{"id":4149780,"url":"https://alion.io/job/gic-avpvp-directory-services-operations-engineer-technology-group","title":"AVP/VP, Directory Services Operations Engineer, Technology Group","company":{"id":2761,"name":"GIC","domain":"gic.com.sg","url":"https://alion.io/company/gic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CAPA","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PingCastle","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":false},{"name":"Microsoft Sentinel","optional":true}],"status":"live","first_seen_at":"2026-11-12T08:42:54Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T15:22:01Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.\nTechnology Group\n We experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new, and emerging technologies.\nWhat impact will you make in this role?\nAs our Active Directory and Microsoft Entra ID Operations Engineer, you will operate, secure and continuously improve GIC's hybrid identity platform across on-premises Active Directory and Microsoft Entra ID. The role combines hands-on L3 operations, incident resolution, security hardening, automation, resilience and identity governance. You will support critical identity services, enterprise application integrations and hybrid authentication, while partnering with Cybersecurity, infrastructure and application teams. Critical and maintenance changes may be implemented outside business hours, including weekends.\nAbout the team\nIdentity and Directory Services is part of GIC's Technology Group. The team runs the Active Directory and Microsoft Entra ID services that provide secure and reliable access to systems and data. We operate a hybrid Microsoft identity environment and work closely with Cybersecurity, infrastructure, end-user computing and application teams to deliver services that are secure by design, resilient and well governed.\nWhat will you do as a AVP/VP, Directory Services Operations Engineer, Technology Group?\nActive Directory operations and resilience\nAdminister AD DS across a multi-domain forest, including users, groups, organisational units, delegation, trusts, sites, replication and FSMO roles.\nBuild, patch, monitor and capacity-plan domain controllers, and operate AD-integrated DNS and DHCP.\nTroubleshoot and manage Group Policy across its lifecycle, from security baselines and deployment through to retirement.\nOperate AD Certificate Services and PKI, including certification authority health, templates, certificate issuance and lifecycle management.\nOwn AD backup and disaster recovery processes, including regular recovery testing and full forest recovery readiness.\nMicrosoft Entra ID and hybrid identity operations\nResolve complex sign-in, MFA, SSPR, account lockout and Entra joined or hybrid joined device issues using sign-in, audit and diagnostic logs.\nMonitor and support Microsoft Entra Connect and Cloud Sync, including password hash sync, pass-through authentication and synchronisation failures.\nDiagnose Conditional Access issues, including Intune device compliance dependencies, and support controlled policy changes using What If and report-only mode.\nConfigure and support enterprise application integrations using SAML, OIDC and SCIM, including SSO, provisioning and application consent.\nManage B2B guest access, cross-tenant access settings, dynamic groups and group-based licensing.\nSupport identity lifecycle capabilities, including access reviews, entitlement management and lifecycle workflows.\nIdentity security and compliance\nImplement and operate tiered administration, privileged access management, Windows LAPS, Entra role-based access control and Privileged Identity Management.\nSupport phishing-resistant MFA using passkeys (FIDO2), Windows Hello for Business, Microsoft Authenticator and Temporary Access Pass.\nHarden Kerberos and NTLM, and remediate risks identified by tools such as CrowdStrike, PingCastle and Purple Knight.\nInvestigate Entra ID Protection risky users and sign-ins, and coordinate response to Microsoft Defender for Identity and Defender XDR alerts with Cybersecurity.\nPerform access reviews and provide audit evidence in line with internal controls and the MAS Technology Risk Management Guidelines.\nIncident, change and service management\nOwn L3 incidents, problems and requests from diagnosis through resolution, engaging Microsoft Unified Support or engineering teams when required.\nLead root-cause analysis for recurring issues and drive corrective and preventive actions.\nPlan and implement identity changes through ITIL-aligned change processes, with appropriate testing, peer review, rollback and stakeholder communication.\nMaintain service health dashboards, operational metrics, runbooks, knowledge articles and technical procedures, and coach L1/L2 support teams.\nAutomation and continuous improvement\nAutomate administration, health checks and reporting using PowerShell, Microsoft Graph PowerShell SDK and Microsoft Graph API, with version control and peer review.\nUse KQL and relevant Microsoft monitoring platforms to analyse identity, authentication and security events.\nIdentify opportunities to simplify, standardise and improve the security, reliability and supportability of hybrid identity services.\nMust have requirements\n6-10 years of experience in IT infrastructure or identity operations, with strong hands-on experience supporting both Active Directory and Microsoft Entra ID in a large enterprise environment.\nStrong knowledge of AD DS, Group Policy, AD-integrated DNS and DHCP, sites and replication, trusts, FSMO roles and domain controller lifecycle management.\nDemonstrated L3 troubleshooting of Microsoft Entra ID authentication, MFA, SSPR and Conditional Access using sign-in and audit logs.\nHands-on hybrid identity experience with Microsoft Entra Connect or Cloud Sync, including password hash sync or pass-through authentication.\nPractical experience integrating applications using SAML, OIDC and SCIM.\nExperience implementing or operating privileged identity controls, including tiered administration, LAPS, PIM, role-based access control and least privilege.\nExperience with AD backup, disaster recovery and forest recovery procedures.\nWorking knowledge of AD Certificate Services and PKI operations.\nPowerShell scripting experience, preferably including Microsoft Graph PowerShell SDK.\nExperience working within ITIL-aligned incident, problem and change management processes.\nClear written and verbal communication, including the ability to document technical procedures and explain complex issues to technical and non-technical stakeholders.\nNice to have qualifications\nMicrosoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft security certification or equivalent.\nExperience with Microsoft Entra ID Governance, Intune, Microsoft Defender for Identity, Defender XDR, Microsoft Sentinel or Log Analytics.\nFamiliarity with AD assessment and security tools such as PingCastle, Purple Knight or CrowdStrike identity protection capabilities.\nExperience planning and testing full AD forest recovery.\nKQL experience for identity and security log analysis.\nExperience in financial services or another regulated industry, including familiarity with MAS Technology Risk Management Guidelines.\nKey Competencies and Behaviours\nSecurity mindset: Balances operational needs, user experience and risk, and raises concerns constructively.\nOwnership: Takes issues through to root cause and sustainable resolution, with clear stakeholder communication.\nAnalytical rigour: Uses evidence and structured troubleshooting, including during high-severity incidents.\nComposure: Communicates clearly and calmly under pressure and during out-of-hours changes.\nContinuous improvement: Automates, simplifies and standardises operations while improving resilience and control.\nCollaboration: Works effectively across teams, shares knowledge and builds trust.\nCuriosity: Keeps current with the Microsoft identity roadmap and converts new capabilities into practical improvements.\nWork at the Point of Impact\nWe need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.\nGIC is a Great Place to Work\nAt GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise. This role will be in our Tampines Office.\nGIC is an equal opportunity employer\nAs an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.\nLearn more about our Technology Group here:\nhttps://gic.careers/group/technology-group/","description_format":"text","description_chars":9343,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Pension & Sovereign Wealth Funds"],"lifecycle":[{"event":"open","at":"2026-11-12T08:42:54Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/gic-avpvp-directory-services-operations-engineer-technology-group","json_url":"https://alion.io/job/gic-avpvp-directory-services-operations-engineer-technology-group.json","meta":{"generated_at":"2026-11-12T16:43:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35041,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2761},"rest":"https://alion.io/mcp/rest/get_company?id=2761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgic-avpvp-directory-services-operations-engineer-technology-group"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgic-avpvp-directory-services-operations-engineer-technology-group"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgic-avpvp-directory-services-operations-engineer-technology-group"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gic-avpvp-directory-services-operations-engineer-technology-group\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgic-avpvp-directory-services-operations-engineer-technology-group"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4149780}},{"tool":"search_jobs","arguments":{"company":"gic.com.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4149780},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}