Staff Security Operations Engineer (Active Directory & Entra ID)

Location: Batu Kawan, Penang, Malaysia; Penang SDSM Office. Primary work is performed in a general and/or home office environment, with cross-time-zone support for Asia coverage needs.

Company

hirify.global develops flash memory and advanced data storage technologies supported by large-scale manufacturing capabilities and global operations.

What you will do

• Own the administration, engineering, monitoring, and operational reliability of Active Directory and Microsoft Entra ID.
• Manage accounts, groups, Group Policy, organizational units, RBAC, Privileged Identity Management, Conditional Access, application registrations, and identity governance.
• Design and maintain hybrid identity integration using Azure AD Connect, single sign-on, password hash synchronization, and pass-through authentication.
• Support MFA integrations including Duo MFA and Windows Hello for Business, including passwordless and passkey authentication initiatives.
• Automate joiner, mover, leaver, provisioning, access management, and reporting workflows using PowerShell and Microsoft Graph.
• Lead technical escalation, troubleshooting, root-cause analysis, documentation, training, and compliance reporting for identity-related incidents and systems.

Requirements

• Hands-on experience administering Active Directory, Group Policy, organizational units, Microsoft Entra ID, RBAC, PIM, and Conditional Access.
• Experience with hybrid identity environments and Azure AD Connect synchronization between on-premises Active Directory and Entra ID.
• Ability to troubleshoot replication, DNS, authentication, provisioning, and access issues.
• Experience integrating and supporting Duo MFA and Windows Hello for Business.
• PowerShell scripting skills for identity automation, reporting, and troubleshooting; familiarity with Microsoft Graph and SIEM tools.
• English proficiency in speaking and writing; willingness to be on call 24×7 and support Asia coverage across time zones.

Nice to have

• 6+ years of experience in IT or information security, including 3+ years administering Active Directory and Microsoft Entra ID.
• Familiarity with Python for IAM automation and integration.
• BA or BS in information technology, computer science, information security, or a related field, or equivalent hands-on IAM experience.
• Microsoft identity, Windows Server Hybrid Administrator, or CISSP certification.

Culture & Benefits

• Full-time exempt employment.
• Opportunity to work with global security, IT, and compliance teams.
• Responsibilities include cross-functional collaboration, technical leadership, training, and knowledge sharing.
• Work includes general office and/or home office environments.