Active Directory Lead

Directio is a global IT services company. We consult, code, test, deploy, and manage mainly cloud-based and mobile applications, providing around-the-clock support from our offices in Poland, the Philippines, Mexico, and the USA. We prepare our FMCG, retail, automotive, and SaaS clients for the future by accelerating their digital transformation. Operating under the "We Code Success" principle, we prioritize the success of our clients, consultants, and partners.

About project:

We are looking for an Active Directory Lead for our French client, who specializes in producing various types of glasses and collaborating with opticians. Their mission is to enhance the quality of life by improving the quality of vision.

Responsibilities:

• As an Active Directory Lead, you will be designing, implementing, and maintaining Azure Active Directory and hybrid identity solutions, ensuring seamless integration and security;
• You will be administering Azure AD Connect, Active Directory Federation Services, Pass-Through Authentication, and Password Hash Sync to maintain identity synchronization between on-premises and cloud environments;
• You will be optimizing Azure AD B2B and B2C to facilitate secure identity management for external partners and customers, ensuring compliance with business and security requirements;
• You will be managing Conditional Access Policies to enforce identity-based security controls and prevent unauthorized access;
• You will be implementing and maintaining Privileged Identity Management to provide just-in-time access control for privileged roles, minimizing security risks;
• You will be overseeing role-based access control and group-based access management, ensuring proper authorization and permissions across the organization;
• You will be enforcing Multi-Factor Authentication and adhering to Zero Trust Security Model and access review policies to enhance identity security;
• You will be monitoring and mitigating identity-based security risks by leveraging Semperis Cyber Security Solutions and Azure AD Identity Protection, ensuring proactive threat management;
• You will be ensuring compliance with industry standards such as ISO 27001, NIST, and GDPR, ensuring the organization's identity infrastructure meets security regulations;
• You will be managing synchronization of on-premises Active Directory with Azure AD, ensuring consistent and accurate user authentication;
• You will be troubleshooting and optimizing Azure AD Seamless SSO and Hybrid Join, ensuring seamless user access and authentication;
• You will be leading incident response and root cause analysis for Azure AD authentication failures, synchronization issues, and security alerts, ensuring minimal disruption to business operations.

Requirements:

• 5+ years of experience in identity and access management, with a strong focus on Azure AD and hybrid identity solutions;
• 3+ years of experience as a Tech Ops Lead, managing an Azure AD team and overseeing identity security operations;
• Work in a hybrid set up (3 days onsite in Alabang, Muntinlupa and 2 days WFH) – Necessary condition;
• Expert-level knowledge of Azure AD, Active Directory, and hybrid identity architectures, ensuring effective identity governance and security enforcement;
• Strong experience with Azure AD Connect, ADFS, and authentication protocols such as SAML and OAuth, ensuring secure authentication flows;
• Proficiency in PowerShell scripting and Graph API, enabling automation and efficient identity management;
• Hands-on experience with Azure Identity Governance, Privileged Identity Management, and Conditional Access, ensuring compliance and security best practices;
• Familiarity with Microsoft Intune, Endpoint Manager, and Windows Hello for Business, enhancing identity and endpoint security;
• Strong problem-solving and troubleshooting skills, with the ability to diagnose and resolve identity and access issues;
• Excellent communication and documentation abilities, ensuring clear technical communication across teams and stakeholders;
• Ability to work independently and collaborate with cross-functional teams, ensuring seamless execution of identity management strategies.

We offer:

• Salary for work amounting to 120,000 – 130,000 PHP;
• Monthly transportation allowance of ₱4,000;
• ₱3,600 monthly de minimis non-taxable allowance;
• HMO coverage from day 1 for you and 1 dependent;
• Equipment provided;
• Optical coverage;
• Year-end leave monetization;
• Gym subscription;
• Monthly supply of coffee

Please be advised that we will only contact selected candidates