IT System Engineer Microsoft & Identity📣 Job Ad

About the Role

AVALON Pharma is seeking an experienced IT System Engineer specializing in Microsoft and Identity solutions to join our team in Riyadh, Saudi Arabia. This full-time position requires 5-10 years of experience and focuses on the administration, management, and security of Microsoft identity and collaboration platforms.

Core Responsibilities

The primary focus of this role is the comprehensive management and administration of Active Directory, Microsoft Entra ID (formerly Azure AD), and Microsoft 365 services. Key responsibilities include ensuring robust identity and access management, enhancing security postures, and implementing automation across these critical systems.

Key Duties and Tasks

• Administer Active Directory Domain Services (AD DS), including domain controllers, sites, replication, Group Policy Objects (GPOs), DNS, and DHCP.
• Monitor AD health using tools such as dcdiag and repadmin, and enforce AD security best practices.
• Install, configure, and maintain Microsoft Entra Connect, managing synchronization rules, authentication methods, and hybrid identity scenarios.
• Administer Microsoft Entra ID, encompassing user and group management, Conditional Access, Multi-Factor Authentication (MFA), passwordless authentication, and Self-Service Password Reset (SSPR).
• Manage Privileged Identity Management (PIM) for just-in-time privileged access and configure Identity Governance features.
• Configure Enterprise Applications, App Registrations, and Single Sign-On (SSO) integrations.
• Administer the full Microsoft 365 tenant, including Exchange Online, Teams, SharePoint Online, OneDrive for Business, and Viva suite.
• Manage mail flow, connectors, anti-spam, anti-phishing, and email security configurations in Exchange Online.
• Administer Microsoft Intune for Mobile Device Management (MDM) and Mobile Application Management (MAM) across various operating systems.
• Configure Microsoft Purview for Data Loss Prevention (DLP), sensitivity labels, and eDiscovery.
• Develop and maintain PowerShell scripts for Microsoft 365 and AD automation using the Microsoft Graph API.

Qualifications and Experience

Candidates should possess a Bachelor’s degree in computer science, IT, or a related field, or equivalent practical experience. A minimum of 4 years of hands-on experience in Active Directory and Microsoft 365 administration within an enterprise environment is required. Deep expertise in AD DS design and administration, proven experience with Azure AD Connect/Entra Connect, and strong knowledge of Entra ID features like Conditional Access, MFA, and PIM are essential. Proficiency in PowerShell for automation and a solid understanding of email security protocols (SPF, DKIM, DMARC) are also necessary.

Technical Skills

This role demands a strong command of:

• Active Directory Domain Services (AD DS)
• Microsoft Entra ID (Azure AD) and its security features (Conditional Access, MFA, PIM, Identity Protection)
• Microsoft Entra Connect / Azure AD Connect
• Microsoft 365 suite (Exchange Online, Teams, SharePoint Online, OneDrive)
• Microsoft Intune
• PowerShell scripting
• Email security protocols (SPF, DKIM, DMARC)

Work Location and Type

This is a full-time position based in Riyadh, Saudi Arabia. The role is integral to maintaining and enhancing AVALON Pharma's IT infrastructure and security posture.