Active Directory & Azure AD IAM Engineer II

AVATAR MODERN TECHNO SERVICES PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

AVATAR MODERN TECHNO SERVICES PTE. LTD. is seeking an L2 Active Directory Engineer to support and administer enterprise IAM services, Active Directory and Microsoft Entra ID (Azure AD) within our directory infrastructure.

You will act as the escalation point for identity incidents from Service Desk, manage user provisioning and access requests, implement GPOs and CAC, and help ensure security, audit, and SLA compliance across the organization.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or related discipline.
• Microsoft Identity and Access related certifications preferred.
• Azure Administrator or Identity-related certifications preferred.
• 5+ years of experience supporting enterprise Active Directory environments.

Responsibilities

• Administer and support Microsoft Active Directory infrastructure.
• Manage user, group, computer, and organizational unit (OU) administration.
• Perform user lifecycle management (Joiner, Mover, Leaver processes).
• Create and maintain Group Policies (GPOs).
• Manage Active Directory replication and directory health monitoring.
• Perform account audits and directory clean-up activities.
• Support troubleshooting of authentication and directory-related issues.
• Manage Microsoft Entra ID (Azure AD) tenant administration.
• Support identity synchronization and hybrid identity operations.
• Administer Conditional Access Policies.
• Manage Azure AD Connect synchronization health.
• Support Self-Service Password Reset (SSPR).
• Troubleshoot authentication and synchronization failures.
• Support identity governance initiatives.
• Provision, modify, and deprovision user access.
• Manage role-based access controls (RBAC).
• Handle access requests and approvals in accordance with organization policies.
• Manage privileged account administration.
• Support access certification and review exercises.
• Ensure compliance with segregation of duties requirements.
• Provide L2 support for directory and identity-related incidents.
• Troubleshoot account lockouts, authentication failures, access issues.
• Coordinate with infrastructure, security, and application teams for issue resolution.
• Support major incident management when identity services are impacted.
• Security & Compliance: support security monitoring and remediation activities; maintain compliance with audit and regulatory requirements; participate in access reviews and certification exercises; support vulnerability remediation and security hardening activities; maintain compliance with corporate security standards and governance policies.
• Automation & Continuous Improvement: develop PowerShell scripts for automation of repetitive tasks; automate user provisioning and reporting processes; improve operational efficiency through workflow optimization; identify opportunities to enhance identity management services; support self-service and automation initiatives.
• Reporting & Documentation: maintain accurate documentation, SOPs, and knowledge articles; produce operational and compliance reports; update runbooks and support documentation regularly; participate in governance reviews and service improvement initiatives.

Skills

Microsoft Active Directory

Microsoft Entra ID (Azure AD)

Azure AD Connect

Group Policy Administration

LDAP & Authentication Services

DNS & DHCP Fundamentals

Identity & Access Management

User Lifecycle Management (JML)

Microsoft Windows Server Admin

Multi-Factor Authentication (MFA)

Education

Bachelor's Degree in Computer Science, Information Technology, or related discipline

Job description

AVATAR MODERN TECHNO SERVICES PTE. LTD. is seeking an L2 Active Directory Engineer to support and administer enterprise IAM services, Active Directory and Microsoft Entra ID (Azure AD) within our directory infrastructure.

You will act as the escalation point for identity incidents from Service Desk, manage user provisioning and access requests, implement GPOs and CAC, and help ensure security, audit, and SLA compliance across the organization.