L2 Active Directory Engineer

IoTalents Pte. Ltd.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

IoTalents Pte. Ltd. is seeking an experienced L2 Active Directory Engineer to support and administer enterprise AD, Entra ID, and IAM services in Singapore. The role acts as escalation for identity incidents and coordinates with Service Desk, Infrastructure, Security, and Applications teams.

The candidate will manage AD, Azure AD Connect, RBAC, JML lifecycle, and security hardening while developing automation using PowerShell and maintaining documentation.

Qualifications

• 5+ years of enterprise Active Directory support experience.
• Hands-on with AD, Azure AD, GPO, LDAP, and MFA.
• Experience with DNS and DHCP; strong L2 troubleshooting.
• Scripting in PowerShell to automate IAM tasks.

Responsibilities

• Administer and support Active Directory environments.
• Manage users, groups, OUs, and GPOs; perform JML.
• Administer Entra ID/Azure AD and Azure AD Connect sync.
• Manage RBAC and IAM lifecycle; perform access reviews.
• Provide L2 incident and service request support; root-cause analysis.
• Develop automation scripts; maintain SOPs and runbooks.

Skills

Active Directory

Azure AD

GPO

LDAP

MFA

JML

IAM

Incident management

PowerShell scripting

Troubleshooting

Education

Bachelor's Degree in Computer Science or IT

Tools

Azure AD Connect

Job description

We are looking for an experienced L2 Active Directory Engineer to support and administer enterprise Active Directory, Microsoft Entra ID (Azure AD), Identity & Access Management (IAM), authentication, and directory services.

The role will provide L2 support and act as an escalation point for identity-related incidents and service requests, working closely with Service Desk, Infrastructure, Security, and Application teams.

Key Responsibilities

Active Directory

• Administer and support Microsoft Active Directory environments.
• Manage users, groups, computers, OUs, and Group Policies (GPOs).
• Perform Joiner, Mover, Leaver (JML) processes.
• Monitor AD replication and directory health.
• Perform account audits and directory clean-up.
• Troubleshoot authentication and Active Directory issues.

Microsoft Entra ID / Azure AD

• Administer Microsoft Entra ID environments.
• Support hybrid identity and Azure AD Connect synchronization.
• Manage Conditional Access Policies and MFA.
• Support Self-Service Password Reset (SSPR).
• Troubleshoot authentication and synchronization issues.
• Support identity governance activities.

IAM & Access Management

• Provision, modify, and deprovision user access.
• Manage Role-Based Access Control (RBAC).
• Support privileged account administration.
• Perform access reviews and certification exercises.
• Ensure compliance with access control and segregation of duties requirements.

L2 Incident & Service Request Support

• Provide L2 support for identity and directory-related incidents.
• Troubleshoot account lockouts, authentication failures, access issues, and synchronization problems.
• Perform root cause analysis for recurring issues.
• Escalate and coordinate complex issues with Infrastructure, Security, and Application teams.
• Support major incident management when identity services are impacted.

Security, Automation & Documentation

• Support security hardening and vulnerability remediation.
• Participate in security audits and compliance activities.
• Develop PowerShell scripts to automate repetitive IAM tasks.
• Automate user provisioning, reporting, and operational processes.
• Maintain SOPs, runbooks, knowledge articles, and technical documentation.

Required Skills & Experience

• 5+ years of enterprise Active Directory support experience.
• Strong hands-on experience with:Microsoft Active DirectoryMicrosoft Entra ID / Azure ADAzure AD ConnectGroup Policy (GPO)LDAP and authentication servicesIAM and user lifecycle management (JML)Microsoft Windows ServerMFAPowerShell scripting
• Good understanding of DNS and DHCP.
• Strong L2 troubleshooting and incident management experience.
• Experience supporting enterprise identity and access environments.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or related discipline.
• Microsoft Identity, Azure Administrator, or other relevant certifications are advantageous.