Citi’s Chief Information Security Office - Identity and Access Management (IAM) Active Directory team is looking for an experienced Active Directory Engineer to join their team in Singapore.

As a senior engineer, you will be responsible for the build and integration of multi-domain, multi-regional Active Directory services, driving infrastructure migration, and coordinating tech refresh projects. You will be reporting to the Regional Manager and be part of a Global team of Active Directory integration engineers.

The ideal candidate will have a strong background in Active Directory (AD), excellent problem-solving skills, and experience with migration and deployment projects. Candidate should be a self-starter and should be able to work in a well-defined team structure as well as independently with minimal supervision. Candidate should have a good command of English and possess strong oral and written business communication skills. Candidate should be a fast-learner and should be able to work well under pressure and competing priorities.

Key Responsibilities

• Build and deploy solutions to support a global Identity management system that includes Active Directory, Azure Active Directory, and, multi-factor authentication.

• Manage Active Directory migration projects, including planning, execution, and testing.

• Coordinate tech refresh projects, including planning, execution, and testing.

• Ensure Active Directory security, group policy, and compliance.

• Troubleshoot Active Directory issues and perform root cause analysis to ensure timely resolution.

• Collaborate with cross-functional teams to ensure seamless integration.

• Develop and maintain documentation of Active Directory infrastructure and processes.

• Function as an Infrastructure Subject Matter Expert (SME) for the infrastructure under your responsibility

• Coordinate with Operations teams to perform post-deployment testing of solutions in individual environments.

• Engage with strategic vendors, external to the organization, to investigate problems and understand product functionality, influence enhancements and roadmap as required to meet organizational goals.

• Lead initiatives to develop/enhance tools for system monitoring and maintenance improvements.

• Risk and Compliance – Partner closely with other infrastructure teams to build systemic process that help maintain Citi’s system desired state and enforce compliance.​

• Document resolutions in knowledge base tools.

​

Occasional weekend activities and extended-hour shifts expected.

Mandatory Skills

• 10+ years’ experience in building and/or supporting enterprise application infrastructure preferably in a global financial services organization.

• At least 5+ years’ experience in one or more of the following:

  • Multi-forest, multi-domain on-premises enterprise Active Directory integration, migration, and deployment

  • Microsoft Azure Active Directory integration

  • Microsoft Office 365 integration

• Experience in one or more of the following:

  • Azure Active Directory Connect

  • Pass-Thru Authentication (PTA)/Password hash Sync (PHS)

  • Azure/Azure AD Role Based Access Control (RBAC) & Azure Privileged Identity Management (PIM)

  • Azure Multi-Factor Authentication (MFA)

  • Licensing & Conditional Access Policies

  • Express Routes

  • Azure subscriptions & resource groups

  • AD Kerberos and LDAP

• Good understanding of AD architecture, design, and implementation

• Good understanding of AD security, group policy, and troubleshooting

• Proficiency in AD migration tools and techniques (e.g., ADMT, Quest)

• Experience in coordinating and driving tech refresh projects.

• Strong problem-solving skills and attention to detail.

• Solid project management skills and able to track and report multiple projects at the same time.

• Experience in writing and evaluating technical and functional documents/requirements.

• Excellent communication and collaboration skills

Desired Skills

• Knowledge of PowerShell scripting and automation

• Familiarity with other directory services (e.g., LDAP, Novell)

• Experience with identity management and access control concepts

• Certification in Microsoft Active Directory (e.g., MCSA, MCSE)

• Experience with IT service management frameworks (e.g., ITIL)

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting