Consultant System Engineer - Active Directory

Responsibilities

Job Responsibilities :

Position Overview

Experience 15+

As part of the Global Active Directory Governance organization, the Senior Active Directory Security Expert will provide advanced Active Directory expertise and security advisory services to SG entities worldwide.

The role focuses on architecture reviews, security assessments, risk analysis, compliance reviews, remediation support, and expert guidance to local Active Directory teams.

Working closely with the existing global team of approximately 40 Active Directory specialists across APAC, EMEA, and AMER, the candidate will act as a recognized Active Directory Subject Matter Expert and trusted advisor for subsidiaries and operational teams.

The objective is to improve the overall security posture, resilience, compliance, and standardization of Active Directory environments across the Group.

Key Responsibilities

Active Directory Expertise & Advisory

• Provide expert-level guidance on Active Directory architecture, security, and best practices.
• Support SG entities on complex AD transformation and modernization initiatives.
• Review Active Directory architectures and technical designs.
• Advise local teams regarding Microsoft best practices and Group standards.
• Support projects involving domain consolidation, trust relationships, migrations, and security enhancements.

Security Assessments & Compliance Reviews

• Perform Active Directory health checks and security assessments.
• Analyze PingCastle reports and security findings.
• Review Qualys vulnerabilities affecting Active Directory services.
• Assess compliance against ORADAD, ADRAC, CIS Benchmarks, and NIST controls.
• Identify security gaps and recommend remediation actions.

Risk Analysis & Remediation Support

• Conduct risk assessments on Active Directory environments.
• Support entities in the implementation of remediation plans.
• Assist local teams with root-cause analysis and security investigations.
• Drive continuous improvement initiatives and hardening activities.

Global Collaboration & Coordination

• Collaborate with operational teams across APAC, EMEA, and AMER.
• Coordinate technical reviews with regional Active Directory experts.
• Contribute to the evolution of Group security standards.
• Share knowledge and lessons learned across the worldwide AD community.
• Support global governance initiatives through technical expertise.

KPI Monitoring & Continuous Improvement

• Track remediation progress and security improvement actions.
• Contribute to security dashboards and KPI reporting.
• Monitor compliance evolution and security maturity.
• Support the measurement of Active Directory security posture across entities.

Expected Deliverables

Security Assessments

• Active Directory Security Assessment Reports.
• PingCastle Review Reports.
• Qualys Vulnerability Analysis Reports.
• AD Health Check Reports.
• AD Maturity Assessment Reports.
• Trust Relationship Security Reviews.

Advisory & Technical Deliverables

• Architecture Review Reports.
• Technical Recommendations.
• Remediation Roadmaps.
• Security Improvement Plans.
• Best-Practice Guidelines.
• Active Directory Technical Standards Contributions.

Documentation

• Active Directory Security Baselines.
• Hardening Recommendations.
• Reference Architectures.
• Technical Guidelines.
• Operational Best Practices.

KPI & Reporting Contributions

• Entity Compliance Reviews.
• Security Metrics Contributions.
• Remediation Tracking Reports.
• Risk Assessment Summaries.
• Technical Status Reporting.
• Experience with:
  • PingCastle (or equivalent assessment tools)
  • Qualys VMDR
  • ORADAD
  • ADRAC
  • CIS Benchmarks
  • NIST Framework
  • Microsoft Defender Suite
• Strong consulting and problem-solving capabilities.
• Excellent communication skills and ability to engage with international stakeholders.
• Experience working within large multinational environments.

Profile required

Required Skills & Experience

• 15+ years of experience in Microsoft Active Directory administration, engineering, architecture, or security.
• Deep expertise in Active Directory hardening and identity security.
• Strong technical knowledge of:
  • Active Directory
  • DNS
  • Kerberos
  • LDAP
  • PKI
  • Group Policies
  • Authentication and Trust Relationships
  • Microsoft Identity Technologies