HK Active Directory Engineer at Sopra Steria

Hong Kong, Hong Kong Island, Hong Kong S.A.R. -

Full Time

Start Date

Immediate

Expiry Date

22 Apr, 26

Salary

0.0

Posted On

22 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Active Directory, Entra ID, PowerShell, DNS, GPO, IAM, AD Connect, Security Compliance, AD Governance, Disaster Recovery, Cloud Services, Cybersecurity, Automation, Monitoring, Documentation, Risk Management

Industry

IT Services and IT Consulting

Description

Company: Sopra Steria is a listed European tech leader specializing in Consulting, Digital Services, and Software. With 60,000 employees worldwide across Europe, North America and Asia, Singapore serves as the HQ for our APAC operations. We focus on delivering Infrastructure, Cloud and Cybersecurity services across the region. For this position, we are looking for a Active Directory Engineer who can assist one of our clients - a leading investment bank. The ideal candidate must possess very strong technical expertise in Active Directory / Entra ID and be able to join a global team for over-the-clock activities. Responsibilities: Administration, operation, and hardening of Corporate / Resources / Isolation AD forests. Management of Domain Controllers (Windows Server 2019/2022), GPO, DNS, Sites & Services, replication. Management of Entra ID, IAM, and AD Connect. Participation in Group projects: AD consolidation, DNS redesign, tiering, and securing sensitive accounts. Automation using PowerShell, industrialization of operations (audits, provisioning, remediation). Contribution to the AD Disaster Recovery Plan (detection, restoration, technical communication). Monitoring & auditing: Change Auditor, EDR, log collection. Participation in transversal projects: M&A, application integration, onboarding/offboarding, security compliance. Documentation (DAT/DEX), contribution to AD governance. Contributing Responsibilities: Ensure that the practices comply with local and international regulations and industry standards. Prepare and maintain documentation for internal or external audits Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plans Contribute to the improvement of prevention and detection capabilities for mitigation of IT & Security risks. Bachelor's degree +2 to +5 with significant experience in AD / Entra ID. Active Directory Domain Services, DNS, GPO, PKI, ADFS. Entra ID / Azure AD Connect / Identity Governance. Advanced PowerShell (audits, automated scripts, remediation). Security concepts: RBAC, Zero Trust, MFA, AD Tiering. Tools: Sempris ADFR/Forest Druid, Ranger AD, PingCastle, Microsoft 365, Defender, GraphAPI. Knowledge of AD DRP/BCP appreciated. Embraces agile ways of working, with peers across the globe. Strong security awareness, rigor, and mastery of critical environments. Ability to work in cross‑functional teams within an international environment. Ability to document, automate, and anticipate risks Regular team buildings 18 leave days / Year Health Insurance Annual bonus Working hours: Monday to Friday 9am - 6pm E-learning and certifications paths

Responsibilities

The Active Directory Engineer will be responsible for the administration, operation, and hardening of Active Directory forests, as well as managing Domain Controllers and participating in group projects. They will also contribute to disaster recovery plans and ensure compliance with regulations.