IAM Engineer

1. Administer and maintain ADFS, Azure AD B2C, MIM, AAD Connect, and NPS environments

2. Manage LDAP, SAML, OAuth, and OIDC-based authentication services, including Workspace ONE Access and Microsoft Entra ID

3. Configure and maintain relying party trusts between Identity Providers (IdP) and Service Providers (SP); maintain a trust registry

4. Support ADFS configuration including IdP request setup, claims, and attribute customisation

5. Integrate ADFS with second-factor authentication services (e.g. Azure MFA)

6. Perform regular health checks of AD-related services in line with Microsoft best practices

7. Maintain IT Service Continuity documentation for Active Directory, including configurations, policies, and procedures

8. Monitor and maintain audit logs for AD-related services

9. Monitor AD CS and the broader Enterprise PKI environment

10. Manage incident, problem, change, and vulnerability lifecycle activities within the PKI environment

11. Conduct capacity planning and performance tuning for PKI components

12. Perform daily health checks, including post-incident and post-change integrity verification

13. Produce regular reports on patches applied, system performance, and capacity status

14. Manage user lifecycle activities — provisioning, modification, and de-provisioning of accounts

15. Implement, maintain, and periodically review RBAC aligned to client policies

16. Implement and manage SSO across applications

17. Configure and manage MFA services, ensuring IdP integration assurance

18. Enforce Conditional Access policies based on location, device status, and risk level

19. Manage IdP requests to enable seamless and secure authentication

20. Onboard third-party applications for SSO, including user and group provisioning

21. Manage application registrations within Microsoft Entra, including API permission configuration

22. Monitor identity security alerts, respond to incidents, and drive remediation

23. Maintain comprehensive documentation of Entra configurations, policies, and procedures

24. Produce regular service status reports covering security incidents, access reviews, and optimisation recommendations

Interested applicants, please Email, [email protected]

Fabian Ling Tuong Liing

R25129353

Recruit Express Pte Ltd

EA Licence No: 99C4599

We regret that only shortlisted candidates will be contacted.