Keppel Ltd. Hiring! Full Time System Engineer- Active Directory (AD) in - Ricebowl

Role Overview

The System Engineer – Active Directory (AD) is responsible for supporting, maintaining, and enhancing enterprise Active Directory, Windows Server, and virtualization infrastructure across customer environments. The role focuses on ensuring stable, secure, and highly available identity, authentication, and infrastructure services through proactive administration, preventive maintenance, troubleshooting, patching, remediation, and operational governance.

The engineer will support Active Directory Domain Services (AD DS), Group Policy Management, DNS, DHCP, Microsoft Entra ID (Azure AD), Microsoft 365 integration, VMware infrastructure, and Windows Server environments while ensuring compliance with operational standards, security policies, audit requirements, and service level commitments.

The role also involves supporting vulnerability remediation, CVE workaround implementation, infrastructure hardening, certificate renewal management, backup and disaster recovery operations, as well as internal and external audit activities.

The ideal candidate should possess strong technical troubleshooting skills, operational discipline, scripting and automation capability, customer engagement skills, and the ability to work effectively in both on-premises and hybrid cloud infrastructure environments.

---

Key Responsibilities

Active Directory & Infrastructure Management

· Administer and maintain Active Directory infrastructure including Domain Controllers, DNS, DHCP, Group Policy, replication, and authentication services.

· Support hybrid identity environments including Microsoft Entra ID (Azure AD), Azure AD Connect, and Microsoft 365 integration.

· Perform preventive maintenance, system health checks, patching, upgrade, remediation, and security hardening activities for Windows Server and VMware environments.

· Support VMware infrastructure including ESXi hosts, vCenter, virtual machine provisioning, cluster management, and virtualization operations.

· Perform vulnerability remediation, CVE workaround implementation, SSL certificate renewal, and infrastructure security improvement activities.

· Support backup, disaster recovery, and business continuity operations for infrastructure and identity services.

· Troubleshoot and resolve infrastructure, authentication, and system-related incidents, problems, and service requests within agreed SLA timelines.

· Develop and maintain PowerShell scripts for automation, reporting, and operational administration tasks.

· Maintain technical documentation, SOPs, configuration baselines, operational records, and audit-related documentation.

· Coordinate with infrastructure, cloud, network, security, application teams, and vendors for issue resolution and service improvement initiatives.

· Ensure compliance with operational procedures, governance standards, security policies, and audit requirements.

Audit, Compliance & Governance

· Support internal and external audit activities related to Active Directory, virtualization, infrastructure security, and operational compliance.

· Prepare audit evidence, access review records, configuration documentation, and remediation reports during audit exercises.

· Support remediation activities arising from audit findings, vulnerability assessments, and security reviews.

· Participate in infrastructure risk assessment, governance reviews, and continuous security improvement initiatives.

Cross Group Collaboration

· Work closely with internal technical teams, vendors, and partners to support infrastructure integration, operational support, and enterprise solution deployment.

· Participate in operational reviews, technical discussions, implementation planning, and continuous service improvement activities.

---

Qualifications / Experience / Knowledge

· Diploma, Degree, or equivalent qualification in Information Technology, Computer Science, or related field.

· Minimum 4–5 years of experience in Active Directory, Windows Server, VMware, or enterprise infrastructure support within managed services environments.

· Hands-on experience supporting Active Directory, DNS, DHCP, Group Policy, Windows Server 2016/2019/2022, and hybrid identity platforms.

· Familiar with Microsoft Entra ID (Azure AD), Azure AD Connect, Microsoft 365, IAM, MFA, RBAC, PAM, and infrastructure security best practices.

· Experience supporting VMware ESXi, vCenter, virtualization platforms, preventive maintenance, infrastructure monitoring, and upgrade activities.

· Familiar with infrastructure patching, vulnerability remediation, CVE mitigation, SSL certificate management, and security hardening practices.

· Basic scripting knowledge using PowerShell for automation, administration, and troubleshooting activities.

· Familiar with backup, disaster recovery, monitoring tools, operational governance, and audit compliance processes.

· Experience using ITSM/ticketing platforms such as ServiceNow, BMC Remedy, or equivalent systems.

· Good analytical, troubleshooting, communication, and customer service skills with the ability to work independently in customer-facing environments.

• · Microsoft or VMware certifications are advantageou