Senior Active Directory Engineer

INFRASOFT TECHNOLOGIES PTE LTD; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A leading tech solutions provider in Singapore is seeking an experienced IT professional to manage Active Directory operations, ensuring compliance with security standards. This role involves operational management of AD forests, Domain Controllers, and contributing to disaster recovery plans. The ideal candidate has 9+ years of experience, a bachelor's degree, and a strong focus on security. This opportunity offers an engaging international environment and a chance to work on critical infrastructure projects.

Qualifications

• 9+ years of experience in Active Directory and Entra ID.
• Strong security awareness and rigor.
• Experience in cross-functional teams internationally.

Responsibilities

• Administer and operate Corporate AD forests.
• Manage Windows Domain Controllers and DNS.
• Contribute to AD Disaster Recovery Plan.

Skills

Active Directory Domain Services

Advanced PowerShell

Security concepts (RBAC, Zero Trust, MFA)

Automation

Education

Bachelor's degree

Tools

Microsoft 365

GraphAPI

Defender

Job description

Responsibilities

Direct Responsibilities

1. Administration, operation, and hardening of Corporate / Resources / Isolation AD forests.
2. Management of Domain Controllers (Windows Server 2019/2022), GPO, DNS, Sites & Services, replication.
3. Management of Entra ID, IAM, and AD Connect.
4. Participation in Group projects: AD consolidation, DNS redesign, tiering, and securing sensitive accounts.
5. Automation using PowerShell, industrialization of operations (audits, provisioning, remediation).
6. Contribution to the AD Disaster Recovery Plan (detection, restoration, technical communication).
7. Monitoring & auditing: Change Auditor, EDR, log collection.
8. Participation in transversal projects: M&A, application integration, onboarding/offboarding, security compliance.
9. Documentation (DAT/DEX), contribution to AD governance.

Contributing Responsibilities

1. Ensure that the practices comply with local and international regulations and industry standards.
2. Prepare and maintain documentation for internal or external audits
3. Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plans
4. Contribute to the improvement of prevention and detection capabilities for mitigation of IT & Security risks.

Technical & Behavioral Competencies

Technical

• Active Directory Domain Services, DNS, GPO, PKI, ADFS.
• Entra ID / Azure AD Connect / Identity Governance.
• Advanced PowerShell (audits, automated scripts, remediation).
• Security concepts: RBAC, Zero Trust, MFA, AD Tiering.
• Tools: Sempris ADFR/Forest Druid, Ranger AD, PingCastle, Microsoft 365, Defender, GraphAPI.
• Knowledge of AD DRP/BCP appreciated.

Behavioral

• Embraces agile ways of working, with peers across the globe.

Specific Qualifications

(if required)

• Bachelor's degree 9+ with significant experience in AD / Entra ID.
• Strong security awareness, rigor, and mastery of critical environments.
• Ability to work in cross‑functional teams within an international environment.
• Ability to document, automate, and anticipate risks.