Solution Architect

The Solution Architect will be responsible to transform and modernise Enterprise IT Workplace Services, with primary focus in Singtel's corporate Active Directory and Public Key Infrastructure Services. This role is critical and requires a strong technical expert to review, re-architect, modernize and manage the existing Active Directory and PKI infrastructure and strengthen the foundation for holistic user identity management on the corporate network.

He/She will interface with other architectural and security teams to ensure these services are integrated with overall enterprise infrastructure architecture. He/She will lead the plan, build, and run for AD, PKI and MFA services, design consultation, providing directions and guidance to the technical team, ensuring that the design and operations meets security standards and guidelines.
- Lead planning, design, and implementation activities to modernise and produce enterprise-level Microsoft Active Directory architecture, sites & replication, trust relationships, administrative management, global system security, policy configuration (GPOs), and PKI implementation.
- Lead design and implement AD authentication integration for user SSO (single sign-on) using ADFS, SAML, OAUTH, LDAPS, Kerberos, etc and MFA support (MS Authenticator, SilverFort, etc).
- Lead design and implement privileged access management in Azure AD admin roles.
- Lead and implement Azure Active Directory services (authentication, authorization and Conditional Access) for Singtel hybrid multi-cloud environment, i.e. Azure Landing Zone.
- Create architectural and security standards for Active Directory, SSO, MFA and PKI technologies.
- Setup and continuously improve AD related services governance framework.
- Drive automation initiatives on AD to increase efficiency of operations team and to detect abnormal behaviour of the systems.
- Provide expert advisories to operations team for continuous improvements in effectiveness of service monitoring, security-compliance, integrity and availability of AD Services.
- Work with operations team to improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
- Ensure Active Directory and PKI services are comply with Singtel policies, standards and operational guidelines.
- Support Audit topics related to AD and PKI services with evidences as and when required.
- Provide consultation to the Identity team with regards to solutions implementation, lead the change management topics, lead incident management, work with the operation team to enhance the current automation solutions and to innovate new automation topics to reduce the TCO.

**Requirements:
- At least 15 years of experience in designing and implementing Microsoft Identity technologies including Active Directory, CA-PKI, and Group Policies for large enterprises with more than 10,000 users.
- Expert knowledge in administering Active Directory (AD) and GPO’s.
- Expert knowledge of AD, ADFS, PKI technologies.
- Expert knowledge of DNS, DHCP, WINS, DFS, Microsoft enterprise technology.
- Must have deep and thorough understanding of monitoring best practices, and compliance to best practices for security and operations.
- Ability to exhibit leadership in championing the customers' requirements, delivery expectations and drive continuous improvement and transformation
- Develops architecture documents and standards for AD-related areas
- Knowledge of server virtualization technologies, preferably VMware and/or Microsoft technologies
- Expert knowledge of MS Active Directory, Azure AD implementation, Azure B2B and B2C implementation, Azure AD roles implementation, MFA standardization and governance.
- Expert in setup of PKI infrastructure, handling AD and PKI migration, sizing the AD and PKI services
- Expert in handling business counterparts and simplify the requirements to technical solutions.