
IT Infrastructure Engineer
- Central Region, Singapore
- Permanent
- Full-time
- Manage and maintain Microsoft 365 services, including Intune, Microsoft Defender for Endpoint (MDE), Purview, and Conditional Access Policies.
- Configure and support mobile device management (MDM) and mobile application management (MAM) through Microsoft Intune.
- Implement and maintain information protection and compliance policies via Microsoft Purview.
- Monitor and respond to alerts and reports within the M365 ecosystem.
- Manage Windows 10/11 device deployment, imaging, updates, and policies via Intune and Group Policy.
- Apply CIS benchmarks to harden Windows environments and conduct regular compliance reviews.
- Perform regular patch management, vulnerability scanning, remediation, and reporting using tools such as WSUS, Defender for Endpoint, Intune or other industry tools.
- Maintain and enforce Active Directory (AD) policies, including password policies, group management, and access controls.
- Administer Defender for Endpoint for threat detection and response.
- Support identity and access management best practices and participate in internal security audits.
- Support server hardening and remediation of findings from vulnerability scans.
- Write and maintain PowerShell or Python scripts for automating tasks such as account creation, security audits, patching, and reporting.
- Assist in creating and maintaining documentation for automation processes.
- Lead and participate in infrastructure-related projects, including upgrades, migrations, and deployments.
- Collaborate with vendors for procurement, support, SLAs, and service management.
- Prepare project documentation, timelines, risk assessments, and regular progress updates.
- Assist with network troubleshooting including DNS, DHCP, IP conflicts, and connectivity issues.
- Support basic network maintenance, such as switch configuration checks, cable management, and interface monitoring.
- Coordinate with the networking team on infrastructure changes or issues.
- Bachelor’s degree in information technology, Computer Science, or a related discipline.
- Minimum 5 years of experience in IT infrastructure roles, with at least 3 years in M365 administration.
- Proficiency in Microsoft Intune, Microsoft Defender for Endpoint, and Purview.
- Good understanding of Group Policy, Active Directory, CIS Benchmarks, and endpoint security best practices.
- Experience in project coordination, working with internal teams and external vendors.
- Basic to intermediate knowledge in PowerShell or Python scripting.
- Familiarity with infrastructure security principles, access controls, patching, vulnerability management, and server hardening.
- Basic understanding of network concepts, IP addressing, subnetting, and LAN/WAN troubleshooting.
- Experience with systems would be advantageous: SD-WAN (Aryaka), Zscaler (ZIA, ZPA) / Meraki (Switch / Firewall/ AP), Fortinet (FW), AD/AAD, Sophos Endpoint, Trellix Endpoint, Symantec Endpoint.
- Strong analytical and problem-solving skills
- Excellent communication and documentation abilities
- Ability to work independently and manage multiple priorities
- Familiar with global environments and able to collaborate with stakeholders across different regions.
- Attention to detail and proactive approach to system monitoring and security