Senior / Intermediate Active Directory (AD) Administrator

Position Description:

Role Overview CGI Malaysia is seeking a Senior or Intermediate Active Directory (AD) Administrator to lead and manage a client's enterprise identity infrastructure across On-Premises Active Directory and Microsoft Entra ID (Azure AD). This role suits an independent expert who can run gap assessments, identify risks, and drive corrective actions to strengthen identity security and operational resilience in a hybrid environment.

Your future duties and responsibilities:

Key Responsibilities

• Administer and support AD (On-Prem) and Entra ID: users, groups, OUs, domains/forests, trusts, service accounts, access models, and delegated administration.

• Own Group Policy (GPO) governance: design, implementation, troubleshooting, and lifecycle management.

• Reconcile and align AD Group Policies (GPOs) with Microsoft Intune policies (Configuration Profiles, Compliance Policies, Security Baselines) to reduce conflicts and ensure consistent endpoint posture across hybrid/co-managed environments.

• Support hybrid identity operations (e.g., Entra Connect/AD Connect sync, federation where applicable) and core AD services (DNS integration, replication health).

• Lead troubleshooting of complex identity issues (authentication, replication, GPO processing, sync errors) and perform root cause analysis.

• Conduct risk and control assessments, propose and implement remediation (hardening, least privilege, privileged access controls).

• Maintain documentation (runbooks/SOPs/diagrams), mentor junior staff, and drive automation using PowerShell.

Required qualifications to be successful in this role:

Qualifications & Experience

• 5+ years hands-on experience in enterprise Active Directory administration (Senior/Intermediate level).

• Strong understanding of AD security/hardening, GPO, replication, DNS fundamentals, and hybrid identity concepts.

• Experience with Entra ID (Azure AD) administration and identity operations in a corporate environment.

• PowerShell scripting capability (automation, bulk admin, reporting).

• Strong troubleshooting, communication and documentation skills; able to work independently.

Strong Advantage

• Experience with Conditional Access / MFA / SSO, privileged access governance (e.g., Entra PIM).

• Global, complex environments (multi-site / multi-domain / multi-forest).

• Audit/regulatory exposure (e.g., ISO 27001, SOX).

• Microsoft certifications such as SC-300, AZ-104, or equivalent.

Success Profile at CGI

• Security-first and client-focused; proactively identifies risks and drives practical improvements.

• Structured problem solver with strong ownership and reliable delivery.

• Collaborative communicator who can align technical actions with business and security priorities.

Skills:

• Active Directory

• Active Directory Security

• Analytical Thinking

• Shell Script

• Team Collaboration

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.