We are looking for 2 Senior Security Engineers to join the bank’s Security Engineering team and support the Active Directory Hygiene Initiative. The consultants will work with Security Engineering and Infrastructure teams to identify, remediate, and prevent security, configuration, and architectural issues across the bank’s Active Directory environment.

Start: ASAP
Contract end: 31 December 2026, with possible extension
Workload: Full-time
Location: Europe, with strong preference for the Baltics
Work setup: Remote/hybrid, with paid onsite visits to Baltic offices approximately once per month for 2–3 days
Time zone: CET or EET
Candidate submissions: ASAP

Must-have experience
Candidates must have 7–10 years of practical, hands-on experience, clearly described in the CV, covering:
Active Directory architecture, forests, domains, replication, DNS, Group Policy and security hardening
Tiering, ESAE/Red Forest, PAM and identity and access management
Microsoft Entra ID hybrid integration and ADFS
PKI and Active Directory Certificate Services
Kerberos and authentication flows
PowerShell automation and scripting
Active Directory disaster recovery, backup, restore, migration and consolidation
Auditing and compliance, preferably aligned with NIST and DORA
Strong networking, troubleshooting and problem-solving skills
Large-scale enterprise environments
Fluent English and strong stakeholder communication skills

Nice to have
Advanced Microsoft Azure or Entra ID experience
AWS experience
Banking or financial services experience