IT Infrastructure Engineer (AD SME) - (Public Sector)

Responsibilities

• Lead and implement complex Active Directory infrastructure projects within their established practice to ensure service delivery and support to meet the intended availability, continuity and capacity requirements. 
• Translate business requirements into comprehensive Active Directory infrastructure design and architecture solutions. 
• Work with service providers to design, develop, deploy and configure Active Directory infrastructure to meet enterprise resiliency, availability and data integrity needs. 
• Ensure compliance to Authority's Technical Architecture and SG-TRM, as well as IM8 and Authority IT Policies for Active Directory environments. 
• Manage Active Directory Infrastructure projects and services to support application systems environments and enterprise authentication needs. 
• Design and implement Active Directory domain structures, forest architectures, and trust relationships for new systems and business requirements. 
• Manage Active Directory system architecture, resource planning, infrastructure performance and directory services hosting environment from server hardware to Active Directory services layer in support of enterprise applications. 
• Serve as primary Active Directory SME and single-point-of-contact for all Active Directory initiatives and to provide expert guidance in application architecture design, integration and acceptance testing. 
• Develop and handover Active Directory Infrastructure and Systems standard operating procedures and day-to-day performance/availability monitoring to Operations Engineer upon commissioning and completion of projects. 
• Provide expert-level support and mentoring to Operations Engineers on Active Directory Infrastructure and Systems. 
• Lead Active Directory Infrastructure Architecture reviews, provide technical endorsement, and establish Active Directory hardening standards and security policies. 
• Active Directory hosting environment infrastructure on-boarding (design, setup, configuration, implementation, testing and commissioning of Active Directory components). 
• Maintain comprehensive understanding of Active Directory operations environment including advanced monitoring, maintenance, and disaster recovery procedures. 
• Take care of end to end Active Directory operations and integrations with client machines. 
• Expert-level proficiency with Microsoft Active Directory and Windows ecosystem, including: 

1. Familiarity with Advanced Microsoft PAW (Privileged Access Workstation) security architecture and implementation 
2. Enterprise Active Directory Backup/Restore strategies and disaster recovery planning 
3. Complex Group Policy Object (GPO) design, implementation, troubleshooting and security hardening 
4. Multi-forest Active Directory Migration/Upgrade planning, execution and rollback procedures 
5. Advanced Forest Trust configuration, management and security considerations 
6. Enterprise Windows Authentication/Authorization mechanisms and delegation models 
7. Complex Active Directory Site and Services connectivity design for distributed environments 
8. Government Commercial Cloud (GCC) Active Directory (EC2 instance) architecture and management 
9. GCC RDS Active Directory integration, hybrid connectivity and security implementation 
10. Advanced Active Directory Certificate Services (ADCS) design and PKI implementation 
11. Active Directory Federation Services (ADFS) and hybrid identity solutions 
12. Azure Active Directory Connect and hybrid identity management 
13. Active Directory Rights Management Services (ADRMS) implementation 
14. Advanced PowerShell scripting for Active Directory automation and reporting 
15. Active Directory security assessment, threat detection and incident response 

Requirements

• Tertiary Education in Computer Science, Information Technology, or relevant technical fields is required. 

• Minimum 7-10 years hands-on experience as Active Directory specialist with demonstrated expertise in large-scale enterprise Active Directory environments, including complex multi-forest, multi-domain architectures. 

• Expert-level knowledge of Microsoft technologies including Windows Server (2016/2019/2022), Active Directory, Exchange, SharePoint, System Center suite, and Azure Active Directory. 

• Advanced proficiency in Windows PowerShell scripting, automation frameworks, and Active Directory management tools (ADUC, ADSI Edit, LDP, etc.). 

• Deep understanding of Active Directory security frameworks, advanced threat protection, and compliance requirements in government environments. 

• Proven track record of leading complex Active Directory projects including migrations, upgrades, forest consolidations, and disaster recovery implementations. 

• Ability to provide strategic Active Directory architectural guidance whilst drilling deep into technical implementation details. 

• Demonstrated ability to analyse and design comprehensive Active Directory solutions considering enterprise-wide functional implications and security requirements. 

• Results and customer oriented with focus on Active Directory service delivery excellence and stakeholder satisfaction. 

• Strong leadership skills with proven ability to mentor technical teams and manage complex Active Directory project environments. 

• Exceptional communication skills, both oral and written, with the ability to present complex Active Directory technical solutions to senior stakeholders and influence strategic decisions. 

• Advanced Microsoft certifications (MCSE, Azure certifications, Microsoft 365 certifications) are highly desirable. 

• Expert-level experience with Active Directory monitoring, troubleshooting tools, and performance optimisation methodologies. 

• Experience with Active Directory security tools, vulnerability assessment, and penetration testing in enterprise environments. 

• Knowledge of regulatory compliance requirements (IM8, government security frameworks) as applied to Active Directory infrastructure. 

Benefits

By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us and for the processing of your application for employment.

You also represent to us that you have obtained the consent of your referees when you disclose to us their personal data for the purpose of conducting reference checks.

The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here: 

We regret to inform you that should you not consent to providing the necessary data required for us to process your application, your application will be considered void.