Infrastructure | Security | Windows | Server Spezialist

Overview

Description

Start: ASAP

Location: Remote

The following skills are required:

– Expert know-how in the field of Windows Server Infrastructure specifically Active Directory.

– Very good knowledge in group policies, WSUS, Windows certificate authorities, RDS gateways, design of AD infrastructure + administration IAM/PAM and related topics such as authentication, authorization, multi-factor auth, certificates

– Good knowledge of related topics such as Linux systems, LDAP, PKI

– Very good knowledge in the area of IT security and compliance

– Certifications and trainings in the following areas are to be shown:

– T-Network

– Windows 10

– Active Directory

– Preferred Certifications:

Microsoft Certified: AZ-800 & AZ-801

Microsoft Certified: 70-742 & 70-744

Experience with

-Windows Client Systems (10/11)

– Windows Server Systems from 2016

– VMware ESX virtualization environment

– Powershell

– JIRA

– Confluence

– GIT

Tasks and goals

Subject area Hardening Windows Infrastructure

The goal is to analyze the security of the current Windows infrastructure, to implement appropriate mechanisms and to implement the security baselines of Microsoft for Windows Server & Clients in order to increase the security level of the Active Directory.

Concepts and considerations, performed PoCs, compliance and PKI policies are to be taken into account.

Project Objectives:

To develop an overarching implementation blueprint that

– shows the necessary action points

– list the affected IT systems

– take rollback mechanisms into account

– list the exceptions or special cases

– Implementation of the MS Security Baselines for Windows Server 2019/2022 and Windows 10/11

– Evaluation and optimization of existing GPOs with rollback language

– Preparation & support for the implementation of Tiered Administration or the Enterprise Access Model according to MS

– Preparation & support for the implementation of Role-Based Access Control via the Delegation Control mechanism

– Implementation of WSUS

– Implementation of Windows Certification Authority

– Implementation of LAPS

– Consulting and technical implementation support for 3rd level changes