Active Directory & Entra ID Engineer

ITCAN PTE. LIMITED; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

A global technology company in Singapore is seeking a highly skilled professional with expertise in Active Directory and Entra ID. You'll collaborate with a global team to manage AD forests, automate operations using PowerShell, and ensure compliance with security standards. Ideal candidates will possess a Bachelor's degree and have substantial experience in critical environments, demonstrating strong security awareness. This role involves both technical management and participation in group projects focused on enhancement and security of AD systems.

Qualifications

• Bachelor's degree +2 to +5 years of significant experience in AD / Entra ID.
• Strong security awareness and ability to work in critical environments.
• Expertise in documenting and automating processes.

Responsibilities

• Administration, operation, and hardening of Corporate / Resources / Isolation AD forests.
• Management of Domain Controllers and GPO.
• Participation in Group projects related to AD consolidation and security compliance.

Skills

Strong technical expertise in Active Directory

Automation using PowerShell

Security concepts: RBAC, Zero Trust, MFA

Working in cross-functional teams

Education

Bachelor's degree

Tools

PowerShell

Microsoft 365

Defender

GraphAPI

Job description

Overview

The ideal candidate must possess very strong technical expertise in Active Directory / Entra ID and be able to join a global team for over-the-clock activities.

Direct Responsibilities

• Administration, operation, and hardening of Corporate / Resources / Isolation AD forests.
• Management of Domain Controllers (Windows Server 2019/2022), GPO, DNS, Sites & Services, replication.
• Management of Entra ID, IAM, and AD Connect.
• Participation in Group projects: AD consolidation, DNS redesign, tiering, and securing sensitive accounts.
• Automation using PowerShell, industrialization of operations (audits, provisioning, remediation).
• Contribution to the AD Disaster Recovery Plan (detection, restoration, technical communication).
• Monitoring & auditing: Change Auditor, EDR, log collection.
• Participation in transversal projects: M&A, application integration, onboarding/offboarding, security compliance.
• Documentation (DAT/DEX), contribution to AD governance.

Technical

• Active Directory Domain Services, DNS, GPO, PKI, ADFS.
• Entra ID / Azure AD Connect / Identity Governance.
• Advanced PowerShell (audits, automated scripts, remediation).
• Security concepts: RBAC, Zero Trust, MFA, AD Tiering.
• Tools: Sempris ADFR/Forest Druid, Ranger AD, PingCastle, Microsoft 365, Defender, GraphAPI.
• Knowledge of AD DRP/BCP appreciated.

Qualifications

• Bachelor's degree +2 to +5 with significant experience in AD / Entra ID.
• Strong security awareness, rigor, and mastery of critical environments.
• Ability to work in cross‑functional teams within an international environment.
• Ability to document, automate, and anticipate risks.