Systems Engineer – Directory Services (Active Directory / Entra ID)

Deltek Systems (Philippines), Ltd.

Makati

Hybrid

PHP 1,000,000 - 1,800,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

14th month pay

Profit sharing

Retirement package

Health cards for dependents

Remote work setup

Job summary

Deltek Systems (Philippines), Ltd. is seeking a skilled identity and access administrator to design and operate Entra ID and Active Directory within a hybrid environment. You will own user lifecycle management, directory health, and secure access controls.

The role includes configuring SSO, SCIM provisioning, and governance processes, while leveraging automation with PowerShell and Microsoft Graph to streamline operations and improve user experience.

Qualifications

Hands-on with Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.
Strong troubleshooting across identity, authentication, and messaging services.
Automations using PowerShell and Microsoft Graph API for identity ops.
Experience with conditional access, MFA, and identity protection controls.

Responsibilities

Own design, administration, and improvement of Entra ID and AD including user lifecycle and hybrid identity.
Manage domain services, DNS, replication, GPOs, and directory health.
Design and support conditional access, MFA, and passwordless auth aligned to Zero Trust.
Manage Enterprise Applications, SSO (SAML, OAuth, OIDC), SCIM provisioning.
Drive identity governance with RBAC, access reviews, and certifications.
Automate identity ops using PowerShell, Graph, and workflow tools.

Skills

Entra ID/Azure AD

Active Directory

Microsoft 365

PowerShell scripting

Microsoft Graph API

Identity governance

Zero Trust concepts

Tools

ServiceNow

Saviynt

M365 Admin Center

Copilot / AI agents

Microsoft Copilot

Job description

Key Responsibilities

Own the design, administration, and continuous improvement of Microsoft Entra ID and Active Directory, including user lifecycle management, hybrid identity, directory synchronization, and authentication services.
Manage Active Directory domain services, replication, domain controllers, DNS integration, FSMO roles, Group Policy, and overall directory health.
Design and support Conditional Access, MFA, passwordless authentication, and identity security controls aligned to Zero Trust principles.
Manage Enterprise Applications, App Registrations, SSO integrations (SAML, OAuth, OIDC), SCIM provisioning, and access automation.
Drive identity governance practices including RBAC, least-privilege access, access certifications, and integration with Saviynt.
Automate identity operations using PowerShell, Microsoft Graph, and workflow automation platforms to improve efficiency and user experience.

Messaging & Collaboration (Supporting Scope)

Administer Exchange Online, hybrid mail flow, and Microsoft Teams, including distribution lists, shared mailboxes, and transport rules.

Troubleshoot escalated issues related to mail delivery, Outlook, calendaring, and their integration with identity services.

Operations, Reliability, and Incident Management

Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuringtimelycommunication and adherence to SLAs.

Lead orparticipatein on-call rotation and major incident response as a senior escalation point.

Drive root cause analysis and problem management, translating recurring issues into permanent fixes and system improvements.

Automation and AI-Driven Process Improvement

Design andmaintainPowerShell scripts and automation workflows (including Microsoft Graph API) that streamline identity and access operations end-to-end.

Championan automation-first approach,identifyingmanual processes acrossidentity platformoperations that can be eliminated or self-serviced.

Leverage AI-powered tools such as Microsoft Copilot, scripting assistants, and workflow automation platforms to accelerate troubleshooting, generate scripts, improve documentation, and surface operational insights.

Apply AI to enhance identity governance activities such as access reviews, anomaly detection, and reporting.

User Experience and Continuous Improvement

Partner with service desk, endpoint, and security teams to resolve identity and access issues and elevate the overall user experience.

Analyze recurring access and authentication trends; build knowledge base content and self-service capabilities to reduce ticket volume.

Mentor junior team members on identity concepts, tooling, and troubleshootingmethodology.

Qualifications :

3–5+ years of experience supporting enterprise Microsoft environments, with hands‑on experience in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.
Strong troubleshooting skills across identity, authentication, and messaging services.
Solid understanding of directory services, group policies, DNS, and access control models.
Basic scripting experience with PowerShellisrequired.

Required Qualifications

5+ years of experience supporting enterprise Microsoft identity environments, with hands‑on depth in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.

Advanced troubleshooting skills across identity, authentication, and access management.

Strong understanding of directory services, group policy, DNS, and access control models (RBAC, least privilege).

Proficientin automation &scripting with PowerShell,AI agents using Copilot & Claude,including experience with Microsoft Graph API/SDK for automation.

Demonstrated experience designing or administering Conditional Access, MFA, and identity protection controls.
Open to a US shift

Preferred Qualifications

Experience with identity governance concepts or platforms (e.g., Saviynt, SailPoint, Okta IGA, CyberArk) — access certifications, entitlement management,SoD.