active directory engineer (weekends, shift) #IKR

RECRUIT EXPRESS PTE LTD; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

RECRUIT EXPRESS PTE LTD is seeking an experienced Windows Infrastructure Administrator to manage AD, Group Policy, DNS/DHCP, and PKI across on-premises and hybrid environments.

You will implement Microsoft 365 integration with AD, configure ADFS for secure SSO, and design Tier-0 architecture with privileged access controls. Strong PowerShell skills and ITIL experience are required.

Qualifications

• 5+ years of experience in Windows infrastructure administration.
• Strong knowledge of Active Directory: forest/domain design, OU structure, and GPOs.
• Experience with Microsoft 365 integration, including Azure AD Connect and hybrid identity.
• Hands-on experience with ADFS and federation services.
• Familiarity with Tier-0 AD architecture and privileged access management.
• Experience managing Certificate Authority servers and PKI concepts.
• PowerShell scripting for automation and administration.
• Networking fundamentals (TCP/IP, DNS, DHCP, and PKI).
• Microsoft certifications (e.g., MCSE, MS-102, AZ-800/801).
• Experience with identity governance and privileged access tools (e.g. CyberArk).
• Exposure to cloud platforms such as Azure or AWS.
• Familiarity with ITIL framework and change management processes.

Responsibilities

• Manage and support Active Directory infrastructure, including Group Policy, DNS, DHCP, and replication.
• Implement and maintain Microsoft 365 integration with Active Directory, including hybrid identity solutions.
• Configure and support ADFS and related federation services for secure authentication and SSO.
• Design and maintain Tier-0 AD architecture, ensuring security and segregation of privileged access.
• Administer and maintain Windows Server environments, including patching, performance tuning, and troubleshooting.
• Administer and maintain the Certificate Authority (CA) server
• Participate in infrastructure projects, including upgrades, migrations, and automation initiatives.
• Monitor system performance and availability and respond to incidents and service requests.
• Collaborate with security and compliance teams to ensure adherence to policies and standards.
• Document procedures, configurations, and changes in accordance with ITIL practices.
• Any other ad-hoc duties as assigned by supervisor.

Skills

Active Directory

Group Policy

DNS & DHCP

PowerShell

Azure AD Connect

ADFS

Privileged Access Management

PKI

ITIL

CyberArk

Cloud (Azure/AWS)

Scripting automation

Education

MCSE

MS-102

AZ-800/801

Tools

ADFS

CyberArk

Azure AD Connect

Microsoft 365

Job description

Note: Successful candidates need to be comfortable with working on weekends and shift as and when required

Job Description

• Manage and support Active Directory infrastructure, including Group Policy, DNS, DHCP, and replication.
• Implement and maintain Microsoft 365 integration with Active Directory, including hybrid identity solutions.
• Configure and support ADFS and related federation services for secure authentication and SSO.
• Design and maintain Tier-0 AD architecture, ensuring security and segregation of privileged access.
• Administer and maintain Windows Server environments, including patching, performance tuning, and troubleshooting.
• Administer and maintain the Certificate Authority (CA) server
• Participate in infrastructure projects, including upgrades, migrations, and automation initiatives.
• Monitor system performance and availability and respond to incidents and service requests.
• Collaborate with security and compliance teams to ensure adherence to policies and standards.
• Document procedures, configurations, and changes in accordance with ITIL practices.
• Any other ad-hoc duties as assigned by supervisor.

Requirement

• Minimum 5 years of experience in Windows Infrastructure administration.
• Strong knowledge of Active Directory, including forest/domain design, OU structure, and GPOs.
• Experience with Microsoft 365 integration, including Azure AD Connect and hybrid identity.
• Hands-on experience with ADFS and federation services.
• Familiarity with Tier-0 AD architecture and privileged access management.
• Experience managing Certificate Authority servers and understanding of PKI concepts.
• Proficiency in PowerShell scripting for automation and administration tasks.
• Understanding of networking fundamentals (TCP/IP, DNS, DHCP, Certificate Authority).
• Excellent problem-solving skills.
• Microsoft certifications (e.g., MCSE, MS-102, AZ-800/801).
• Experience with identity governance and privileged access tools (e.g. CyberArk).
• Exposure to cloud platforms such as Azure or AWS.
• Familiarity with ITIL framework and change management processes.