Senior Entra ID / Active Directory Engineer

1dea is a recruitment and IT outsourcing company focusing on expert and managerial positions. The company is based in Poland and operates globally through an international network. It covers sectors including IT, Transport, Spedition, Logistics, Property & Construction, and Tax & Legal.

• Minimum 5 years of general IT experience, including at least 4 years as an Active Directory / Entra ID Engineer
• Minimum secondary technical or post-secondary education
• English language proficiency at minimum B2 level (spoken and written)
• Practical knowledge of securely synchronizing and maintaining coexistence of classic AD and Entra ID (Hybrid-first approach)
• Consistent application of layered security model (AD tiering), least privilege principles, hardened domain controllers, and secure LDAP (Security-by-default)
• Ability to diagnose and resolve complex issues with AD replication, GPO processing, DNS configuration, domain trusts, and Entra ID login
• Automation skills using PowerShell for mass operations, audits, and system health checks
• Operational culture knowledge including ITIL practices for change implementation plans, risk analysis, rollback procedures, and disaster recovery (backup/recovery for AD)
• Microsoft certifications are not formally required; practical knowledge is valued

• Daily maintenance and administration of Active Directory, Microsoft Entra ID, GPO, and AD Sites and Services
• Designing and implementing authentication and authorization solutions, including knowledge of Kerberos/NTLM specifics and token sizes
• Handling identity incident tickets and providing 2nd line support
• Creating clear and high-quality technical documentation such as runbooks, SOPs, and known error databases
• Working within a ticketing system and strictly following Change Management procedures

Start date earliest August 1, 2026; candidates with up to 3 months notice period are accepted.