Active Directory Lead with Identity Access Management

Role : Active Directory Lead with Identity Access Management (IAM)

Location : Alabang Muntinlupa

Work Type : Hybrid - 3x per week RTO

Work Shift : Regular Shift

Job Description:

KEY RESPONSIBILITIES:Active Directory Design & Architecture

• Designing AD forests, domains, and organizational units (OUs)

• Planning and implementing trust relationships and replication strategies

•Group Policy Management

• Creating and managing Group Policy Objects (GPOs)

• Troubleshooting GPO application issues

Authentication Protocols

• Deep knowledge of Kerberos, NTLM, and LDAP

• Implementing secure authentication and single sign-on (SSO)

AD Security and Hardening

• Securing domain controllers

• Implementing tiered administration models

• Monitoring and auditing AD activity

Backup and Disaster Recovery

• AD backup strategies and authoritative/non-authoritative restores

• Using tools like Windows Server Backup, Veeam, or Azure Backup

• PowerShell Scripting

Azure Active Directory Management

● Design, implement, and maintain Azure Active Directory (Azure AD) and hybrid identity solutions.

● Administer Azure AD Connect, ADFS, Pass-Through Authentication (PTA), and Password Hash Sync (PHS).

● Optimize Azure AD B2B and B2C for external partner and customer identity management.

Identity & Access Management (IAM)

● Manage Conditional Access Policies (CAPs) to enforce security controls.

● Implement and maintain Privileged Identity Management (PIM) for just-in-time access to privileged roles.

● Oversee role-based access control (RBAC) and group-based access management.

Security & Compliance

● Enforce Multi-Factor Authentication (MFA), Zero Trust Security Model, and access reviews.

● Monitor and mitigate identity-based security risks using Semperis Cyber Security Solution and Azure AD Identity

Protection.

● Ensure compliance with industry standards like ISO 27001, NIST, and GDPR.

Hybrid Identity & Integration

● Manage synchronization of on-premises AD with Azure AD.

● Troubleshoot and optimize Azure AD Seamless SSO and Hybrid Join.

● Automate identity lifecycle management using PowerShell, Microsoft Graph API, and Azure Automation.

Monitoring & Incident Response

● Utilize Semperis ADFR & DSP, Azure Monitor, Log Analytics, and Security Center to detect anomalies.

● Lead incident response and root cause analysis for Azure AD authentication failures, sync issues, and security

alerts.

● Provide Level 3 (L3) support and mentorship to IT support teams.

QUALIFICATIONS & SKILLS
• Minimum 5-7 years of experience in identity and access management, with a strong focus on Azure AD.

• At least 3 years of experience as a Tech Ops Lead, managing an Azure AD team and overseeing identity

security operations.

• Minimum 5-7 years of experience in identity and access management, with a strong focus on Azure AD.

• Proven experience as a Tech Ops Lead, managing an Azure AD Team and overseeing IAM operations.

• Minimum 5-7 years of experience in identity and access management, with a strong focus on Azure AD.

• Previous experience as a Tech Ops Lead, overseeing identity and access management, security, and cloud

infrastructure operations.

• Minimum 5-7 years of experience in identity and access management, with a strong focus on Azure AD.

Primary Technical and Functional abilities:

• Expert-level knowledge of Azure AD, Active Directory, and hybrid identity architectures.

• Strong experience with Azure AD Connect, ADFS, and SAML/OAuth authentication.

• Proficiency in PowerShell scripting, Graph API, and automation tools.

• Hands-on experience with Azure Identity Governance, PIM, and Conditional Access.

• Familiarity with Microsoft Intune, Endpoint Manager, and Windows Hello for Business.

Soft Skills

• Strong problem-solving and troubleshooting skills.

• Excellent communication and documentation abilities.

• Ability to work independently and collaborate with cross-functional teams.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) (Preferred)

Note :

Interested candidates feel free to share your updated resume to