Active Directory Senior Engineer

Key Responsibilities:

Lead the implementation of custom banned passwords in Microsoft Entra ID (formerly Azure AD) password protection.

Analyze, design, and configure password policies to prevent weak or commonly used passwords in Active Directory and Entra ID environments.

Develop and maintain PowerShell scripts for automation, reporting, and policy enforcement.

Collaborate with project managers, security teams, and auditors to ensure regulatory compliance and successful project delivery.

Provide technical documentation, including implementation guides and operational procedures.

Troubleshoot and resolve issues related to password policies, AD, and Entra ID integration.

Mentor junior engineers and provide technical guidance on AD, Entra ID, and PowerShell best practices.

Be part of the AD BAU team to manage operational issues and participate in other major projects.

Required Skills & Experience:

Strong hands-on experience with Microsoft Active Directory (installation, multi-forest/domain management, GPO, DNS/DHCP, Trust, AD replication).

In-depth knowledge of Microsoft Entra ID (Azure AD), especially password protection features and custom banned password lists.

Experiences in monitoring, analytics tools like SCOM, Zabbix, Splunk, Azure log analytics, ELK etc.

Advanced PowerShell scripting skills for automation and reporting.

Experience with regulatory compliance projects (e.g., HKMA C-RAF, SOX, GDPR) is a plus.

Excellent analytical, troubleshooting, and communication skills.

10-15 years of IT experience, with at least 5 years in AD/Entra ID environments.

Preferred Certifications:

Microsoft Certified for AD and Entra ID.

Education level: Degree or equivalent in engineering/ IT field.