Total 250 structural engineer job vacancies in F&B / Tourism / Hospitality category

Job Requirement:

• 7+ years of experience in Linux system administration and/or platform engineering
• 3+ years of hands-on experience with Red Hat OpenShift Container Platform (OCP 4.x)
• Strong proficiency in RHEL 7/8/9 administration and troubleshooting
• Solid understanding of kubevirt architecture and concepts (OpenShift is kubevirt-based)
• Familiarity with enterprise storage, networking, and virtualisation platforms (VMware, KVM)
• Strong knowledge of security hardening, patching processes, and compliance frameworks

Key Responsibilities:

• Red Hat OpenShift Platform Support
• Provide L3 escalation support for Red Hat OpenShift Container Platform (OCP) across on-premise and hybrid cloud environments
• Administer, troubleshoot, and maintain OpenShift clusters including control plane, worker nodes, etcd, and ingress/egress components
• Manage OpenShift upgrades, patching, and version lifecycle planning
• Diagnose and resolve issues related to pods, deployments, namespaces, persistent volumes, operators, and service mesh (Istio/Red Hat Service Mesh)
• Implement and maintain Role-Based Access Control (RBAC), network policies, and security contexts

Linux Platform Support

• Provide L3 support for Red Hat Enterprise Linux (RHEL) and other Linux distributions across physical, virtual, and cloud environments
• Perform root cause analysis (RCA) for OS-level incidents including kernel panics, performance degradation, storage failures, and network issues
• Manage system hardening, patching, and compliance activities in line with security baselines (e.g., CIS)
• Administer system services, daemons, cron jobs, and startup processes (systems)

Thanks, and Best Regards

Karanam Vijaya Kiran

(EA Registration no: R1443178)

HP: +6592333815

Recruitment Manager

Helius Technologies Pte Ltd (EA Licence No: 11C3373)

https://www.linkedin.com/in/vijay-karanam-68462131/

• Well Established Company
• Excellent Welfare and Benefits + Career progression
• Basic $ 3200 to $ 4500 + AWS + VB
• Working location: North-East
• Working Hours: Monday to Friday (8:30am to 5:30pm)

Job Responsibilities:

• Perform quantity take-offs from tender requirement by reviewing drawings and technical specifications to accurately quantify Bill-of-Materials (BOM). To work within or to manage the tender closing date and time-extensions
• Evaluate and compare quotations from subcontractors and suppliers
• Compile the cost estimation for ELV, BMS solutions and relevant scope of works for the implementation
• Liaise with internal project / technical teams, and external vendors / subcontractors as to ensure alignment for offered bid solutions with compliance to technical specification and project timelines
• Prepare tender submission and contract documents including bill of quantities (BQ), datasheets, technical proposal for ELV systems and/or BMS system. Assist & support the sales team for tender submission
• Conduct cost analysis for project and maintenance works for bidding purposes, including value engineering to optimize project designs and construction methods to achieve cost-effectiveness
• Assist to solution vendors relationship engagement
• Ensure compliance with local regulations, codes of practice, and industry standards
• Support updating of marketing materials include website

Requirements

• Diploma or Degree in Electrical Engineering, Building Services, Quantity Surveying, or related field
• Minimum 3 years of relevant experience in QS for Electrical & ELV systems
• Familiar with Singapore construction, M&E industry practices and tendering portals such as Gebiz etc

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

NG DIAUM YEE (R2198031)

EA Recruitment Pte Ltd

EA License No: 21C0492

Responsibilities

• Manage application releases by supporting deployments, configuration updates, and environment setup across testing and production platforms.
• Coordinate with external service providers and internal teams to establish secure system connectivity, data exchanges, and required technical access.
• Act as first point of contact for system incidents, ensuring timely investigation, escalation, and resolution.
• Monitor system availability, performance, and security posture, recommending enhancements to improve reliability and operational efficiency.
• Support security-related operational tasks such as patch advisories, audit preparation, assessments, and continuity planning with relevant stakeholders.
• Perform troubleshooting and validation during rollouts, configuration changes, and production support activities.
• Develop simple scripts or automation to support system integration, operational workflows, or routine tasks where applicable.
• Maintain up-to-date technical documentation, operational procedures, and system configuration records to support audits and knowledge sharing.

Requirements:

• Degree in Computer Science, Information Technology or related field, with at least 3–4 years of experience in IT operations, application support, or systems engineering roles.
• Hands-on experience supporting cloud-hosted environments (e.g. AWS, Azure) and web-based applications in enterprise or regulated environments.
• Working knowledge of scripting or automation (e.g. Python, Shell, PowerShell), with basic exposure to databases and SQL.
• Strong problem-solving ability with good communication skills, comfortable working with multiple stakeholders in a fast-paced environment.

Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified.Email resume to ken.ng@peopleprofilers.com
People Profilers Pte Ltd, 20 Cecil Street, #08-09, PLUS Building, Singapore 049705.
Tel: 6950 9724
http://www.peopleprofilers.com
EA License Number: 02C4944
Registration Number: R1872398
Posting Personnel: Ng Jwee Ken
Ref: 93RV9444

• Develop industrial robotic and automated applications
• Develop robot simulation models and off-line programs
• Maintain an in-depth knowledge of the robots and associated process equipment
• Provide technical support to robot operators, engineers, and technical workers through system troubleshooting and diagnostics
• Train operators and engineers in robot programming, maintenance, and process applications
• Be responsible for establishing maintenance and PM plans through the industrialization process for the global network
• Implement lean methodologies and tools in the identification, development, and industrialization of robotics and automation in processes for the global network.
• Be responsible for maintaining and updating Robotics Database and Robot Management System
• Provide continuous improvement support and seek out opportunities to improve robotics and automation across the new unit and services network.
• Maintain schedules for project deliverables
• Communicate progress to all levels of the organization

Requirements

• Minimum Degree in Automation, Mechanical, Mechatronics and Engineering
• At least 6 years’ experience in precision machining environment or manufacturing industry
• Familiar with use and application of Computer-Aided Design (CAD) software, eg. Solidworks or NX
• Hands on experience in robot operations, sensors, servo systems and motion control systems
• Programming experience in one or more industrial robot brands- FANUC, ABB, KUKA, MOTOMAN, etc
• Strong problem-solving and analytical skills, such as FMEA, 8D.

Interested candidates please send in your resume to:
Topaz Liang Huimin (CEI No. R1104500), email to: topaz@recruitexpress.com.sg

EA Licence No. 99C4599

Job Highlights

• Attractive remuneration package
• Great learning opportunities and career growth
• Medical and Insurance Benefit

About Us

• Established A1 main contractor
• KUAN AIK HONG CONSTRUCTION IS LISTED AMONG THE BEST EMPLOYERS IN SINGAPORE (Source: SINGAPORE'S BEST EMPLOYERS 2023 by The Straits Times | statista )

Job Description:

• Perform site planning, coordination & inspection relating to the construction project so as to ensure that project completion timeline, requirements and budget are met
• Assist in the implementation of project operations to comply with ISO 9001; 14001; 45001 standard requirements, documented procedures as well as client, companies, authorities’ requirements
• Update the progress of structural works in the Progress Reports
• Assist in commissioning including coordination structural engineering
• Maintain the proper documentation of inspection forms and other follow-up inspections from RE
• Support Quantity Surveyors in conducting site measurement and inspections
• Liaise with sub-contractors, suppliers and clients
• Work under the advice of the Safety Officer to adhere to compliance & safety requirements with regulatory and industry standards during the construction phase
• To ensure works are in compliance with quality procedures and within standard workmanship requirements

Requirements:

• Minimum Degree in Civil Engineering (recognized by PE Board of Singapore)
• At least 3 years of local relevant experience in Construction industry; HDB preferred
• Good analytical, communication and interpersonal skills

Suitable candidates are encouraged to apply this position via Apply Now button or email to Career@kah.com.sg

Only shortlisted applicants will be notified.

How you’ll make a difference

A day in the life of a Principal Transport Engineer involves a mix of technical leadership and people leadership, including:

• Solving complex technical challenges on multidisciplinary transport and infrastructure projects
• Coaching and mentoring our talented professionals and graduates
• Working closely with clients to shape solutions and deliver project outcomes
• Managing project delivery to ensure quality, efficiency and strong results
• Planning future pursuits and supporting work winning
• Building and strengthening client relationships
• Continuing to grow technical skills across the transport engineering discipline (e.g. impact assessment, road safety, transport design, operational modelling) and leadership skills

• Runs Singapore's 5G backbone - lean team, national impact
• Permanent role with a regulated infrastructure operator

Overview

Our client operates the networks underpinning Singapore's national 5G connectivity. The IT team is small and senior, meaning less bureaucracy, more ownership. This is a hands-on role across network engineering, systems, cloud, and security, working closely with the Cybersecurity team in a compliance-driven environment.

Responsibilities

1. Infrastructure engineering

• Design and administer network infrastructure - routing, switching, firewalls, VPNs, NAC, wired and wireless
• Manage Windows Server, Linux, and virtualisation platforms (VMware, Hyper-V), including NAS, SAN, and vSAN
• Administer M365 services (Entra ID, Intune, Exchange Online, Teams) and hybrid AD/Entra identity
• Own monitoring tools (Grafana, Zabbix, PRTG, Nagios), patching cycles, migrations, and documentation

2. Security & Hardening

• Enforce security best practices - segmentation, CIS hardening, PAM/IAM controls
• Implement M365 security controls, audit logging, and ensure regulatory compliance

3. ITSM & Operations

• Operate across incident, problem, and change management within ITSM frameworks

4. End-user Computing

• L1/L2 support for Windows workstations and enterprise applications

Requirements

• Min 6 years in network engineering, IT infrastructure, and systems administration
• Networking: routing, switching, VLANs, ACLs, firewalls, VPNs, NAC (Cisco, Aruba, Palo Alto, Fortinet, F5)
• Systems: Windows Server, RHEL, VMware, Hyper-V, NAS/SAN/vSAN, M365
• Monitoring & Ops: Zabbix, Grafana, PRTG, Nagios, Veeam, ITSM, PAM, SIEM
• Proven experience in system hardening, patch management, and security compliance
• Background in a regulated environment - fintech, finance, or telco preferred
• Certifications: CCNA, RHCE, MCSE, VCP or equivalent
• Docker / Kubernetes exposure a plus

ROLE OVERVIEW

Our client is  seeking a skilled Cloud/DevOps Engineer to join our dynamic engineering team. In this role, you will play a pivotal part in designing, implementing, and maintaining scalable cloud infrastructure and CI/CD pipelines to support our mission-critical applications. The ideal candidate brings a strong background in AWS cloud services, automation tools, and Linux system administration, with a focus on reliability, security, and efficiency. If you thrive in fast-paced environments and have a passion for optimizing infrastructure as code, we want to hear from you.

KEY RESPONSIBILITIES

• Design, deploy, and manage cloud infrastructure on AWS, including container orchestration with Amazon EKS, serverless computing via Lambda, object storage with S3, and identity/access management using IAM.

• Automate infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools such as Terraform or AWS CloudFormation to ensure reproducible and scalable environments.

• Develop and maintain CI/CD pipelines using DevOps tools such as GitLab or Azure DevOps to streamline code deployment, testing, and release processes.

• Collaborate with development and operations teams to troubleshoot issues, optimize performance, and implement security best practices across cloud environments.

• Monitor system health, perform capacity planning, and implement disaster recovery strategies to maintain high availability and compliance.

• Contribute to cost optimization initiatives by analyzing resource usage and recommending efficient AWS configurations.

• Document processes, configurations, and architectural decisions to support knowledge sharing and team onboarding.

REQUIRED QUALIFICATIONS

Experience

• At least 3 years of hands-on experience in AWS cloud environments, with demonstrated expertise in core services including EKS (Kubernetes orchestration), Lambda (serverless functions), S3 (storage solutions), and IAM (security and permissions management).

Certifications

• AWS Certified Solutions Architect – Associate or AWS Certified SysOps Administrator – Associate.

• Red Hat Certified System Administrator (RHCSA) or Red Hat Certified Engineer (RHCE).

Technical Skills

• Proficiency in DevOps tools, including GitLab or Azure DevOps for version control, CI/CD, and team collaboration.

• Strong experience with IaC tools such as Terraform or AWS CloudFormation.

• Solid understanding of Linux/Unix systems, scripting (e.g., Bash, Python), and container technologies (e.g., Docker, Kubernetes).

Soft Skills

• Excellent problem-solving abilities, strong communication skills, and the ability to work collaboratively in cross-functional teams.

Education

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).

• Develop industrial robotic and automated applications
• Develop robot simulation models and off-line programs
• Maintain an in-depth knowledge of the robots and associated process equipment
• Provide technical support to robot operators, engineers, and technical workers through system troubleshooting and diagnostics
• Train operators and engineers in robot programming, maintenance, and process applications
• Be responsible for establishing maintenance and PM plans through the industrialization process for the global network
• Implement lean methodologies and tools in the identification, development, and industrialization of robotics and automation in processes for the global network.
• Be responsible for maintaining and updating Robotics Database and Robot Management System
• Provide continuous improvement support and seek out opportunities to improve robotics and automation across the new unit and services network.
• Maintain schedules for project deliverables
• Communicate progress to all levels of the organization

Requirements

• Minimum Degree in Automation, Mechanical, Mechatronics and Engineering
• At least 6 years’ experience in precision machining environment or manufacturing industry
• Familiar with use and application of Computer-Aided Design (CAD) software, eg. Solidworks or NX
• Hands on experience in robot operations, sensors, servo systems and motion control systems
• Programming experience in one or more industrial robot brands- FANUC, ABB, KUKA, MOTOMAN, etc
• Strong problem-solving and analytical skills, such as FMEA, 8D.

Interested candidates please send in your resume to:
Topaz Liang Huimin (CEI No. R1104500), email to: topaz@recruitexpress.com.sg

EA Licence No. 99C4599

About Us

The SDLC team delivers engineer-first, mission critical tooling across the entire cycle of source code, build, test, maintain and distribution. Our tools are used by all the Engineers of Goldman Sachs across all business units, and therefore the scope and reach of the impact of our engineering can be felt in all aspects of the organization.

As an SDLC Engineer

You will be working at the heart of the developer experience, ensuring the code that is written by thousands of GS engineers is versioned securely, reviewed expertly, compiles fast, tests comprehensively and is distributed widely. You will deliver CI/CD solutions that use modern tooling and software stacks. You could be working with cutting edge build technology, or the latest cloud native software and infrastructure in one or more languages including Java, Golang, and Python, or enabling and assisting our machine learning and AI tooling efforts.

SDLC Platforms include

• Build and Development using modern software stacks and methodologies

- GitLab - The firm's strategic CI/CD platform, hosted in-house with instances on-premise and on public clouds

- In-house developed Continuous Deploy (CD) tools for safely and repeatably deploying software packages, configuration and Infrastructure as Code

• Distribution - Secure software distribution mechanisms on both Linux and Windows
• Artifact Repositories - Build artifact repositories hosting dynamic terabytes of internal and external software packages and industry standard asset repositories, kept up-to-date and well secured.

Responsibilities

• Key contributor to the design, implementation and execution of our next generation CI/CD instances with an emphasis on security, testing the capability to exceed industry standard performance and availability.
• Develop features and improvements to our CI/CD solution, working with the vendor provided software stacks to extend and enhance according to engineering platform requirements.
• Collaborate with Product Management and other stakeholders within Engineering to maintain and improve the functions and quality of service
• Advocate for improvements to product quality, security, and performance
• Diagnose and solve technical problems, both within the core GitLab environment, and the broader SDLC ecosystem
• Metric gathering, analysis and reporting
• Reliability Engineering and operational resiliency

What you will learn when you join us

• Cloud native architectures in AWS.
• Managing all sizes and scopes of software repositories, build systems and deployment paradigms
• Expertise in commercial / open source build systems and strong knowledge of software change management systems
• Expertise in DevOps, SRE and Infrastructure (storage / networks / etc.)
• Design and implement distributed resilient systems
• Partner with and provide technical guidance on best practices to the GS Engineering community, across all revenue aligned Engineering teams
• Thinking about systems, edge cases, failure modes and behaviors

Skills and experience we are looking for

• A technical degree in Computer Science, Engineering, Mathematics, or a related field
• Min. 7 years’ experience in software engineering
• Ability to use and familiarity with Git
• Professional experience with Cloud deployment patterns. Notably AWS and Hashicorp Terraform
• General knowledge of multiple languages, and in-depth strong programming skills of at least one of: Golang, Java, Python, C, C++, preferably in large scale financial or technical organization
• Highly knowledgeable about running key applications on Linux
• Knowledgeable about networking protocols and topology
• Strong software engineering fundamentals, understanding algorithms, data structures and software design
• Experience with all stages in the lifecycle and debugging of developing and running distributed systems
• Demonstrable track record of taking ownership of requirements and delivering value

Attitudes we want

• Naturally collaborative with the ability to thrive in our global organization in an output driven, fast paced, hybrid and asynchronous work place
• Ability to communicate technical and organizational challenges and propose high quality solutions
• Self-managed, self-directed and good organization skills
• Passionate about the software development process and facilitating high frequency / high quality change across a vibrant and diverse user community
• Have an urge to resolve incidents and automate and document the resolution to prevent recurrence

PREFERRED QUALIFICATIONS

• BSc, MSc or PhD in relevant field (Computer Science, Maths, Physics)
• Highly knowledgeable about running key business applications on Linux platforms and Linux internals.
• Knowledgeable about networking (TCP, UDP, ICMP, ARP, DNS, TLS, HTTP, SSH, etc)
• Experience with Cloud and Infrastructure as Code technologies - AWS, Terraform, Docker, Kubernetes, etc.

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

© The Goldman Sachs Group, Inc., 2026. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.

Responsibilities:

• Liaise and co-ordinate with consultants, clients and subcontractor on Civil, Architectural & M&E works.
• To assist and prepare method statement, drawings, work progress and other relevant documents for M&E related works with project teams.
• Attend regular site meeting with consultants.
• Supervise all M&E related works on site.

Requirements:

• Diploma / Degree in Mechanical / Electrical Engineering.
• 2-3 years’ experience in Mechanical / Electrical.
• Fresh graduate may apply.
• Experience in engineering softwares and AutoCAD.

We are seeking a highly skilled Senior Infrastructure& Middleware Engineer to support business and technical teams in project tender submissions and to lead the design, deployment, and support of complex IT infrastructure environments. The role requires strong hands-on experience across enterprise hardware platforms, virtualization, middleware, databases, container platforms, and production support.

Key Responsibilities

Infrastructure & Platform Engineering

• Experienced for enterprise hardware and software infrastructure.
• Manage IBM Power Systems, including: LPAR creation and management AIX installation, configuration, and administration
• Install, configure, and manage VMware ESX/ESXi environments, including Virtual machine creation Linux and Windows OS installation and hardening

Middleware & Database Administration

• Install, configure, and manage middleware and database platforms, including but not limited to:Web Sphere Application Server JBoss EAPIBM MQ and JBoss AMQIBM DB2Microsoft SQL Server IBM HTTP Server IBM Directory Server and Open DJSAP Crystal Server
• Perform application deployment activities such as: Database creation and initialization Message queue and topic configuration Java Application Server setup (JDBC providers, data sources) JMS resource creation and tuning

Container & Cloud-Native Platforms

• Install, configure, and manage OpenShift Container Platform.
• Deploy and administer Kubernetes clusters, including application onboarding and lifecycle management.
• Support containerized application deployments and platform operations.

Production Support

• Provide production support for existing client environments related to system infrastructure and middleware.
• Troubleshoot and resolve system, middleware, and application deployment issues.
• Perform system maintenance activities, patching, upgrades, and performance tuning.
• Participate in incident, problem, and change management processes.

Technical Skills

• Strong hands-on experience with IBM Power Systems and AIX
• Solid expertise in VMware ESX/ESXi virtualization
• In-depth knowledge of enterprise middleware and databases
• Experience with OpenShift and Kubernetes platforms
• Strong understanding of system architecture, high availability, and performance tuning
• Experience supporting production enterprise environments

As an IT Infrastructure Operations & Support Engineer, you are responsible for ensuring the reliability, security, and efficiency of our clients' IT infrastructures. Your expertise will contribute to maintaining and enhancing complex network environments, fostering secure and resilient systems essential for business operations.

Key Responsibilities

• Perform preventive and corrective maintenance on IT infrastructure, including servers, networks, operating systems (Windows and RHEL), and related platforms to ensure high availability, stability, and reliability of services.
• Execute incident resolution and problem remediation in alignment with Incident Management and Problem Management processes, acting as an escalation point for infrastructure-related incidents to ensure timely service restoration within agreed Service Level Agreements (SLAs).
• Advise customers on performance and capacity improvement recommendations; and implement optimization initiatives
• Implement and maintain security controls for customers, including patch management, vulnerability remediation, access controls, and system hardening, in compliance with customer security policies and best practices.
• Ensure the timely application of security patches and updates in accordance with established Change and Release Management processes to maintain system integrity and security posture.
• Maintain accurate and up‑to‑date IT documentation, including system configurations and architecture, Standard Operating Procedures (SOPs), maintenance and recovery procedures, and incident and problem records; produce operational and security reports, including incident post‑mortems and root‑cause analyses (RCA), for management and customers; and improve service consistency while enhancing response and resolution times in alignment with customers’ SLAs.

• Collaborate closely with customers, internal teams, and external service providers to ensure seamless IT operations; coordinate audit, incident, and change activities; and communicate technical risks, service impacts, and recommendations clearly and effectively to non‑technical customer stakeholders. Demonstrate the ability to work independently, manage priorities effectively, and take ownership of assigned tasks and initiatives.

Skills and Qualifications

• Minimum 5-7 years of experience in IT infrastructure management and/or information security within enterprise or customer‑facing environments.
• Strong understanding of IT infrastructure, including hardware, software, operating systems, networking, and security principles.
• Proven experience in IT operations management, including system administration, patch management, and system health and performance monitoring. Excellent problem‑solving, communication, and stakeholder management skills, with the ability to articulate technical concepts clearly to both technical and non‑technical audiences.
• Proficiency in Microsoft technologies, including Active Directory, Certificate Authority (PKI), Group Policy, and other related Microsoft infrastructure services.
• Willing to be on 24x7 standby
• Possess valid class 3 license is a plus point.

Work location: Jurong East

Possess a degree in Bachelor of Engineering in Mechanical / Electrical with at least 4 years of relevant experience in M&E works

Provide technical and engineering support to the Project Team.

Good knowledge of applicable codes/regulations and Authorities requirements relating to M&E services.

Good knowledge to prepare site environmental control plan and report.

Good knowledge in vector control, waste management, pollution control and prevention method.

Carry out M&E technical and site meeting and resolve technical issues with clients.

Able to design and implemented water treatment processes to enhance system efficiency.

To conducted routine water quality assessments to ensure compliance with regulatory standards.

Able to complete troubleshooting and diagnostics on company resources.

Able to troubleshoot and resolve issues with existing water treatment systems and maintaining efficient operations.

To improve water treatment efficiency by designing and implementing advance treatment processes

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group
The Technology Group (TG) is a key enabler to keep our business moving forward and is constantly exploiting state-of-the-art information technologies to enhance GIC’s ability to be the leading global long-term investment firm. We aim to provide users with empowering and transformational capabilities, and to create an inclusive, innovative and integrated work environment.

What impact can you make in this role?

We are seeking a highly experienced Senior Active Directory (AD) Security Engineer to focus on securing, hardening, and automating enterprise Active Directory environments, ensuring robust Tier 0 protection, privileged access controls, trust hardening, OU/GPO security, and cyber resilience. The engineer will work closely with Red Teams, Penetration Testing, and Threat Detection functions to identify attack paths, simulate AD-based threats, automate recovery capabilities, and continuously strengthen the enterprise AD security posture. 

What will you do as an VP, Active Directory & Entra ID Engineer?

• Design, secure, and manage hybrid identity environments across on-prem Active Directory and Entra ID (Azure AD) to ensure resilience, integrity, and threat resistance.
• Define and implement a clean, compliant target state for identity and access management (IAM), aligning AD and Entra ID security with enterprise IAM processes and governance.
• Conduct threat modelling and exposure assessments for both AD and Entra ID to identify and mitigate identity attack paths.
• Implement and maintain Tier 0 (Privileged Access) controls aligned with Microsoft’s Enterprise Access Model (EAM) and Zero Trust principles.
• Harden AD forests, domains, and trust relationships, as well as Entra ID tenants, to prevent privilege escalation, domain compromise, and lateral movement.
• Design and manage Privileged Access Workstations (PAWs) and enforce administrative boundaries for Tier 0 and Tier 1 assets.
• Develop and maintain PowerShell and Graph API automation frameworks to:

• Audit and report AD and Entra ID configurations, permissions, and delegations.

  Enforce baseline hardening and compliance controls.

  Automate remediation, monitoring, and hygiene tasks.

• Support AD Forest recovery and Entra ID incident response automation to improve recovery time objectives (RTO).
• Design and implement AD Forest Recovery and Entra ID tenant recovery plans, perform automated recovery drills, and build operational readiness for cyberattack or ransomware scenarios.
• Manage and secure Organizational Unit (OU) delegation models and Entra ID administrative units following least-privilege principles.
• Manage and harden Group Policy Objects (GPOs) and Conditional Access Policies to enforce security baselines and prevent policy abuse.
• Collaborate with IAM teams to integrate AD and Entra ID workflows (e.g., provisioning, deprovisioning, access reviews) into enterprise identity lifecycle processes.
• Collaborate with Red Team, Penetration Testing, and SOC teams to identify vulnerabilities, validate attack paths, and remediate exposures.
• Simulate and analyse identity-based attack scenarios (e.g., DCSync, DCShadow, Golden/Silver Ticket, Pass-the-Hash, Kerberoasting, token replay, and consent phishing).
• Integrate Threat Detection and Response capabilities within SOC operations and SIEM tools (e.g., Microsoft Sentinel, Splunk, QRadar).
• Support Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, or Thycotic to enforce Just-in-Time (JIT) and Just-Enough Access (JEA).
• Maintain detailed documentation, baselines, recovery guides, and post-assessment reports to enhance hybrid identity security and resilience posture.

What qualifications or skills should you possess in this role?

• Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
• Minimum of 5 years in AD security engineering 
• Deep expertise in Active Directory internals (replication, Kerberos, LDAP, DNS, GPO) and Entra ID architecture (Conditional Access, Identity Protection, PIM, App Registrations, and Connect).
• Proven experience in AD and Entra ID hardening, Tier 0 protection, trust management, and privileged access isolation.
• Hands-on experience in hybrid identity design, including synchronization, federation, and secure integration with SaaS applications.
• Experience integrating AD and Entra ID with enterprise IAM processes, including provisioning, deprovisioning, and access governance workflows.
• Strong experience in OU and Entra ID administrative unit design, delegation, and access control aligned with least-privilege principles.
• Advanced knowledge in GPO and Conditional Access policy management, including security baselining, auditing, and change control.
• Expert-level PowerShell scripting and Graph API automation for auditing, reporting, and enforcing identity configurations.
• Experience collaborating with Red Teams and Penetration Testing Teams to simulate attacks and strengthen defences.
• Proficiency with AD and Entra ID security tools such as BloodHound / PingCastle / PurpleKnight / ADRecon / PowerView / Microsoft Defender for Identity.
• Knowledge of Privileged Access Management (PAM) solutions and SIEM integration for identity threat detection.
• Strong understanding of Zero Trust and EAM principles as applied to hybrid identity environments.
  

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection.  At the same time, we believe that flexibility allows us to do our best work and be our best selves.  Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer 
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn more about our Technology Group here:
https://gic.careers/group/technology-group/