Wintel Active Directory Senior Technical Lead

Company Description

About Sopra Steria
Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.
The world is how we shape it.

Job Description

Active Directory & Wintel

1. Excellent working knowledge of Microsoft Active Directory and Azure Active Directory, with the ability to assess enterprise on‑prem AD environments and design and implement target solutions.
2. Strong expertise in Active Directory design and implementation, including:
3. AD forest and domain design
4. Sites and subnets
5. FSMO role placement
6. NTP configuration
7. RODC management
8. Experience with on‑premises Active Directory and Azure Active Directory integration and migration.
9. In‑depth knowledge of PKI, Certificate Services, ADFS, and identity federation technologies.
10. Hands‑on experience with Active Directory security, resilience, and recovery, including tools such as Semperis (AD Forest Recovery, AD Security & Audit).
11. Strong understanding of SSO and MFA implementations.
12. Experience in automating Active Directory and Azure AD tasks, and proposing and implementing infrastructure improvements and enhancements.
13. Proven experience with:
14. Domain Controller promotion and decommissioning
15. GPO design, creation, and implementation
16. Active Directory operational support and project work
17. Good knowledge of DNS, DHCP, File Services, DFS, and other AD‑dependent services.
18. Expertise in securing Microsoft client and server operating systems, including:
19. Authentication and authorization mechanisms
20. Encryption technologies
21. Certificate Authority services
22. Security hardening and compliance
23. Install, configure, tune, maintain, monitor, and troubleshoot Windows Server 2012 / 2016 / 2019 / 2022.
24. Strong experience in server hardening, patching, and vulnerability remediation.
25. Experience managing and supporting Hyper‑V, SCVMM, and Failover Clustering.
26. Ability to support application and infrastructure teams for AD‑related business requirements and incident resolution.
27. Manage work queues for incidents, problems, changes, tasks, and service requests, ensuring effective workload management.
28. Excellent written, verbal, and interpersonal communication skills.

Azure

1. Hands‑on experience in Azure architecture, deployment, and operations.
2. Strong experience with:
3. Azure Virtual Machines and compute services
4. Azure Storage (Accounts, Snapshots, Monitoring)
5. Azure Backup (MARS)
6. Azure Site Recovery
7. Azure Monitor
8. Experience migrating on‑prem applications and workloads to Azure.
9. Experience with Azure Arc for managing and governing on‑premises and multi‑cloud resources from Azure.
10. Knowledge and hands‑on experience with:
11. Azure Active Directory
12. Single Sign‑On (SSO)
13. Identity and access management
14. Understanding of cloud cost monitoring and optimization.
15. Deploy, manage, and support Azure resources using best practices and governance standards.

CyberArk (Secondary)

1. Basic experience with CyberArk PAM, including onboarding and managing privileged accounts (Windows, Active Directory, service accounts).
2. Familiarity with core CyberArk components (PVWA, CPM, PSM) and password rotation concepts.
3. Experience supporting CyberArk‑related incidents and access requests.
4. Understanding of privileged access security best practices and AD/Azure AD integration.

Total Experience Expected: 08-10 years

Qualifications

1. BE/B-TECH or any equivalent degree
2. Language : English (Professional)
3. Other Language Optional - French.

Additional Information

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.