VP, Active Directory & Entra ID Security

GIC PRIVATE LIMITED; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

GIC PRIVATE LIMITED is seeking a Senior Active Directory Security Engineer to secure and automate enterprise AD environments, focusing on Entra ID, Tier 0 protection, and privileged access controls. You will collaborate with Red Teams and SOC, implement Zero Trust, and drive identity governance across on-prem and cloud.

The role emphasizes threat modelling, GPO/AC policy management, and PowerShell/Graph API automation to improve cyber resilience in a hybrid identity landscape.

Qualifications

• Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
• Minimum of 5 years in AD security engineering.
• Deep expertise in AD internals (replication, Kerberos, LDAP, DNS, GPO) and Entra ID architecture.
• Proven experience in AD and Entra ID hardening, Tier 0 protection, trust management, and privileged access isolation.
• Hands-on experience in hybrid identity design and SaaS integration.
• Experience integrating AD and Entra ID with enterprise IAM processes, provisioning, deprovisioning, and access governance.
• Strong experience with OU design, Entra ID administrative units, delegation, and least-privilege.
• Advanced knowledge in GPO and Conditional Access policy management.
• Expert-level PowerShell scripting and Graph API automation for auditing and enforcement.
• Experience with Red Team and Penetration Testing collaboration.
• Proficiency with AD/Entra ID security tools (BloodHound, PingCastle, PurpleKnight, ADRecon, PowerView, Defender for Identity).
• Knowledge of PAM and SIEM integration; strong Zero Trust and EAM understanding.

Responsibilities

• Design, secure, and manage hybrid identity environments (on-prem AD and Entra ID) for resilience.
• Define target state for IAM, aligning AD and Entra ID security with governance.
• Conduct threat modelling and exposure assessments for AD and Entra ID.
• Implement and maintain Tier 0 controls per Zero Trust and EAM.
• Harden AD forests, trusts, Entra ID tenants to prevent privilege escalation.
• Design and manage PAWs and enforce boundaries for Tier 0/1 assets.
• Develop PowerShell and Graph API automation for auditing and remediation.
• Support AD Forest recovery and Entra ID incident response automation.
• Plan AD Forest Recovery and Entra ID tenant recovery drills.
• Collaborate with IAM, Red Team, and SOC to strengthen defenses.

Skills

AD security

Entra ID

Tier 0 protection

Privileged access

PowerShell

Graph API

Threat modelling

Zero Trust

Hybrid identity

PAM integration

SIEM integration

Red Team collaboration

GPO management

OU design

Azure AD/On-Prem

Education

Bachelor’s or Master’s in Computer Science or Cybersecurity

Tools

BloodHound

PingCastle

PurpleKnight

ADRecon

PowerView

Microsoft Defender for Identity

Job description

GIC PRIVATE LIMITED is seeking a Senior Active Directory Security Engineer to secure and automate enterprise AD environments, focusing on Entra ID, Tier 0 protection, and privileged access controls. You will collaborate with Red Teams and SOC, implement Zero Trust, and drive identity governance across on-prem and cloud.

The role emphasizes threat modelling, GPO/AC policy management, and PowerShell/Graph API automation to improve cyber resilience in a hybrid identity landscape.