Active Directory Engineer

Key ResponsibilitiesLead the implementation of custom banned passwords in Microsoft Entra ID (formerly Azure AD) password protection.Analyze, design, and configure password policies to prevent weak or commonly used passwords in Active Directory and Entra ID environments.Develop and maintain PowerShell scripts for automation, reporting, and policy enforcement.Collaborate with project managers, security teams, and auditors to ensure regulatory compliance and successful project delivery.Provide technical documentation, including implementation guides and operational procedures.Troubleshoot and resolve issues related to password policies, AD, and Entra ID integration.Mentor junior engineers and provide technical guidance on AD, Entra ID, and PowerShell best practices.Be part of the AD BAU team to manage operational issues and participate in other major projects.Required Skills And ExperienceStrong hands-on experience with Microsoft Active Directory (installation, multi-forest/domain management, GPO, DNS/DHCP).In-depth knowledge of Microsoft Entra ID (Azure AD), especially password protection features and custom banned password lists.Experiences in monitoring, analytics tools like SCOM, Zabbix, Splunk, Azure log analytics, ELK etc.Advanced PowerShell scripting skills for automation and reporting.Experience with regulatory compliance projects (e.g., HKMA C-RAF, SOX, GDPR) is a plus.Excellent analytical, troubleshooting, and communication skills.7–10 years of IT experience, with at least 5 years in AD/Entra ID environments.To apply, simply click the "Apply" button or send your updated profile to recruit@percept-solutions.comEA Licence No.:18S9405 / EA Reg. No.:R1330864Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.