System Engineer (Active Directory - Security)

Salary :

$46,000 - 50,000 yearly

Company : Morgan Mckinley

Job Type : Contract

Hong Kong

Job Description - System Engineer (Active Directory - Security)

Job Summary

The role focuses on designing, operating, securing, and evolving on-premises Active Directory services in a large-scale, international, highly secure, and distributed environment. The engineer joins a global team and supports 24/7 operations as needed.

Job Duties

Core Responsibilities

Administer, operate, and harden Corporate, Resources, and Isolation Active Directory forests.
Manage Domain Controllers (Windows Server 2019/2022), Group Policy Objects (GPO), DNS, Sites & Services, and replication.
Administer Entra ID (Azure AD), IAM solutions, and Azure AD Connect synchronization.
Participate in major projects: AD consolidation, DNS redesign, tiering model implementation, and protection of privileged/sensitive accounts.
Automate operations using advanced PowerShell for audits, provisioning, remediation, and process industrialization.
Support Active Directory Disaster Recovery Plan (DRP): detection, restoration, testing, and technical communication.
Perform monitoring, auditing, and alerting with tools like Change Auditor, EDR, and log collection systems.
Contribute to cross-functional projects: M&A integration, application onboarding, user lifecycle management (onboarding/offboarding), and security compliance.
Create and maintain technical documentation (DAT/DEX) and support AD governance frameworks.

Supporting Responsibilities

Ensure practices comply with local/international regulations and industry standards.
Prepare and update documentation for internal and external audits.
Apply Permanent Control policies and Control Plans in daily activities.
Proactively improve prevention, detection, and risk mitigation for IT/security threats.

Job Requirements

Qualifications & Experience

Bachelor's degree (or equivalent) holder and 2 to 5+ years of significant hands-on experience in Active Directory and/or Entra ID administration and security.
Proven track record in large-scale, regulated, or international environments.
Ability to work in cross-functional, multicultural teams.
High security awareness, rigor, and discipline when managing enterprise identity systems.

Technical Skills

Extensive hands-on experience with Active Directory Domain Services, DNS, GPO, PKI, and ADFS.
Strong expertise in Entra ID (Azure AD), Azure AD Connect, and Identity Governance.
Advanced PowerShell scripting for automation, audits, and remediation.
Deep knowledge of security concepts: RBAC, Zero Trust, MFA, Privileged Access, and AD Tiering.
Practical experience with AD security tools: Sempris ADFR/Forest Druid, Ranger AD, PingCastle, Microsoft 365, Defender, Graph API.
Knowledge of AD Disaster Recovery Planning (DRP) and Business Continuity Planning (BCP) preferred.

Soft Skills

Embraces agile working methods and collaborates effectively with global peers across time zones.
Strong problem-solving, risk anticipation, and attention to detail in critical environments.
Excellent documentation, communication, and teamwork skills.

Original job System Engineer (Active Directory - Security) posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.

Share Job

Get your Resume Reviewed for Free

Similar System Engineer Jobs in Hong Kong

Get your Resume Reviewed for Free

Email address

Why are you reporting this job?

I think it’s a discriminatory or offensive

I think it’s fraudulent or a scam

I think it’s trying to sell something unrelated to the job / it’s asking for money

I think it contains incorrect or broken information

Other

All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.

Setup your job alert:

Frequency

By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime. Skip

System Engineer (Active Directory - Security)

Job Description - System Engineer (Active Directory - Security)

Similar System Engineer Jobs in Hong Kong

Mobile Apps