Overview
Our client is a leading international banking group with a strong presence across the Asia Pacific region.
We are supporting them in hiring an experienced Active Directory / Entra ID Engineer to join their APAC Production Security function.
The role focuses on the design, operation, security, and evolution of Active Directory and Entra ID services in a highly secure, enterprise banking environment, working closely with global teams.
Key Responsibilities
Active Directory & Entra ID Operations
- Administer and harden Active Directory on-prem environments (multiple forests/domains)
- Manage Domain Controllers (Windows Server 2019 / 2022), GPOs, DNS, Sites & Services, replication
- Operate and support Entra ID (Azure AD) and Azure AD Connect
- Support identity lifecycle management (onboarding, offboarding, application integration)
Security & Compliance
- Implement AD security best practices (tiering model, RBAC, MFA, privileged access)
- Participate in AD consolidation, DNS redesign, and security improvement projects
- Contribute to security monitoring, auditing, and log analysis
- Support AD Disaster Recovery and Business Continuity planning
Automation & Projects
- Develop and maintain PowerShell scripts for audits, provisioning, remediation, and automation
- Participate in transversal projects (M&A, application onboarding, regulatory compliance)
- Maintain technical documentation and contribute to governance standards
Required Technical Skills
- Strong experience with Active Directory Domain Services (AD DS)
- Solid knowledge of DNS, GPO, PKI, ADFS
- Hands-on experience with Entra ID / Azure AD Connect
- Advanced PowerShell scripting and automation
- Strong understanding of security concepts:
- RBAC, Zero Trust, MFA, AD Tiering
- Experience in enterprise or regulated environments (banking, financial services preferred)
Nice to Have
- Experience with AD security tools (e.g. PingCastle, Semperis, Defender, EDR)
- Knowledge of AD DR / BCP
- Experience working in follow-the-sun / global support models
