Active Directory Senior Engineer

Job description

Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. Position details This role is for a new requirement with Active Directory (AD) Admin Team for the department of Systems Office for Asia (ASO), MUFG Bank Ltd having its regional headquarters in Singapore.

The team will be responsible for the maintenance of the AD infra end to end covering all branches in Asia & Oceania region excluding Japan and China. This role is responsible for implementing projects like custom banned passwords using Microsoft Entra password protection, ensuring compliance with regulatory and security requirements (e.g., HKMA C-RAF remediation). The engineer will work closely with the AD Team, IRMD IAM, and project stakeholders to deliver a secure and robust password policy across the enterprise.

Roles and Responsibilities Analyze, design, and configure password policies to prevent weak or commonly used passwords in Active Directory and Entra ID environments. Manage AD, DNS, ADFS, GPO, ADFR, Entra ID, and related tools Develop and maintain PowerShell scripts for automation, reporting, and policy enforcement. Collaborate with project managers, security teams, and auditors to ensure regulatory compliance and successful project delivery.

Provide technical documentation, including implementation guides and operational procedures. Lead the implementation of custom banned passwords in Microsoft Entra ID (formerly Azure AD) password protection. Troubleshoot and resolve issues related to password policies, AD, and Entra ID integration. Mentor junior engineers and provide technical guidance on AD, Entra ID, and PowerShell best practices. Be part of the AD BAU team to manage operational issues and participate in other major projects.

Experience in AD recovery, DR strategy, BCDR processes Job Requirements: Strong hands-on experience, 10-15 years with Microsoft Active Directory and (installation, multi-forest management, GPO, DNS/DHCP) and Entra ID. In-depth knowledge of Microsoft Entra ID (Azure AD), especially password protection features and custom banned password lists. Experiences in monitoring, analytics tools like SCOM, Zabbix, Splunk, Azure log analytics, ELK etc.

Advanced PowerShell scripting skills for automation and reporting. Experience with regulatory compliance projects (e.g., HKMA C-RAF, SOX, GDPR) is a plus. Excellent analytical, troubleshooting, and communication skills. Demonstrates strong project management, effective teamwork, and cross-regional coordination skills, with a proactive approach toward new initiatives, automation, and continuous efficiency improvement.

Preferred Certifications

Microsoft Certified for AD and Entra ID. Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.