will have deep knowledge of hybrid identity (Entra ID / Azure AD), multi-domain forest design, and governance best practices.Key ResponsibilitiesDesign & ArchitectureDesign and manage multi-domain forest architectures.Plan and implement forest trusts and domain controller capacity.Define FSMO role placement and OU topology design.Develop Active Directory site topology and Group Policy (GPO) strategies.Establish privileged account management following the Tier Model.Design and implement delegation of permissions and group management best practices.Integrate third-party LDAP applications with AD.Deploy and manage Read-Only Domain Controllers (RODCs).Utilize PowerShell scripting for automation and configuration management.Hybrid Identity & SynchronizationImplement and manage Microsoft Entra Connect for hybrid identity.Maintain synchronization between Active Directory and Entra ID (Azure AD).Troubleshooting & PerformanceTroubleshoot GPO policy processing, SYSVOL, and AD replication issues.Diagnose Domain Controller performance and authentication failures, including cross-forest authentications.Upgrade & MaintenancePlan and execute Domain Controller OS upgrades.Manage functional level upgrades and ensure compatibility.Operational GovernanceAdhere to change control and patch management best practices.Ensure compliance with operational governance standards.Recovery & ContinuityPerform Active Directory forest and object recovery operations.Maintain disaster recovery readiness for directory services.Networking & InfrastructureStrong understanding of IPv4/IPv6, Active Directory–integrated DNS, and secure dynamic updates.Manage DHCP design, deployment, and operations.Configure Windows Firewall in alignment with best practices.Ensure compliance with port and protocol requirements for Active Directory services.QualificationsProven hands-on experience with Active Directory Domain Services in large-scale enterprise environments.Strong background in Microsoft Entra ID / Azure AD integration and hybrid identity solutions.Proficiency in PowerShell scripting for automation.In-depth knowledge of networking fundamentals and Windows Server administration.Excellent problem-solving and troubleshooting skills.Why join Sonata Software?At Sonata, you´ll have an outstanding opportunity.

To build never seen before solutions to some of the world’s toughest problems. You´ll be challenged, but you will not be alone.

All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity, age, religion, disability, sexual orientation, veteran status, marital status, or any other characteristics protected by law