Senior Active Directory Engineer

Ciklum is looking for a Senior Active Directory Engineer to join our team in Bulgaria.We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.About the role:As an Active Directory Engineer, you'll become a part of a cross-functional development team engineering experience of tomorrow.The objective is to design, implement, operate and optimize a secure, scalable, and highly available identity and access management infrastructure. Infrastructure running on hybrid environment (on-premise and cloud) which serve as the foundation for centralized authentication, authorization, and resource access control across the organization’s IT environment.The company provides cloud-based solutions that enable organizations to prepare, sign, manage, and store agreements digitally. Its platform helps streamline contract workflows, improve efficiency, and ensure secure, legally compliant transactions. The solutions are widely used across industries to replace manual, paper-based processesResponsibilities:Ensures secure and streamlined identity lifecycle managementEnables efficient delegation of administrative tasksSupports integration with cloud services and applicationsImplements best practices for operational reliability and securityRequirements:Technical:Deep knowledge of Active Directory infrastructure and PowerShell automation including:Maintaining complex AD environmentsGroup Policy Object (GPO) configuration and management in large scale environmentsAD high availability and replication strategiesStrong understanding of DNS, DHCP and networking conceptsKnowledge of Kerberos, LDAP(S), SAML, OICD and OAuth standards and protocolsHybrid Identity: Proven experience with Azure AD (Entra ID), ADFS, and hybrid environmentsIaaC implementation concepts: Terraform, Bicep, or ARM templatesCompliance & Security:Cooperate on regular security assessments and vulnerability scansImplement security best practices for identity infrastructureAlign identity infrastructure with regulatory requirements ( for example GDPR, HIPAA, SOX)Proper auditing and logging setup for identity and access management activitiesCloud Enablement & Integration: integration patterns with Azure Entra ID experience will be a plusDevelopment Advisory: Help development teams integrate applications and services with identity servicesIdentity Management processes: Experience with identity lifecycle management processes such as JIT, JML, PIM, PAM and RBAC in enterprise environmentsNice to have experience confirmed by Microsoft Security/Identity Certifications (e.g., SC-300, AZ-500, AZ-800)What`s in it for you?Regular salary reviews based on performanceCorporate events: webinars, offline parties, and meetupsInternal Mobility ProgramTailored education path (including full access to Udemy, certifications, etc.)25 paid days off: 20 business days of vacation per calendar year + 5 undocumented sick leave daysAdditional health insurance100% company-covered Multisport card, with discounts available for family membersAbout us:At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.Since expanding to Bulgaria in 2022, we’ve been building a fast-growing team that thrives on learning, collaboration, and innovation. Join us on this exciting journey and help shape the future of our delivery center.Want to learn more about us? Follow us on Instagram, Facebook, LinkedIn.Explore, empower, engineer with Ciklum!Interested already? We would love to get to know you! Submit your application. We can’t wait to see you at Ciklum.