Senior Infrastructure Engineer with French (Windows + Ansible)

We are seeking an experienced Senior Infrastructure Engineer to assess, design, and implement a centralized credential management service supporting enterprise-scale automation. The successful candidate will drive the project end-to-end, from solution evaluation and architecture design to implementation and integration within a complex IT ecosystem.

Note that we can only offer cooperation to people who are located in Poland and are willing to commute to our office in Katowice, Poland.

Project Duration:
This is a short-term project with an initial commitment of 6 months. While there may be opportunities for an extension based on project needs and business priorities, no extension can be guaranteed at this stage.

Responsibilities:​

• Design, implement, and maintain a centralized credential management service for Windows server environments.
• Deliver a secure solution enabling automated retrieval and use of credentials by Ansible/AWX workflows based on the requesting user and target systems.
• Define and implement credential deployment and lifecycle management processes across Windows servers.
• Ensure granular access control at both individual server and server-group levels, including support for multiple privilege tiers (e.g., Administrator and Standard User).
• Implement credential rotation and time-bound access mechanisms to enhance security and compliance.
• Ensure compatibility with Windows Server environments from Windows Server 2012 R2 onwards.
• Design solutions aligned with cybersecurity best practices, avoiding deprecated or vulnerable authentication protocols and mechanisms.
• Collaborate with infrastructure, security, and automation teams to identify, evaluate, and implement enterprise-grade credential management solutions.
• Conduct technical studies, proof-of-concepts, and solution assessments within the existing enterprise ecosystem.
• Lead the implementation, integration, and operationalization of the selected solution.
• Provide technical guidance and ensure adherence to DevSecOps principles throughout the project lifecycle.
• Drive the project autonomously, managing priorities, risks, stakeholders, and technical deliverables.

Must have requirements:​

• Strong expertise in Windows Server administration and security.
• Hands-on experience with Ansible automation, ideally including AWX.
• Strong expertise in Identity & Access Management (IAM), Privileged Access Management (PAM), and Credential Management solutions
• Solid understanding of DevSecOps practices, identity and access management, and privileged access management concepts.
• Experience designing and implementing secure authentication and credential management solutions.
• Ability to work independently and lead technical initiatives from assessment through implementation.
• Strong analytical, problem-solving, and stakeholder management skills.
• Fluent French and English language skills (spoken and written).
• Availability for a 6-month engagement; extension may be considered based on project requirements, although it cannot be guaranteed.

Nice to have requirements:

• ITIL v4.
• Certifications in Automation, Cloud, Security, or Infrastructure Architecture are considered a plus.

What we offer:

- BENEFITS (UoP): Luxmed, Medicover Sport, Worksmile, educational platforms, languages learning platform, referral bonus, copyrights, life insurance, certifications (paid by the company), conferences, Tech Lunches, possibility to join our Communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud), local kindergarten.
- DEVELOPMENT OPPORTUNITIES (B2B): Tech Lunches, Worksmile, possibility to join our Communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud).

ADDITION: free parking, fresh fruits, workation.
In case of questions, please contact the HR team.

The recruitment process for this position consists of two stages:
• a short phone call with a recruiter (30 min max)
• one-hour long interview on Teams (with both general and technical questions)

All information about salary range and its additional components will be provided during the 1st stage of recruitment process.

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.