Job
In this role, you will be responsible for the architecture of our Microsoft infrastructure, develop security standards, optimize Active Directory, and implement hybrid identity solutions along with a robust Public Key Infrastructure.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You are responsible for the target and reference architecture of our Microsoft platform—on-premises, hybrid, and in the cloud—and work with your architecture colleagues and department leadership to develop standards, security requirements, and a forward-looking roadmap.
- You design and optimize Active Directory and hybrid identity management with Microsoft Entra ID—from Group Policy and Conditional Access to multifactor and passwordless authentication.
- You develop a secure administration model to protect privileged access and critical systems, and implement it together with our IT administrators.
- You are responsible for the architecture, security, and operating model of our enterprise-wide public key infrastructure, including the entire certificate lifecycle.
- You design highly available DNS and DHCP services for our on-premises IT infrastructure and Azure.
- You design the Azure foundational architecture and our Microsoft security platform with Defender and Sentinel, working closely with the IT Security and Resilience business unit.
- You strengthen the resilience of our identity platform against ransomware attacks, implement regulatory requirements such as NIS2 and the BSI IT-Grundschutz in technical terms, and support the response to security incidents.
Our expectations of you
Education
- You have successfully completed a degree in computer science or a comparable field, or hold an equivalent qualification. You also have several years of experience in the architecture or engineering of large-scale hybrid Microsoft infrastructures.
Qualifications
- You have in-depth knowledge of Active Directory, particularly in the areas of Group Policy, authentication methods, DNS, and DHCP.
- You have extensive knowledge of modern security architectures such as Zero Trust, privileged access protection, system hardening, and Microsoft Defender, as well as excellent PowerShell skills.
- You stand out for your team spirit, strong communication skills, and excellent German language skills (at least C1 level).
- You have a Category B driver's license.
Experience
- You have extensive experience with Microsoft Entra ID and hybrid identity solutions, including synchronization, conditional access, multifactor authentication, and privileged role management.
- You have hands-on experience building, operating, and securing a Public Key Infrastructure based on Active Directory Certificate Services.
What we offer
- Depending on your qualifications and professional experience, we offer you a salary between €54,800 and €88,600, based on TVöD pay grades 11 to 12.
- Flexible working hours and the option to work from home.
- A team-oriented and open, appreciative atmosphere where everyone, including senior management, is on a first-name basis.
- Enjoy 30 days of vacation per year.
- Structured onboarding and sufficient time for a successful start are a matter of course for us.
- Benefit from our internal and external training programs.
Benefits
Work-Life-Integration
Health, fitness & fun
Topics you will work on
Job locations
About your employer
Vitos Herborn and Vitos Weil-Lahn form a regional consortium under the umbrella of the Vitos Corporation. Our core task is the treatment of adults, children, and adolescents in psychiatric and somatic specialist clinics. Our accompanying psychiatric services support people with mental disabilities.
- Established Company
- Onsite, Hybrid
- Healthcare, Social Sector
More jobs
These jobs might also interest you
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
