全职 L2 Active Directory Engineer 工作, 薪水 up to SGD 6,000, IOTALENTS PTE. LTD. Islandwide (Singapore) 公司招聘中 - Ricebowl

We are looking for an experienced L2 Active Directory Engineer to support and administer enterprise Active Directory, Microsoft Entra ID (Azure AD), Identity & Access Management (IAM), authentication, and directory services.

The role will provide L2 support and act as an escalation point for identity-related incidents and service requests, working closely with Service Desk, Infrastructure, Security, and Application teams.

Key Responsibilities

Active Directory

• Administer and support Microsoft Active Directory environments.
• Manage users, groups, computers, OUs, and Group Policies (GPOs).
• Perform Joiner, Mover, Leaver (JML) processes.
• Monitor AD replication and directory health.
• Perform account audits and directory clean-up.
• Troubleshoot authentication and Active Directory issues.

Microsoft Entra ID / Azure AD

• Administer Microsoft Entra ID environments.
• Support hybrid identity and Azure AD Connect synchronization.
• Manage Conditional Access Policies and MFA.
• Support Self-Service Password Reset (SSPR).
• Troubleshoot authentication and synchronization issues.
• Support identity governance activities.

IAM & Access Management

• Provision, modify, and deprovision user access.
• Manage Role-Based Access Control (RBAC).
• Support privileged account administration.
• Perform access reviews and certification exercises.
• Ensure compliance with access control and segregation of duties requirements.

L2 Incident & Service Request Support

• Provide L2 support for identity and directory-related incidents.
• Troubleshoot account lockouts, authentication failures, access issues, and synchronization problems.
• Perform root cause analysis for recurring issues.
• Escalate and coordinate complex issues with Infrastructure, Security, and Application teams.
• Support major incident management when identity services are impacted.

Security, Automation & Documentation

• Support security hardening and vulnerability remediation.
• Participate in security audits and compliance activities.
• Develop PowerShell scripts to automate repetitive IAM tasks.
• Automate user provisioning, reporting, and operational processes.
• Maintain SOPs, runbooks, knowledge articles, and technical documentation.

Required Skills & Experience

• 5+ years of enterprise Active Directory support experience.
• Strong hands-on experience with:Microsoft Active DirectoryMicrosoft Entra ID / Azure ADAzure AD ConnectGroup Policy (GPO)LDAP and authentication servicesIAM and user lifecycle management (JML)Microsoft Windows ServerMFAPowerShell scripting
• Good understanding of DNS and DHCP.
• Strong L2 troubleshooting and incident management experience.
• Experience supporting enterprise identity and access environments.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or related discipline.
• Microsoft Identity, Azure Administrator, or other relevant certifications are advantageous.