Editorial summary

The company is seeking a Windows Active Directory Engineer responsible for managing Windows Server security, vulnerability remediation, and OS hardening across a large enterprise environment. The role involves assessing and prioritizing security vulnerabilities on approximately 1,500 legacy Windows servers, implementing security baselines, and ensuring compliance with OS hardening standards. Candidates should have expertise in security assessment, configuration management, and technical remediation. The position offers a salary of 12,000.

This summary is AI-generated and may contain inaccuracies. Please refer to the full job description below.

Job description

[This job id 27635 first appeared in Job-Q.com on 25 Aug 2026]

Responsibilities

• Lead Windows Server security, vulnerability remediation and OS hardening activities across a large enterprise server estate.
• Assess, prioritize and remediate security vulnerabilities across approximately 1,500 legacy Windows servers/systems, including older and end-of-life Windows environments.
• Analyse vulnerability findings and determine appropriate technical remediation, configuration changes, patching, upgrades or mitigating controls.
• Implement and maintain Windows security baselines, OS hardening standards and configuration controls.
• Provide Principal/L4-level engineering expertise for Microsoft Active Directory and Windows Server infrastructure.
• Manage and troubleshoot Active Directory Domain Services (AD DS), Domain Controllers, Group Policy (GPO), DNS and DHCP.

Skills/Requirement

• 10+ years of hands-on Windows Infrastructure / Active Directory engineering experience.
• Experience operating at Principal Engineer, L4 Engineer, Technical Lead or Windows/AD SME level.
• Deep technical expertise in Windows Server and Microsoft Active Directory.
• Strong experience in server security, vulnerability remediation and Windows OS hardening.
• Proven experience supporting and remediating legacy / end-of-life Windows environments.
• Strong knowledge of AD DS, GPO, DNS, DHCP, Domain Controllers, replication, trusts, Kerberos and LDAP/LDAPS.

Interested candidates, who wish to apply for the above position, please send in your resume to:

PERSOL Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R23118975 (ABDUL RAHMAN ANSARI RAJA)

We regret to inform you that only shortlisted candidates will be contacted.

**********************************

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persol.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

**********************************

Scam prevention reminder: You should not make any pre-payment when applying for any job.

Illegal practices reminder: It is illegal for recruiter to collect payment (kickback) from the worker https://www.mom.gov.sg/-/media/mom/documents/publications/foreign-workers/what-are-kickbacks.pdf