L3 Active Directory

About Us :

GECO Philippines, part of the GECO Asia Group of Companies, is a specialist IT Consulting Services company with headquarters in Singapore and two delivery centers in the Philippines.

Position : L3 Active Directory

As a level 3 in the organization, using his / her expertise for ultimate level of escalation in case of incidents and for the contribution in the qualification of new solutions, assisting in the deployment. The role is broadly split between providing day to day operational support for existing infrastructure services and users of those services, and project-based work leading to the development and deployment of new infrastructure services.

Job Requirements & Qualifications :

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field.

5+ years of hands-on experience in Active Directory administration and security.

3+ years of experience managing Azure AD and hybrid identity solutions.

Strong expertise in Semperis Directory Services Protector (DSP) and AD Forest Recovery (ADFR).

Proficiency in PowerShell scripting for automation and administration.

Experience with Azure AD Connect, AD Federation Services (ADFS), and authentication protocols (SAML, OAuth, OpenID Connect).

Familiarity with Azure AD Conditional Access, Identity Protection, and MFA policies.

Understanding of AD security principles, Kerberos authentication, and NTLM vulnerabilities.

Hands-on experience with privileged access management (PAM) and identity governance solutions.

Strong troubleshooting skills in domain controller replication, DNS, DHCP, and GPO management.

Knowledge of cybersecurity best practices, risk assessments, and compliance standards.

Technical Expertise :

Expert-level knowledge of Azure AD, Active Directory, and hybrid identity architectures.

Strong experience with Azure AD Connect, ADFS, and SAML / OAuth authentication.

Proficiency in PowerShell scripting, Graph API, and automation tools.

Hands-on experience with Azure Identity Governance, PIM, and Conditional Access.

Familiarity with Microsoft Intune, Endpoint Manager, and Windows Hello for Business.

Job Roles & Responsibilities :

Manage Azure AD, AD DS, and hybrid identity (AAD Connect, MFA, SSO, Conditional Access).

Administer and secure Active Directory, including GPO, DNS, DHCP, and RBAC.

Deploy and support Semperis DSP & ADFR for AD monitoring and recovery.

Troubleshoot authentication, replication, and directory synchronization issues.

Implement security controls (PIM, JIT, Zero Trust) and support compliance requirements.

Automate identity and security processes using PowerShell.

Why Join Us?

How to Apply :

You may click "Apply for this job" button or you may send your updated resume to dsa@geco.asia