[Hiring] Active Directory Operations Specialist @Ciklum

Role Description

Ciklum is looking for an Active Directory Operations Specialist to join our team full-time in Poland. As an Active Directory Operations Specialist, become a part of a cross-functional development team engineering experiences of tomorrow.

• AD Management – Maintain and manage Stena’s hybrid AD environment, including Domain Controllers, delegations, OU design, GPOs, DNS, DHCP, AD Connect, FSMO roles (Schema Master, Primary Domain Controller, etc.), and regular hygiene tasks.
• Auditing and Logging – Configure, monitor, and review logs for compliance, security, and troubleshooting.
• Forest design and security – Maintain secure forest structures and enforce best practices.
• Trusts and encryption – Manage domain trusts, LDAP, ciphers, and lifecycle of encryption solutions.
• Public Key Infrastructure (PKI) – Operate and maintain PKI infrastructure, certificate authorities, templates, and security configurations.
• Service health & continuity – Monitor and manage the health of Active Directory services, ensuring business resilience, backups, and disaster recovery procedures.
• Security hardening – Enforce baseline configurations, disable legacy protocols, and maintain secure Kerberos/NTLM policies.
• Access policies – Establish, configure, and enforce access policies such as MFA, ensuring compliance with regulatory requirements and proper delegation of rights.
• Federation & SSO – Manage federations, single sign-on, and application onboarding to enhance security and productivity.
• Privileged Access Management (PAM) – Oversee role-based access control (RBAC) and ensure proper allocation and maintenance of privileged roles.
• Monitoring & error prevention – Track replication, synchronization, authentication, and proactively prevent errors.
• Ensure IAM systems comply with our organizational security policies and standards.
• Maintain up-to-date knowledge of security trends, threats, and technologies related to identity and access management.
• Work closely with IT, Application Owners, and business units to understand their needs and provide appropriate IAM solutions.
• Provide training and support to Service Desk on identity and access management practices and tools, as part of Stena’s Shift-Left strategy.
• Collaborate with external vendors and partners to ensure seamless integration and functionality of IAM systems.
• Extensive interaction and/or collaboration with IT professionals such as Network Engineers, Security & Control Engineers, and Architects is required.
• Interacts with middle management for communication of technical issues and/or planning and strategy discussion.
• Customer interaction to assist in determination of best solution technologies and implementations for e.g. Business projects.

Qualifications

• Bachelor's degree or equivalent experience in a relevant field.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Identity and Access Manager (CIAM), or similar are highly desirable.
• 5 or more years in IT and Systems engineering or systems administration.
• Previous Level 2 or 3 experience hands-on supporting a business.
• Excellent problem-solving and troubleshooting skills.
• Skilled in managing complex multi-forest directory services and Cloud Identity platforms.
• Strong communication and interpersonal skills.
• Experience of IAM technologies and frameworks, including Active Directory (Entra ID), LDAP, SAML, OAuth, and others.

Benefits

• Strong community: Work alongside top professionals in a friendly, open-door environment.
• Growth focus: Take on large-scale projects with a global impact and expand your expertise.
• Tailored learning: Boost your skills with internal events (meetups, conferences, workshops), Udemy access, language courses, and company-paid certifications.
• Endless opportunities: Explore diverse domains through internal mobility, finding the best fit to gain hands-on experience with cutting-edge technologies.
• Flexibility: Enjoy flexibility – full remote working possibilities.
• Care: We’ve got you covered with company-paid medical insurance, mental health support, and financial & legal consultations.