Senior Infrastructure Engineer with French (Windows + Ansible)

Description

The company needs a centralized credential management service that supports automation across a large enterprise, and this role covers the project from evaluating options and designing the architecture through to implementation and integration into a complex IT environment.

The work is a short-term project with an initial commitment of 6 months. An extension may follow depending on project needs and business priorities, but it cannot be guaranteed at this stage.

Cooperation is offered only to people located in Poland who can commute to the company's office in Katowice, Poland.

The company is a large technology firm operating in nearly 30 countries with more than 55,000 employees. Its Polish branch, the Global Delivery Center in Katowice, has operated since 2007 and employs around 1,000 specialists.

The Digital Platform Services department covers cloud, operating systems, virtualization, databases, backup, storage, networking and security. The Application Services department covers software development, data engineering, testing, CRM, ITSM and ERP integrations, and application management for customers in several European markets.

Responsibilities

• Build and maintain a centralized credential management service for Windows server environments.
• Create a secure way for Ansible and AWX workflows to retrieve and use credentials, based on who is requesting them and which systems are targeted.
• Set up how credentials are deployed and managed through their lifecycle across Windows servers.
• Control access at the level of single servers and server groups, with several privilege tiers such as Administrator and Standard User.
• Put in place credential rotation and time-limited access to improve security and compliance.
• Make sure the solution works with Windows Server 2012 R2 and later.
• Design the solution around cybersecurity best practices, without relying on deprecated or vulnerable authentication protocols and mechanisms.
• Work with infrastructure, security and automation teams to find, assess and implement enterprise-grade credential management solutions.
• Run technical studies, proofs of concept and solution assessments within the existing enterprise environment.
• Lead the implementation, integration and day-to-day running of the chosen solution.
• Advise on technical matters and make sure DevSecOps principles are followed throughout the project.
• Run the project on your own, handling priorities, risks, stakeholders and technical deliverables.

Requirements

• Deep experience administering and securing Windows Server.
• Practical experience with Ansible automation, ideally including AWX.
• Strong expertise in Identity & Access Management (IAM), Privileged Access Management (PAM) and credential management solutions.
• A good grasp of DevSecOps practices, identity and access management, and privileged access management concepts.
• Experience designing and implementing secure authentication and credential management solutions.
• Ability to work independently and lead technical work from assessment through to implementation.
• Strong analytical, problem-solving and stakeholder management skills.
• Fluent French and English, spoken and written.
• Availability for a 6-month engagement. An extension may be considered depending on project requirements but cannot be guaranteed.
• ITIL v4.
• Certifications in automation, cloud, security or infrastructure architecture are a plus.

Conditions

Location: Poland, with a commute to the office in Katowice required.

Initial contract term of 6 months, with a possible extension that is not guaranteed.

Candidates are told the salary range and its additional components during the first recruitment stage.

The company is committed to equal treatment and an inclusive workplace for all differences.

Benefits

• Under an employment contract (UoP): Luxmed healthcare, Medicover Sport, Worksmile, educational and language learning platforms, a referral bonus, copyrights, life insurance, company-paid certifications, conference attendance, Tech Lunches, access to internal communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud), and a local kindergarten.
• Under a B2B contract: Tech Lunches, Worksmile, and access to the same internal communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud).
• Free parking, fresh fruit and workation.