Operate, secure and continuously improve GIC's hybrid identity platform across on-premises Active Directory and Microsoft Entra ID, combining hands-on L3 operations, incident resolution, security hardening, automation, resilience and identity governance.
- Administer AD DS across a multi-domain forest, including users, groups, organisational units, delegation, trusts, sites, replication and FSMO roles
- Build, patch, monitor and capacity-plan domain controllers, and operate AD-integrated DNS and DHCP
- Troubleshoot and manage Group Policy across its lifecycle, from security baselines and deployment through to retirement
- Operate AD Certificate Services and PKI, including certification authority health, templates, certificate issuance and lifecycle management
- Own AD backup and disaster recovery processes, including regular recovery testing and full forest recovery readiness
- Nice to have: Microsoft Entra ID Governance
- Nice to have: Intune
- Nice to have: Microsoft Defender for Identity
- Nice to have: Defender XDR
- Nice to have: Microsoft Sentinel
- Flexibility to work from home on chosen days
