Active Directory Engineer

Company:

Sopra Steria is a listed European tech leader specializing in Consulting, Digital Services, and Software. With 60,000 employees worldwide across Europe, North America and Asia, Singapore serves as the HQ for our APAC operations. We focus on delivering Infrastructure, Cloud and Cybersecurity services across the region.

For this position, we are looking for a Active Directory Engineer who can assist one of our clients - a leading investment bank.

The ideal candidate must possess very strong technical expertise in Active Directory / Entra ID and be able to join a global team for over-the-clock activities.

Responsibilities:

• Administration, operation, and hardening of Corporate / Resources / Isolation AD forests.
• Management of Domain Controllers (Windows Server 2019/2022), GPO, DNS, Sites & Services, replication.
• Management of Entra ID, IAM, and AD Connect.
• Participation in Group projects: AD consolidation, DNS redesign, tiering, and securing sensitive accounts.
• Automation using PowerShell, industrialization of operations (audits, provisioning, remediation).
• Contribution to the AD Disaster Recovery Plan (detection, restoration, technical communication).
• Monitoring & auditing: Change Auditor, EDR, log collection.
• Participation in transversal projects: M&A, application integration, onboarding/offboarding, security compliance.
• Documentation (DAT/DEX), contribution to AD governance.

Contributing Responsibilities:

• Ensure that the practices comply with local and international regulations and industry standards.
• Prepare and maintain documentation for internal or external audits
• Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plans
• Contribute to the improvement of prevention and detection capabilities for mitigation of IT & Security risks.

• Bachelor's degree +2 to +5 with significant experience in AD / Entra ID.
• Active Directory Domain Services, DNS, GPO, PKI, ADFS.
• Entra ID / Azure AD Connect / Identity Governance.
• Advanced PowerShell (audits, automated scripts, remediation).
• Security concepts: RBAC, Zero Trust, MFA, AD Tiering.
• Tools: Sempris ADFR/Forest Druid, Ranger AD, PingCastle, Microsoft 365, Defender, GraphAPI.
• Knowledge of AD DRP/BCP appreciated.
• Embraces agile ways of working, with peers across the globe.
• Strong security awareness, rigor, and mastery of critical environments.
• Ability to work in cross‑functional teams within an international environment.
• Ability to document, automate, and anticipate risks

• Regular team buildings
• 18 leave days / year
• Insurance, GP, Dental, Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths