Active Directory Administrator

co.brick talents — powered by AI, powered by people.

Role: Active Directory Administrator (Quest Active Administrator)

Location: Remote (occasional on-site visits to Bamberg, Germany)

Start Date: November 3, 2026

Duration: 6 months (B2B contract)

Rate: 150 – 165 PLN/h + VAT

Languages Required: English (C1), German (B2)

Project Overview

We are looking for an experienced Active Directory Administrator with strong hands-on expertise in Quest Active Administrator, Windows Server, Active Directory, and Group Policy Management to support a strategic IT infrastructure modernization project for an enterprise client based in Germany.

The primary objective is to upgrade the existing Quest Active Administrator platform, execute a seamless migration to Windows Server 2025, and enhance security delegations, database configurations, and Group Policy management processes in alignment with Tier 0 security best practices.

Key Responsibilities

• Quest Active Administrator Upgrade:

• Upgrade Quest Active Administrator from version 8.9.0.301 to 8.9.1.9.

• Update Active Administrator agents across all relevant Domain Controllers.

• Ensure post-upgrade platform stability, monitoring, and verification of core services.

• Windows Server 2025 Migration & Database Architecture:

• Migrate the existing environment to Windows Server 2025.

• Migrate existing databases or provision/configure new database instances.

• Evaluate the feasibility of leveraging Azure SQL Managed Database services.

• Optimize database logging and archive configurations.

• Implement and configure Group Managed Service Accounts (gMSA).

• Enforce least-privilege service permissions following Active Directory Tier 0 architecture.

• Active Directory Delegation & Template Optimization:

• Audit, consolidate, and streamline existing security delegations and administration templates.

• Identify and eliminate redundant or duplicate template configurations.

• Review, optimize, and maintain PowerShell scripts used for standard Organizational Units (OUs).

• Enhance consistency, maintainability, and governance of AD administration workflows.

• Group Policy Management (GPO):

• Clean up and prune GPO history associated with unused or decommissioned Group Policy Objects.

• Optimize GPO backup and recovery structures.

• Maintain and test granular, attribute-level object backup and recovery mechanisms.

• Platform Operations:

• Manage day-to-day security delegations within Quest Active Administrator.

• Administer and troubleshoot log collectors across target Domain Controllers.

Candidate Profile & Requirements

• Technical Expertise:

• Proven, hands-on administration and upgrade experience with Quest Active Administrator and its agent architecture.

• Strong background in Microsoft Active Directory and Domain Controller lifecycle management.

• Practical experience working in Windows Server enterprise environments (Windows Server 2025 experience or readiness is strongly preferred).

• Solid database administration/migration experience (SQL Server / Azure SQL Database).

• Firm grasp of Tier 0 security principles, identity hardening, and Group Managed Service Accounts (gMSA).

• Deep experience managing, backing up, recovering, and auditing Group Policy Objects (GPOs).

• Strong proficiency in PowerShell for directory automation, template maintenance, and script auditing.

• Languages & Soft Skills:

• English: Minimum C1 (fluent technical communication, written and spoken).

• German: Minimum B2 (professional communication with local stakeholders).

• Strong analytical and troubleshooting mindset with a high focus on operational stability and security compliance.

• Willingness to travel occasionally to Bamberg, Germany for coordinated on-site project phases.

Key Deliverables

• Fully upgraded and validated Quest Active Administrator platform (v8.9.1.9).
• Completed migration to Windows Server 2025.
• Hardened service account structure (gMSA, Tier 0 isolation).
• Streamlined, deduplicated AD delegation templates and reviewed OU PowerShell automation.
• Consolidated GPO repository, backup archives, and cleaned historical logs.