Active Directory Senior Engineer-AVP

Job Description :

Job Title: Active Directory Senior Engineer-AVP

Experience 10-13 Years

Qualification BE / B. Tech / M. Tech - Computer Engineering

Role & Responsibilities:

Key responsibilities include:

• Analyze, design, implement, and manage password policies across Active Directory (AD) and Microsoft Entra ID environments to prevent weak, compromised, and commonly used passwords.
• Administer and maintain Active Directory, DNS, ADFS, Group Policy Objects (GPO), AD Federation Services, AD Forest Recovery (ADFR), Microsoft Entra ID, and associated identity management technologies.
• Develop, enhance, and maintain PowerShell scripts to automate administrative tasks, generate reports, enforce security policies, and streamline operational processes.
• Collaborate with project managers, cybersecurity teams, and internal/external auditors to ensure regulatory compliance, security standards, and successful project delivery.
• Prepare and maintain comprehensive technical documentation, including solution designs, implementation guides, standard operating procedures (SOPs), and operational support documents.
• Lead the design and implementation of custom banned password policies using Microsoft Entra ID Password Protection to strengthen enterprise password security.
• Troubleshoot and resolve complex issues related to password policies, Active Directory services, Entra ID, and hybrid identity integration.
• Provide technical leadership and mentorship to junior engineers, promoting best practices in Active Directory administration, Entra ID management, and PowerShell automation.
• Participate in the Active Directory Business-as-Usual (BAU) support team, handling operational incidents, service requests, change management activities, and contributing to strategic infrastructure projects.
• Design, implement, and support Active Directory recovery and disaster recovery (DR) strategies, including AD forest recovery, backup and recovery procedures, and Business Continuity and Disaster Recovery (BCDR) processes.

Qualifications

• 10-15 years of strong hands-on experience in Microsoft Active Directory administration, installation, configuration, multi-forest management, Group Policy Objects (GPO), DNS, DHCP, and Microsoft Entra ID.
• In-depth expertise in Microsoft Entra ID (formerly Azure AD), with a strong understanding of password protection capabilities, including custom banned password lists and password policy enforcement.
• Hands-on experience with infrastructure monitoring, log management, and analytics tools such as SCOM, Zabbix, Splunk, Azure Log Analytics, and ELK Stack.
• Advanced proficiency in PowerShell scripting for automation, reporting, administrative task optimization, and operational efficiency.
• Exposure to regulatory compliance and security initiatives, including HKMA C-RAF, SOX, GDPR, and other relevant industry standards, would be an added advantage.
• Strong analytical, problem-solving, troubleshooting, and communication skills, with the ability to resolve complex infrastructure and identity management issues.
• Excellent project management, stakeholder coordination, and teamwork capabilities, including experience collaborating with cross-functional and geographically distributed teams.
• Proactive mindset with a focus on driving automation, process improvements, operational excellence, and continuous service efficiency.
• Preferred Certifications: Microsoft certifications in Active Directory, Windows Server, and Microsoft Entra ID / Identity and Access Management.