Active Directory Administrator

co.brick talents — powered by AI, powered by people.

Role: Active Directory Administrator (Quest Active Administrator)

Location: Remote (occasional on-site visits to Bamberg, Germany)

Start Date: November 3, 2026

Duration: 6 months (B2B contract)

Rate: 150 – 165 PLN/h + VAT

Languages Required: English (C1), German (B2)

Project Overview

We are looking for an experienced Active Directory Administrator with strong hands-on expertise in Quest Active Administrator, Windows Server, Active Directory, and Group Policy Management to support a strategic IT infrastructure modernization project for an enterprise client based in Germany.

The primary objective is to upgrade the existing Quest Active Administrator platform, execute a seamless migration to Windows Server 2025, and enhance security delegations, database configurations, and Group Policy management processes in alignment with Tier 0 security best practices.

Key Responsibilities

• Quest Active Administrator Upgrade:

  • Upgrade Quest Active Administrator from version 8.9.0.301 to 8.9.1.9.

  • Update Active Administrator agents across all relevant Domain Controllers.

  • Ensure post-upgrade platform stability, monitoring, and verification of core services.

• Windows Server 2025 Migration & Database Architecture:

  • Migrate the existing environment to Windows Server 2025.

  • Migrate existing databases or provision/configure new database instances.

  • Evaluate the feasibility of leveraging Azure SQL Managed Database services.

  • Optimize database logging and archive configurations.

  • Implement and configure Group Managed Service Accounts (gMSA).

  • Enforce least-privilege service permissions following Active Directory Tier 0 architecture.

• Active Directory Delegation & Template Optimization:

  • Audit, consolidate, and streamline existing security delegations and administration templates.

  • Identify and eliminate redundant or duplicate template configurations.

  • Review, optimize, and maintain PowerShell scripts used for standard Organizational Units (OUs).

  • Enhance consistency, maintainability, and governance of AD administration workflows.

• Group Policy Management (GPO):

  • Clean up and prune GPO history associated with unused or decommissioned Group Policy Objects.

  • Optimize GPO backup and recovery structures.

  • Maintain and test granular, attribute-level object backup and recovery mechanisms.

• Platform Operations:

  • Manage day-to-day security delegations within Quest Active Administrator.

  • Administer and troubleshoot log collectors across target Domain Controllers.

Candidate Profile & Requirements

• Technical Expertise:

  • Proven, hands-on administration and upgrade experience with Quest Active Administrator and its agent architecture.

  • Strong background in Microsoft Active Directory and Domain Controller lifecycle management.

  • Practical experience working in Windows Server enterprise environments (Windows Server 2025 experience or readiness is strongly preferred).

  • Solid database administration/migration experience (SQL Server / Azure SQL Database).

  • Firm grasp of Tier 0 security principles, identity hardening, and Group Managed Service Accounts (gMSA).

  • Deep experience managing, backing up, recovering, and auditing Group Policy Objects (GPOs).

  • Strong proficiency in PowerShell for directory automation, template maintenance, and script auditing.

• Languages & Soft Skills:

  • English: Minimum C1 (fluent technical communication, written and spoken).

  • German: Minimum B2 (professional communication with local stakeholders).

  • Strong analytical and troubleshooting mindset with a high focus on operational stability and security compliance.

  • Willingness to travel occasionally to Bamberg, Germany for coordinated on-site project phases.

Key Deliverables

• Fully upgraded and validated Quest Active Administrator platform (v8.9.1.9).

• Completed migration to Windows Server 2025.

• Hardened service account structure (gMSA, Tier 0 isolation).

• Streamlined, deduplicated AD delegation templates and reviewed OU PowerShell automation.

• Consolidated GPO repository, backup archives, and cleaned historical logs.