Maltem Asia is seeking an Active Directory Engineer for a Banking Client based in Singapore.
Direct Responsibilities:
- Administration, operation, and hardening of Corporate / Resources / Isolation AD forests.
- Management of Domain Controllers (Windows Server 2019/2022), GPO, DNS, Sites & Services, replication.
- Management of Entra ID, IAM, and AD Connect.
- Participation in Group projects: AD consolidation, DNS redesign, tiering, and securing sensitive accounts.
- Automation using PowerShell, industrialization of operations (audits, provisioning, remediation).
- Contribution to the AD Disaster Recovery Plan (detection, restoration, technical communication).
- Monitoring & auditing: Change Auditor, EDR, log collection.
- Participation in transversal projects: M&A, application integration, onboarding/offboarding, security compliance.
- Documentation (DAT/DEX), contribution to AD governance.
- Ensure that the practices comply with local and international regulations and industry standards.
- Prepare and maintain documentation for internal or external audits
- Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plans
- Contribute to the improvement of prevention and detection capabilities for mitigation of IT & Security risks.
Requirements:
- Active Directory Domain Services, DNS, GPO, PKI, ADFS.
- Entra ID / Azure AD Connect / Identity Governance.
- Advanced PowerShell (audits, automated scripts, remediation).
- Security concepts: RBAC, Zero Trust, MFA, AD Tiering.
- Tools: Sempris ADFR/Forest Druid, Ranger AD, PingCastle, Microsoft 365, Defender, GraphAPI.
- Knowledge of AD DRP/BCP appreciated.
- Bachelor's degree +2 to +5 with significant experience in AD / Entra ID.
- Strong security awareness, rigor, and mastery of critical environments.
- Ability to work in cross‑functional teams within an international environment.
- Ability to document, automate, and anticipate risks.
