Active Directory Administrator

co.brick talents - powered by AI, powered by people.

Role: Active Directory Administrator (Quest Active Administrator)

Location: Remote (occasional on-site visits to Bamberg, Germany)

Start Date: November 3, 2026

Duration: 6 months (B2B contract)

Rate: 150 - 165 PLN/h + VAT

Languages Required: English (C1), German (B2)

Project Overview

We are looking for an experienced Active Directory Administrator with strong hands-on expertise in Quest Active Administrator, Windows Server, Active Directory, and Group Policy Management to support a strategic IT infrastructure modernization project for an enterprise client based in Germany.

The primary objective is to upgrade the existing Quest Active Administrator platform, execute a seamless migration to Windows Server 2025, and enhance security delegations, database configurations, and Group Policy management processes in alignment with Tier 0 security best practices.

Key Responsibilities

• Quest Active Administrator Upgrade:
• Upgrade Quest Active Administrator from version 8.9.0.301 to 8.9.1.9.
• Update Active Administrator agents across all relevant Domain Controllers.
• Ensure post-upgrade platform stability, monitoring, and verification of core services.
• Windows Server 2025 Migration & Database Architecture:
• Migrate the existing environment to Windows Server 2025.
• Migrate existing databases or provision/configure new database instances.
• Evaluate the feasibility of leveraging Azure SQL Managed Database services.
• Optimize database logging and archive configurations.
• Implement and configure Group Managed Service Accounts (gMSA).
• Enforce least-privilege service permissions following Active Directory Tier 0 architecture.
• Active Directory Delegation & Template Optimization:
• Audit, consolidate, and streamline existing security delegations and administration templates.
• Identify and eliminate redundant or duplicate template configurations.
• Review, optimize, and maintain PowerShell scripts used for standard Organizational Units (OUs).
• Enhance consistency, maintainability, and governance of AD administration workflows.
• Group Policy Management (GPO):
• Clean up and prune GPO history associated with unused or decommissioned Group Policy Objects.
• Optimize GPO backup and recovery structures.
• Maintain and test granular, attribute-level object backup and recovery mechanisms.
• Platform Operations:
• Manage day-to-day security delegations within Quest Active Administrator.
• Administer and troubleshoot log collectors across target Domain Controllers.

Candidate Profile & Requirements

• Technical Expertise:
• Proven, hands-on administration and upgrade experience with Quest Active Administrator and its agent architecture.
• Strong background in Microsoft Active Directory and Domain Controller lifecycle management.
• Practical experience working in Windows Server enterprise environments (Windows Server 2025 experience or readiness is strongly preferred).
• Solid database administration/migration experience (SQL Server / Azure SQL Database).
• Firm grasp of Tier 0 security principles, identity hardening, and Group Managed Service Accounts (gMSA).
• Deep experience managing, backing up, recovering, and auditing Group Policy Objects (GPOs).
• Strong proficiency in PowerShell for directory automation, template maintenance, and script auditing.
• Languages & Soft Skills:
• English: Minimum C1 (fluent technical communication, written and spoken).
• German: Minimum B2 (professional communication with local stakeholders).
• Strong analytical and troubleshooting mindset with a high focus on operational stability and security compliance.
• Willingness to travel occasionally to Bamberg, Germany for coordinated on-site project phases.

Key Deliverables

• Fully upgraded and validated Quest Active Administrator platform (v8.9.1.9).
• Completed migration to Windows Server 2025.
• Hardened service account structure (gMSA, Tier 0 isolation).
• Streamlined, deduplicated AD delegation templates and reviewed OU PowerShell automation.
• Consolidated GPO repository, backup archives, and cleaned historical logs.