Expert active directory - villeneuve d'ascq h/f - freelance

Job description

Sapiens est une Entreprise de Services Numériques (ESN), située à proximité de la gare Saint-Lazare, spécialisée dans les métiers de l’ingénierie informatique, structuré autour de la Digitalisation, les infrastructures et Cybersécurité du système d’information.



· Agilité et organisation de la DSI

· Etude & Développement

· Infrastructure et production

· Sécurité et Cybersécurité



Sapiens accompagne ses clients dans le développement et la transformation de leurs activités depuis 2003, en nous positionnant sur des projets à forte valeur ajoutée dans des secteurs stratégiques (Grands comptes et ETI) tels que la banque de financement et d’investissement, l’assurance, les médias, l’industrie et le luxe.



Rejoindre Sapiens, c’est intégrer une société qui valorise tes compétences, soutient ton potentiel et t’offre l’opportunité de relever de nouveaux défis au sein d’équipes dynamiques et passionnées.



Nous recherchons plusieurs profils de Expert Active Directory - Villeneuve d'Ascq H/F pour notre client grand compte dans le secteur de l'audiovisuel.


Context

Support for BUILD Entra ID Expert
Strong project constraint
International environment – fluent English required
Deliverables: confirmed experience on large-scale Microsoft Entra ID migration programs
International / multi-country context
Confirmed experience on large-scale Microsoft 365 migration programs
International / multi-country context


Missions

* Maintain and optimize the existing Active Directory infrastructure, ensuring security, integrity, and compliance

* Consolidate and standardize systems, manage obsolescence, and protect the environment against security breaches

* Maintain a high level of security and ensure compliance

Technical tasks:

* In-depth expertise in Active Directory (AD): design, configuration, management of multi-domain environments, Group Policy Objects (GPO), federation, trusts, etc.

* Experience with identity and access management (IAM): authentication, authorization, account management, passwords, LDAP, Kerberos, SAML protocols

* PKI (Public Key Infrastructure): management of certificates, Certification Authorities, and related security practices

* AD security and auditing: vulnerability detection, secure configuration, audit tools (e.g., PingCastle, BloodHound, etc.)

* Scripting and automation: PowerShell, scripts for managing, maintaining, and deploying AD components

* Migration and upgrade management: planning migrations, consolidations, and environment updates

* Knowledge of other Microsoft components: DNS, DHCP, Exchange, WSUS, etc.

* Management of Managed Service Accounts (MSA) & Group Managed Service Accounts (GMSA): creation, deployment, management, and best practices for securing and automating service accounts

* Understanding security standards and compliance regulations: GDPR, ISO/IEC 27001, etc.

Methodological tasks:

* Technical project management: planning, implementation, documentation, and change management

* Risk analysis and vulnerability management: ability to identify, analyze, and remediate security weaknesses

* Compliance management: conducting regular audits, reporting, and certification processes

* Advanced troubleshooting and diagnostic skills: resolving complex AD-related incidents

Interpersonal and soft tasks:

* Effective communication: explaining technical concepts to non-technical stakeholders

* Analytical and synthesis skills: quickly understanding technical challenges and proposing solutions

* Proactivity and autonomy: anticipating security and performance issues before they arise

* Teamwork and mentoring: sharing best practices and training colleagues

* Customer-oriented mindset and service awareness: understanding business needs and delivering tailored solutions


Tools & Environment

* Microsoft Entra ID (Expert level)

* Active Directory and GPO (Expert level)

* PowerShell scripting

* Audit tools such as PingCastle, BloodHound

* Microsoft components: DNS, DHCP, Exchange, WSUS

* Security standards: GDPR, ISO/IEC 27001


Working Conditions

* End date: 31/12/2026

* Desired number of days: 177 days

* Location: Villeneuve d'Ascq

* Travel: occasional

* On-call duty required: yes

* Preferred on-site presence: 3 days per week


Requirements

1. Minimum 5 years of experience in Active Directory administration, preferably in regulated or enterprise environments

2. Hold IT certifications relevant to Active Directory, Windows Server, or security (e.g., Microsoft Certified: Windows Server, Security+)

3. Autonomous, meticulous, with a strong focus on security and compliance

4. Excellent interpersonal and communication skills, capable of working within a team

5. Proven experience in managing complex & secure Active Directory environments and Public Key Infrastructure (PKI)

6. Strong knowledge of security best practices, identity management, obsolescence management, and system standardization

7. Knowledge and practical experience with PingCastle would be a plus