Active Directory Administrator (Hybrid)

About the role

Directio is seeking an experienced Active Directory Administrator to support a French client that manufactures glasses and works with opticians. The role involves managing both on‑premises and cloud‑based identity services in a hybrid environment, with three days onsite in Alabang, Muntinlupa and two days remote.

Key responsibilities

• Administer and support Azure Active Directory, Active Directory Domain Services, and hybrid identity integrations.
• Manage Azure AD Connect synchronization and ensure proper identity federation.
• Implement Conditional Access, Multi‑Factor Authentication, and Single Sign‑On configurations.
• Deploy and maintain Semperis Directory Services Protector and Active Directory Forest Recovery.
• Monitor security events, respond to unauthorized changes, and perform incident response using Semperis ADFR.
• Maintain AD group policies, DNS, DHCP, and Role‑Based Access Control permissions.

Required profile

• 5+ years of hands‑on Active Directory administration and security experience.
• 3+ years managing Azure AD and hybrid identity solutions.
• Proven experience with Semperis Directory Services Protector and AD Forest Recovery.
• Strong troubleshooting skills for domain controller replication, DNS, DHCP, and Group Policy.
• Excellent communication and documentation abilities.

Required skills

• Azure Active Directory
• Active Directory Domain Services
• Azure AD Connect
• Semperis Directory Services Protector
• Active Directory Forest Recovery
• PowerShell scripting
• Azure AD Conditional Access
• Multi‑Factor Authentication
• Single Sign‑On
• SAML, OAuth, OpenID Connect
• Active Directory Federation Services
• Azure Entra ID
• DNS, DHCP
• Group Policy
• LDAP
• Public Key Infrastructure
• Certificate Services
• Privileged Access Management
• Identity Governance
• Kerberos, NTLM

What we offer

• Salary of PHP 80,000–90,000 per month
• Monthly transportation allowance of PHP 4,000
• De‑minimis allowance of PHP 3,600
• HMO coverage from day 1 for employee and one dependent
• Equipment provision, optical coverage, gym subscription, and coffee supply
• Year‑end leave monetization