Active Directory Administrator

id 129029
Active Directory Administrator
Senior
"Customer location: Germany
Candidates locations: All except India, Russia, Ukraine
Language: English C1, German B2
Estimated start date: 03.11.2026
Duration: 6 months"
Project Responsibilities
1. Update Quest Active Administrator
Upgrade Quest Active Administrator from version 8.9.0.301 to version 8.9.1.9.
Update Active Administrator agents on Domain Controllers (DCs).
2. Migrate the Solution to a New Windows Server 2025 Environment
Migrate existing databases or create a new database.
Evaluate the capability of Azure Managed MSSQL Database Service.
Reduce database logging and redefine logs for archive databases.
Reduce permissions required for agents and services in accordance with the Tier 0 concept.
Evaluate the feasibility of using Group Managed Service Accounts (gMSA).
Migrate agents on Domain Controllers.
3. Consolidate Existing Templates and Delegations
Analyze and consolidate existing delegations and templates.
Merge duplicate template usage.
Evaluate PowerShell scripts used for standard Organizational Units (OUs).
4. Optimize GPO History Management
Clean up GPO history related to unused or deleted Group Policy Objects.
Reduce the number of existing GPO backups.
5. Support Covered Quest Active Administrator Features
Security delegation management.
Backup and recovery of Group Policy Objects (GPOs).
Attribute-level object backup and recovery.
Log collector administration for selected Domain Controllers.
Must-haves
Hands-on experience with Quest Active Administrator environments.
Experience performing solution upgrades and agent updates.
Experience with Active Directory Domain Controllers and related administration activities.
Experience with database migration and/or database setup activities.
Knowledge of Azure Managed MSSQL Database Service evaluation and implementation scenarios.
Understanding of permission models and security concepts, including Tier 0 principles.
Experience with Group Managed Service Accounts (gMSA).
Experience with Group Policy Objects (GPOs), including backup, recovery, and history management.
Experience with delegation management and template consolidation.
Ability to review and evaluate PowerShell scripts.
Languages
German and/or English.
Working Model
Remote work is largely possible.
Occasional on-site presence in Bamberg, Germany may be required upon coordination.
Main Expected Deliverables
Updated Quest Active Administrator platform.
Successful migration to a Windows Server 2025 environment.
Optimized database and logging configuration.
Consolidated delegations and templates.
Cleaned and optimized GPO history and backup structure.
Reviewed PowerShell scripts for standard OUs.