VP, Identity Security Engineering

With a strong presence across major financial hubs, a leading global firm is looking for a VP, Identity Security Engineer. You will be part of the team safeguarding some of its most critical identity and access infrastructure.

Responsibilities
As VP, Identity Security Engineer, you will lead the security and hardening of large-scale Active Directory environments, designing and operating AD forests and domains with a focus on Tier 0, privileged access isolation and Zero Trust. You will define OU and GPO structures, deploy and manage PAW, and build PowerShell automation to audit, baseline, remediate and enhance AD hygiene. You will also develop and test AD forest recovery plans for cyber and ransomware incidents, work with Red Team, Pen Testing and SOC to identify and close attack paths, simulate AD-focused threats (including Kerberos and credential theft techniques), and integrate AD with PAM and SIEM platforms to strengthen the firm's overall identity security.

Requirements
Ideally you should be degree-qualified, with at least 5 years of hands-on Active Directory security engineering in large, complex environments and deep knowledge of AD internals (replication, Kerberos, LDAP, DNS, Group Policy). You have proven experience hardening forests, domains, trusts and privileged tiers in line with modern identity security and Zero Trust practices. You bring a strong track record in designing and executing AD forest recovery strategies with automation, scripting and regular recovery drills. You have expert PowerShell skills and are familiar with common AD security tools, and have experience partnering with Red Team, Pen Testing and SOC. You also possess working knowledge of PAM and SIEM integration, alongside strong documentation and communication skills.

To Apply
Interested candidates, please submit your resume to Grace Lim at [Confidential Information]. We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923