Active Directory, Identity and Access Management Engineer

ABOUT SONATA SOFTWARE

Sonata Software, with over $1.2 Billion Revenue, is a leading AI-first Modernization Engineering company, powered by our unique PlatformationTM framework. Our 6400+ AI Engineers are helping enterprises transform from systems to intelligent business platforms leveraging partner ecosystem to drive speed, efficiency and growth. Our bouquet of Modernization Engineering Services with AI -first approach cuts across Cloud, Data, AI, Dynamics, Test Automation, and Managed Services.

Sonata’s AI-led modernization is enabled by a powerful suite of proprietary tools and assets. At the core is the Harmoni.AI Enterprise Platform, which includes Agent Bridge-a governance and observability framework; Agent Builder-a development toolkit for fungible agents integrated into enterprise systems; and the Agent Marketplace-an internal ecosystem for modular, reusable agents.

Job Specification: Active Directory, Identity and Access Management Engineer

Technical Skills – Solution Area: AI Business Solutions
Location – Singapore (Remote)
Mode of hire – Permanent
Experience – 10+ years
Singapore Citizenship mandatory

Role type

As a Customer Engineer, you will collaborate directly with customer teams to provide expert

advisory services across a range of technologies. By leveraging structured intellectual property

(MIP) engagements, you will establish trusted advisor relationships and guide customers towards

achieving a healthy and secure state.

Relevant MIP/VBD Titles

On-Demand Assessment – Entra ID

WorkshopPLUS - Microsoft Azure: Hybrid Identity

WorkshopPLUS - Microsoft Entra: Identity Fundamentals

Activate Azure with Multi-Factor Authentication and Conditional Access

Onboarding Accelerator - Migrate Single Sign-On Applications to Entra

Onboarding Accelerator - Azure Active Directory: Features Deployment

Onboarding Accelerator - Entra Permissions Management

WorkshopPLUS - Microsoft 365 Security and Compliance Technical Update Briefing

Skills Required

This role requires deep knowledge (300 – 400 level) in the following technology areas:

o Entra ID

o Role Base Access Control (RBAC)

o Account Management

▪ User Accounts

▪ Service Principals

o Group Management

o Entra ID Enterprise Application Management

o Authentication Models

▪ Cloud Auth (PTA/PHS)

▪ Federation

▪ Protocols

• OAuth

• SAML

• ODIC

• Kerberos

▪ FIDO2 \ Passkeys

o Device Management

▪ Hybrid Join

▪ AADJ

o Account Synchronization

▪ Entra ID Connect

▪ Entra Cloud Sync

o Azure P1/P2 Features

▪ Conditional Access

• MFA

• Risk based policies

• Reporting

• Troubleshooting

▪ Self-service Password Reset (SSPR)

▪ Entra Password Protection

• Policy configuration

• Integration with Active Directory

▪ Entra ID Governance

• Privileged Identity Management

• Periodic Reviews

• Self-Service Access Reviews

• Compliance audits

▪ Entra ID Protection

o Management

▪ Microsoft Graph API foundational knowledge

Optional Skills

• ADFS

• Active Directory Certification Services

• Azure services

o Azure Monitor

o Azure Sentinel

• Defender for Endpoint

Relevant Certifications

Microsoft Certified: Identity and Access Administrator Associate or equivalent

Microsoft Certified: Cybersecurity Architect Expert or equivalent

Microsoft Certified Trainer or equivalent

Certified Information Systems Security Practitioner (CISSP) or equivalent

Why join Sonata Software?

At Sonata, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build never seen before solutions to some of the world’s toughest problems. You´ll be challenged, but you will not be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Sonata Software is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity, age, religion, disability, sexual orientation, veteran status, marital status, or any other characteristics protected by law.