L2 Active Directory Engineer

CORNERSTONE GLOBAL PARTNERS PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Cornerstone Global Partners Pte Ltd seeks an L2 Active Directory Engineer to support and administer enterprise IAM services, including Active Directory, Microsoft Entra ID (Azure AD), user provisioning, and access management. You will act as the escalation point for Service Desk and Deskside teams, ensuring security compliance and SLA adherence.

Responsibilities include AD/Azure AD administration, RBAC, SSO/multi-factor auth, and automation with PowerShell, while maintaining runbooks and

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related discipline.
• 5+ years of experience supporting enterprise Active Directory environments.
• Microsoft Identity and Access-related certifications preferred.
• Azure Administrator or identity-related certifications preferred.

Responsibilities

• Provide L2 support for directory and identity-related incidents.
• Troubleshoot account lockouts, authentication failures, access issues, and synchronization problems.
• Resolve complex user access issues escalated from Service Desk.
• Perform root cause analysis for recurring IAM incidents.
• Coordinate with infrastructure, security, and application teams for issue resolution.
• Support major incident management when identity services are impacted.

Skills

Microsoft Active Directory

Microsoft Entra ID (Azure AD)

Azure AD Connect

Group Policy Administration

LDAP & Authentication Services

DNS & DHCP Fundamentals

Identity & Access Management (IAM)

User Lifecycle Management (JML)

Microsoft Windows Server Admin

Multi-Factor Authentication (MFA)

Education

Bachelor's Degree in Computer Science, Information Technology, or a related discipline

Tools

PowerShell

Job description

The L2 Active Directory Engineer will be responsible for supporting and administering enterprise Identity and Access Management (IAM) services, Active Directory, Microsoft Entra ID (Azure AD), user provisioning, access management, authentication services, and directory infrastructure operations.

The role will serve as the escalation point for Service Desk and Deskside teams for identity-related incidents, service requests, and operational activities, while ensuring compliance with security standards, audit requirements, and operational service levels.

As defined within the SOW, the engineer will support account management, password management, access provisioning, and directory services operations across the enterprise environment.

Key Responsibilities

Active Directory Administration

• Administer and support Microsoft Active Directory infrastructure.

• Manage user, group, computer, and organisational unit (OU) administration.

• Perform user lifecycle management, including Joiner, Mover, and Leaver processes.

• Create and maintain Group Policies (GPOs).

• Manage Active Directory replication and monitor directory health.

• Perform account audits and directory clean‑up activities.

• Troubleshoot authentication and directory‑related issues.

Microsoft Entra ID (Azure AD) Administration

• Manage Microsoft Entra ID tenant administration.

• Support identity synchronisation and hybrid identity operations.

• Administer Conditional Access Policies.

• Manage Azure AD Connect synchronisation health.

• Support Self‑Service Password Reset (SSPR).

• Troubleshoot authentication and synchronisation failures.

• Support identity governance initiatives.

Identity & Access Management

• Provision, modify, and deprovision user access.

• Manage role‑based access controls (RBAC).

• Handle access requests and approvals in accordance with organisational policies.

• Manage privileged account administration.

• Support access certification and review exercises.

• Ensure compliance with segregation of duties requirements.

Incident & Service Request Management

• Provide L2 support for directory and identity‑related incidents.

• Troubleshoot account lockouts, authentication failures, access issues, and synchronisation problems.

• Resolve complex user access issues escalated from Service Desk.

• Perform root cause analysis for recurring IAM incidents.

• Coordinate with infrastructure, security, and application teams for issue resolution.

• Support major incident management when identity services are impacted.

Security & Compliance

• Support security monitoring and remediation activities.

• Maintain compliance with audit and regulatory requirements.

• Participate in access reviews and certification exercises.

• Support vulnerability remediation and security hardening activities.

• Maintain compliance with corporate security standards and governance policies.

Automation & Continuous Improvement

• Develop PowerShell scripts to automate repetitive tasks.

• Automate user provisioning and reporting processes.

• Improve operational efficiency through workflow optimisation.

• Identify opportunities to enhance identity management services.

• Support self‑service and automation initiatives.

Reporting & Documentation

• Maintain accurate documentation, SOPs, and knowledge articles.

• Produce operational and compliance reports.

• Update runbooks and support documentation regularly.

• Participate in governance reviews and service improvement initiatives.

Required Technical Skills

• Microsoft Active Directory

• Microsoft Entra ID (Azure AD)

• Azure AD Connect

• Group Policy Administration

• LDAP & Authentication Services

• DNS & DHCP Fundamentals

• Identity & Access Management (IAM)

• User Lifecycle Management (JML)

• Microsoft Windows Server Administration

• Multi‑Factor Authentication (MFA)

Qualifications & Experience

• Bachelor's Degree in Computer Science, Information Technology, or a related discipline.

  5+ years of experience supporting enterprise Active Directory environments.

  Microsoft Identity and Access-related certifications preferred.

  Azure Administrator or identity‑related certifications preferred.

  Due to an anticipated high volume of applicants, we regret that only shortlisted candidates will be notified. The information provided is for recruitment purposes only.

  Cornerstone Global Partners (EA License Number: 19C9859) is an affirmative equal‑opportunity employer and recruitment firm. We evaluate qualified applicants without regard to race, colour, religion, creed, gender, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

  Zhang Jifan (Scarlett)
  [e-mail]

  EA Registration Number: R26159541.

  Cornerstone Global Partners Pte Ltd (EA License: 19C9859)