Iam Engineer

1. Administer and maintain ADFS, Azure AD B2C, MIM, AAD Connect, and NPS environments 2. Manage LDAP, SAML, OAuth, and OIDC-based authentication services, including Workspace ONE Access and Microsoft Entra ID 3. Configure and maintain relying party trusts between Identity Providers (IdP) and Service Providers (SP); maintain a trust registry 4. Support ADFS configuration including IdP request setup, claims, and attribute customisation 5. Integrate ADFS with second-factor authentication services (e.g. Azure MFA) 6. Perform regular health checks of AD-related services in line with Microsoft best practices 7. Maintain IT Service Continuity documentation for Active Directory, including configurations, policies, and procedures 8. Monitor and maintain audit logs for AD-related services 9. Monitor AD CS and the broader Enterprise PKI environment 10. Manage incident, problem, change, and vulnerability lifecycle activities within the PKI environment 11. Conduct capacity planning and performance tuning for PKI components 12. Perform daily health checks, including post-incident and post-change integrity verification 13. Produce regular reports on patches applied, system performance, and capacity status 14. Manage user lifecycle activities — provisioning, modification, and de-provisioning of accounts 15. Implement, maintain, and periodically review RBAC aligned to client policies 16. Implement and manage SSO across applications 17. Configure and manage MFA services, ensuring IdP integration assurance 18. Enforce Conditional Access policies based on location, device status, and risk level 19. Manage IdP requests to enable seamless and secure authentication 20. Onboard third-party applications for SSO, including user and group provisioning 21. Manage application registrations within Microsoft Entra, including API permission configuration 22. Monitor identity security alerts, respond to incidents, and drive remediation 23. Maintain comprehensive documentation of Entra configurations, policies, and procedures 24. Produce regular service status reports covering security incidents, access reviews, and optimisation recommendations Interested applicants, please Email, fabianling@recruitexpress.com.sg Fabian Ling Tuong Liing R25129353 Recruit Express Pte Ltd EA Licence No: 99C4599 We regret that only shortlisted candidates will be contacted.