L3 Active Directory Engineer

About Us:
GECO Philippines, part of the GECO Asia Group of Companies, is a specialist IT Consulting Services company with headquarters in Singapore and two delivery centers in the Philippines.

💼 We’re Hiring:

We're looking for an experienced L3 Active Directory Engineer to join our Infrastructure Shared Services team. If you're passionate about enterprise identity management, Active Directory security, and Azure technologies, we'd love to hear from you.

🏢 Deployment Setup

🔁 Work Arrangement: Hybrid (3 days onsite / 2 days remote)
🕒 Schedule: Shifting

⚙️ Key Responsibilities

• Administer and support Azure Active Directory (Microsoft Entra ID) and on-premises Active Directory environments.
• Manage hybrid identity solutions using Azure AD Connect and identity federation.
• Configure and maintain Conditional Access, Multi-Factor Authentication (MFA), and Single Sign-On (SSO).
• Troubleshoot authentication, directory synchronization, and identity-related issues.
• Manage Active Directory Group Policies (GPO), DNS, DHCP, and role-based access controls.
• Perform domain controller health checks, replication monitoring, and performance optimization.
• Develop and maintain PowerShell scripts for automation and reporting.
• Support Active Directory security, compliance, and identity governance initiatives.
• Assist with cloud migrations, identity modernization, and Zero Trust implementations.
• Collaborate with infrastructure and security teams on enterprise identity solutions.

💡 Technical Competencies

• Experience with Semperis Directory Services Protector (DSP) and Active Directory Forest Recovery (ADFR).
• Exposure to Microsoft Intune, Endpoint Manager, and Windows Hello for Business.
• Familiarity with CyberArk, Okta, or Ping Identity.
• Experience using SIEM platforms such as Microsoft Sentinel or Splunk.
• Microsoft certifications such as SC-300 or AZ-305 are highly preferred.

🎓 Qualifications

• 5+ years of Active Directory administration experience.
• 3+ years of experience managing Azure Active Directory (Microsoft Entra ID) and hybrid identity environments.
• Strong knowledge of:
  • Azure AD Connect
  • Active Directory Domain Services (AD DS)
  • Conditional Access, MFA, and SSO
  • PowerShell scripting
  • Group Policy (GPO), DNS, DHCP
  • Kerberos, NTLM, SAML, OAuth, and OpenID Connect
• Experience with Azure Identity Governance, Privileged Identity Management (PIM), and RBAC.
• Strong troubleshooting, analytical, and documentation skills.
• Ability to work independently and collaborate with cross-functional teams.

🤝 Skills & Attributes

• Excellent communication and customer service skills.
• Strong problem-solving ability with attention to detail.
• Can manage multiple priorities in a fast-paced environment.
• Team-oriented, adaptable, and committed to continuous learning.
• Highly organized with strong follow-through on incidents and requests.

🚀 Ready to make an impact?
Be part of a team that delivers world-class IT support, empowers users, and keeps business operations running smoothly.

📩 Apply now and help us provide seamless, reliable, and customer-focused service!