System Engineer- Active Directory (AD)

Digital Labs Sdn Bhd; Petaling Jaya; Hybrid; MYR 90,000 - 140,000; Full time

Job summary

Digital Labs Sdn Bhd is seeking a System Engineer – Active Directory to support, maintain, and enhance enterprise AD, Windows Server, and virtualization infrastructure across customer environments. The role emphasizes secure, highly available identity and infrastructure services with proactive administration and governance.

The ideal candidate will handle AD DS, Group Policy, Azure AD, Microsoft 365 integration, VMware, and Windows Server environments, while aligning with security policies,

Qualifications

• Diploma or degree in IT/CS or equivalent.
• 4–5 years of experience in AD, Windows Server, VMware, or enterprise infra support.
• Hands-on with AD DS, DNS, DHCP, GPO, Azure AD, Microsoft 365, and hybrid identity.
• Familiar with ITSM tools such as ServiceNow or Remedy.
• Strong troubleshooting, communication, and customer-service skills.

Responsibilities

• Administer and maintain Active Directory infrastructure (Domain Controllers, DNS, DHCP, GPO).
• Support hybrid identity environments including Azure AD, Azure AD Connect, and Microsoft 365 integration.
• Perform preventive maintenance, patching, remediation, and security hardening for Windows Server and VMware.
• Support VMware ESXi/vCenter and virtualization operations.
• Develop PowerShell scripts for automation, reporting, and administration.
• Prepare audit evidence and assist with internal and external audits.
• Coordinate with teams and vendors for issue resolution and service improvement.

Skills

Active Directory

Windows Server

VMware

PowerShell scripting

Customer service

Education

Diploma or Degree in IT/CS

Tools

Azure AD

PowerShell

VMware vCenter

ServiceNow

Backup/DR tools

Job description

The System Engineer – Active Directory (AD) is responsible for supporting, maintaining, and enhancing enterprise Active Directory, Windows Server, and virtualization infrastructure across customer environments. The role focuses on ensuring stable, secure, and highly available identity, authentication, and infrastructure services through proactive administration, preventive maintenance, troubleshooting, patching, remediation, and operational governance.

The engineer will support Active Directory Domain Services (AD DS), Group Policy Management, DNS, DHCP, Microsoft Entra ID (Azure AD), Microsoft 365 integration, VMware infrastructure, and Windows Server environments while ensuring compliance with operational standards, security policies, audit requirements, and service level commitments.

The role also involves supporting vulnerability remediation, CVE workaround implementation, infrastructure hardening, certificate renewal management, backup and disaster recovery operations, as well as internal and external audit activities.

The ideal candidate should possess strong technical troubleshooting skills, operational discipline, scripting and automation capability, customer engagement skills, and the ability to work effectively in both on-premises and hybrid cloud infrastructure environments.

Key Responsibilities

Active Directory & Infrastructure Management

• Administer and maintain Active Directory infrastructure including Domain Controllers, DNS, DHCP, Group Policy, replication, and authentication services.
• Support hybrid identity environments including Microsoft Entra ID (Azure AD), Azure AD Connect, and Microsoft 365 integration.
• Perform preventive maintenance, system health checks, patching, upgrade, remediation, and security hardening activities for Windows Server and VMware environments.
• Support VMware infrastructure including ESXi hosts, vCenter, virtual machine provisioning, cluster management, and virtualization operations.
• Perform vulnerability remediation, CVE workaround implementation, SSL certificate renewal, and infrastructure security improvement activities.
• Support backup, disaster recovery, and business continuity operations for infrastructure and identity services.
• Troubleshoot and resolve infrastructure, authentication, and system-related incidents, problems, and service requests within agreed SLA timelines.
• Develop and maintain PowerShell scripts for automation, reporting, and operational administration tasks.
• Maintain technical documentation, SOPs, configuration baselines, operational records, and audit-related documentation.
• Coordinate with infrastructure, cloud, network, security, application teams, and vendors for issue resolution and service improvement initiatives.
• Ensure compliance with operational procedures, governance standards, security policies, and audit requirements.

Audit, Compliance & Governance

• Support internal and external audit activities related to Active Directory, virtualization, infrastructure security, and operational compliance.
• Prepare audit evidence, access review records, configuration documentation, and remediation reports during audit exercises.
• Support remediation activities arising from audit findings, vulnerability assessments, and security reviews.
• Participate in infrastructure risk assessment, governance reviews, and continuous security improvement initiatives.
• Work closely with internal technical teams, vendors, and partners to support infrastructure integration, operational support, and enterprise solution deployment.
• Participate in operational reviews, technical discussions, implementation planning, and continuous service improvement activities.

Qualifications / Experience / Knowledge

• Diploma, Degree, or equivalent qualification in Information Technology, Computer Science, or related field.
• Minimum 4–5 years of experience in Active Directory, Windows Server, VMware, or enterprise infrastructure support within managed services environments.
• Hands‑on experience supporting Active Directory, DNS, DHCP, Group Policy, Windows Server 2016/2019/2022, and hybrid identity platforms.
• Familiar with Microsoft Entra ID (Azure AD), Azure AD Connect, Microsoft 365, IAM, MFA, RBAC, PAM, and infrastructure security best practices.
• Experience supporting VMware ESXi, vCenter, virtualization platforms, preventive maintenance, infrastructure monitoring, and upgrade activities.
• Familiar with infrastructure patching, vulnerability remediation, CVE mitigation, SSL certificate management, and security hardening practices.
• Basic scripting knowledge using PowerShell for automation, administration, and troubleshooting activities.
• Familiar with backup, disaster recovery, monitoring tools, operational governance, and audit compliance processes.
• Experience using ITSM/ticketing platforms such as ServiceNow, BMC Remedy, or equivalent systems.
• Good analytical, troubleshooting, communication, and customer service skills with the ability to work independently in customer-facing environments.
• Microsoft or VMware certifications are advantageou