Active Directory Senior Engineer - AVP

This role is for a new requirement with the Active Directory (AD) Admin Team. The team will be responsible for the maintenance of the AD infra end to end covering all branches in the Asia and Oceania region, excluding Japan and China. This role is responsible for implementing projects like custom banned passwords using Microsoft Entra password protection, ensuring compliance with regulatory and security requirements (e. g., HKMA C-RAF remediation). The engineer will work closely with the AD Team, IRMD IAM, and project stakeholders to deliver a secure and robust password policy across the enterprise.
Responsibilities:
Analyse, design, and configure password policies to prevent weak or commonly used passwords in Active Directory and Entra ID environments.
Manage AD, DNS, ADFS, GPO, ADFR, Entra ID, and related tools.
Develop and maintain PowerShell scripts for automation, reporting, and policy enforcement.
Collaborate with project managers, security teams, and auditors to ensure regulatory compliance and successful project delivery.
Provide technical documentation, including implementation guides and operational procedures.
Lead the implementation of custom banned passwords in Microsoft Entra ID (formerly Azure AD) password protection.
Troubleshoot and resolve issues related to password policies, AD, and Entra ID integration.
Mentor junior engineers and provide technical guidance on AD, Entra ID, and PowerShell best practices.
Be part of the AD BAU team to manage operational issues and participate in other major projects.
Experience in AD recovery, DR strategy, and BCDR processes.
Requirements:
Strong hands-on experience, 10-15 years with Microsoft Active Directory (installation, multi-forest management, GPO, DNS/DHCP) and Entra ID.
In-depth knowledge of Microsoft Entra ID (Azure AD), especially password protection features and custom banned password lists.
Experience in monitoring and analytics tools like SCOM, Zabbix, Splunk, Azure Log Analytics, ELK, etc.
Advanced PowerShell scripting skills for automation and reporting.
Experience with regulatory compliance projects (e. g., HKMA C-RAF, SOX, GDPR) is a plus.
Excellent analytical, troubleshooting, and communication skills.
Demonstrates strong project management, effective teamwork, and cross-regional coordination skills, with a proactive approach toward new initiatives, automation, and continuous efficiency improvement.
Preferred Certifications: Microsoft Certified for AD and Entra ID.

Experience
10-14 yrs