Active Directory Engineer

HCLTech; Singapore; Hybrid; SGD 90,000 - 120,000; Full time

Job summary

HCLTech is seeking a highly skilled Active Directory Engineer in Singapore. The role involves leading Active Directory migrations and upgrades across enterprise environments, conducting assessments of existing infrastructures, and ensuring seamless migrations while managing project stakeholders.

The ideal candidate will possess extensive experience in Active Directory administration, engineering, and lifecycle management, with strong skills in PowerShell scripting and project leadership.

Qualifications

• Minimum 10 years of experience in Active Directory administration, engineering, and lifecycle management.
• Proven track record in planning and executing AD migration and upgrade projects.
• Strong expertise in multi-site, multi-domain, and multi-forest AD environments.

Responsibilities

• Lead end-to-end Active Directory migration and upgrade initiatives across enterprise environments.
• Design and implement AD upgrade strategies to modern Windows Server environments.
• Administer and support DFS, DNS, and Group Policy infrastructure.

Skills

Active Directory administration

PowerShell scripting

Stakeholder management

Project leadership

Troubleshooting

Education

Bachelor’s degree in Information Technology or related field

Tools

ADMT

Quest Migration Manager

Windows Server 2025

ServiceNow

Job description

We are seeking a highly skilled Active Directory Engineer with experience in planning and executing Active Directory (AD) migrations/Upgrade. The ideal candidate will be responsible for developing comprehensive upgrade plans, performing assessments of existing environments, and ensuring a seamless migration with minimal disruption. In addition, candidate should have skill to lead the project and deal with stakeholders.

Responsibilities

• Lead end-to-end Active Directory migration and upgrade initiatives across enterprise environments.
• Perform comprehensive assessments of existing AD infrastructure, including domain controllers, Group Policies, DNS, DFS, and security configurations.
• Design and implement AD upgrade strategies to modern Windows Server environments (e.g., Windows Server 2025).
• Identify and eliminate dependencies on legacy AD systems while ensuring business continuity.
• Plan and execute domain controller lifecycle activities, including promotion, demotion, and decommissioning.
• Collaborate with application, network, and security teams to ensure compatibility and seamless integration during migration.
• Work with application owners to remediate insecure protocols and remove hardcoded dependencies.
• Manage and troubleshoot Active Directory Federation Services (ADFS) and directory synchronization issues.
• Administer and support DFS, DNS, and Group Policy infrastructure.
• Utilize migration tools such as ADMT, Quest Migration Manager, or equivalent solutions.
• Develop and execute pre-migration validation, testing, and rollback strategies.
• Automate administrative and migration tasks using PowerShell scripting.
• Ensure adherence to security policies, compliance standards, and AD best practices.
• Provide post-migration support and resolve complex technical issues.
• Act as a technical lead, guiding L1/L2 engineers and ensuring adherence to ITIL processes.
• Prepare and maintain technical documentation, runbooks, and knowledge base articles.

Requirements

• Bachelor’s degree in Information Technology or related field
• Minimum 10 years of experience in Active Directory administration, engineering, and lifecycle management.
• Proven track record in planning and executing AD migration and upgrade projects.
• Strong expertise in multi-site, multi-domain, and multi-forest AD environments.
• Hands‑on experience with AD migration tools (e.g., ADMT, Quest Migration Manager).
• Strong knowledge of Windows Server platforms (2016/2019/2022; 2025 preferred).
• Deep understanding of authentication, authorization, and OS‑level security.
• Proficiency in PowerShell scripting for automation and administration.
• Experience with Active Directory Certificate Services (ADCS), ADFS, and Identity Management solutions.
• Knowledge of IAM, Entra ID, and Single Sign‑On (SSO) technologies.
• Strong experience in DFS, DNS, and Group Policy management.
• Experience performing AD health checks and performance tuning.
• Familiarity with ITIL processes and tools such as ServiceNow (Incident, Problem, and Change Management).
• Strong problem‑solving, troubleshooting, and analytical skills.
• Excellent communication, stakeholder management, and documentation skills.