Senior Active Directory Engineer - Hybrid Identity & IAM

Transnet SOC Ltd; Johannesburg; On-site; ZAR 700,000 - 1,200,000; Full time

Job summary

Transnet SOC Ltd is seeking an experienced Active Directory Specialist to manage, secure, and optimize the organisation’s AD environment. You will oversee authentication, authorization, and identity management across the enterprise, enabling seamless user access while enforcing strong security practices.

The role requires deep expertise in AD architecture, group policy management, and cloud integration (Azure AD or hybrid identity).

Qualifications

• Bachelor’s degree in information technology, Computer Science, or a related field.
• 6–8 years experience in a large ICT environment.
• 4–5 years in ICT infrastructure managerial/specialist role.
• ITIL Foundation Certification an added advantage.

Responsibilities

• Maintain a robust and secure AD infrastructure with up-to-date configurations, patches, and security settings.
• Efficient identity and access controls, including proper user provisioning, group management, and permissions based on organizational policies.
• Properly configured and optimized Group Policies to enforce network security, performance, and compliance standards.
• Real-time directory infrastructure monitoring and optimization to ensure performance, scalability, and availability.
• Seamless integration of on-premises Active Directory with cloud-based services like Azure Active Directory or hybrid identity solutions.
• Implementation of security best practices, such as MFA, password policies, and auditing configurations to reduce vulnerabilities.
• A fully documented and tested disaster recovery and backup plan for Active Directory to ensure business continuity in case of failure.
• Comprehensive and up-to-date documentation of the Active Directory architecture, configurations, policies, and processes.
• Prompt and effective resolution of user-related issues, such as account lockouts, login failures, or permission errors.
• Active Directory is fully compliant with internal and external regulatory standards.
• Proposals and implementation of improvements to the AD environment, such as performance optimizations, feature upgrades, or automation scripts.
• Effective cross-team collaboration with other IT departments to support enterprise initiatives such as migrations, upgrades, or security rollouts
• Manage and maintain the Active Directory environment, including domains, forests, trusts, and organizational units (OUs).
• Ensure proper configuration and maintenance of Group Policy Objects (GPOs) to enforce security policies and streamline system configurations.
• Plan, execute, and monitor the integration of on-premises AD with Azure AD, enabling a hybrid identity model.
• Monitor and troubleshoot authentication and access issues, providing timely resolutions to minimize user impact.
• Manage secure access for users, groups, and service accounts, implementing role- based access control (RBAC) where appropriate.
• Lead Active Directory health checks, performance optimization, and disaster recovery planning.
• Document all AD-related processes, configurations, and standard operating procedures (SOPs).
• Ensure the AD environment complies with industry regulations and organizational security policies.
• Collaborate with IT, cloud, and security teams to align identity services with organizational needs.

Skills

RBAC

MFA

IAM

Group Policy

Education

Bachelor's degree in information technology or Computer Science

Tools

PowerShell

Microsoft Identity Manager (MIM)

Azure AD Connect

Group Policy Management

Job description

Transnet SOC Ltd is seeking an experienced Active Directory Specialist to manage, secure, and optimize the organisation’s AD environment. You will oversee authentication, authorization, and identity management across the enterprise, enabling seamless user access while enforcing strong security practices.

The role requires deep expertise in AD architecture, group policy management, and cloud integration (Azure AD or hybrid identity).