Description
Job Title: Senior / IT Infra Engineer (Identity and Security)
Role Overview
We are seeking highly skilled and innovative engineer to join our transformative SSOE Programme that manages more than 350 schools across Singapore. This is an exceptional opportunity to shape the future of educational technology infrastructure and enhance the learning experience of more than 450,000 students and 35,000 education professionals.
As a Senior / IT Infra Engineer focusing on Identity and Security, you will be the primary engineer for our Zero Trust ecosystem. You will lead the end-to-end design and implementation of both a secure endpoint environment; centre heavily on Data Loss Prevention (DLP), Endpoint Protection Platforms (EPP), and Endpoint Detection and Response (EDR); and identity-driven access governance utilizing on-premises Active Directory (AD) and cloud-native Entra. Your mission is to ensure that every user, device, and application within the Microsoft 365 cloud ecosystem is verified, seamlessly managed throughout the identity lifecycle, and continuously monitored against evolving threats.
Key Responsibilities
- Identity & Access Governance
- Design and architect Entra ID (Azure AD) solutions, focusing on Conditional Access policies, Privileged Identity Management (PIM), and Identity Protection to enforce least-privileged access.
- Manage complex Identity Lifecycle processes, ensuring seamless and secure integration between on-premises Active Directory and cloud-native identity providers.
- Implement and maintain Passwordless authentication and Multi-Factor Authentication (MFA) strategies to eliminate credential-based vulnerabilities.
- Security Engineering & Threat Protection
- Work with security team to engineer and operate the Microsoft Defender for Endpoint and Defender for Office 365 suites (EPP/EDR) to proactively hunt for threats and remediate vulnerabilities across the fleet.
- Deploy and manage Microsoft Purview for information protection, Data Loss Prevention (DLP), and eDiscovery, ensuring sensitive corporate data remains governed and compliant.
- Develop automated response playbooks using PowerShell and Microsoft Graph API to neutralize security incidents in real-time.
- Identity & Access Governance
- Design and architect Entra ID (Azure AD) solutions, focusing on Conditional Access policies, Privileged Identity Management (PIM), and Identity Protection to enforce least-privileged access.
- Implement and maintain Passwordless authentication and Multi-Factor Authentication (MFA) strategies to eliminate credential-based vulnerabilities.
- Lead the identity and access design for enterprise-wide rollouts, ensuring robust authentication mechanisms are baked into every deployment.
- Act as the primary technical liaison for Cybersecurity Audits, providing data-driven evidence of compliance regarding identity lifecycles and access control.
- Mentor the team on security best practices, conducting knowledge-sharing sessions on the latest Entra features and identity threat landscapes.
- Automation & Observability
- Automation: Engineer for scalability by building reusable automation and utilizing PowerShell scripting and related tools like PowerBI, Dynatrace and Axonius to monitor service health and reporting to derive insights.
- Scripting & API: Use PowerShell, Bash, and Python to automate repetitive tasks and interact with the Microsoft Graph API for custom reporting.
- Fleet Analytics: Utilize KQL and Endpoint Analytics to monitor device health, battery wear, and application performance across the entire estate.
- Self-Service: Develop and maintain "Self-Service" portals for both staff and students to empower users and reduce helpdesk ticket volume.
General Responsibilities
- Engage stakeholders to translate business requirement into design and services to meet the intended availability, capacity, resiliency, security and continuity requirements.
- Forecast budget needed to support the project initiatives and maintenance contracts.
- Ensure MOE’s related Technical Architecture are in compliance with IM8 and Agency’s IT Policies and Standards.
- Manage day-to-day delivery and support of application infrastructure services and collaborate with other government agencies and central services teams to facilitate and deliver government-wide services.
Leadership & Strategic Compliance
- Lead the security design for enterprise-wide software rollouts, ensuring "Security by Design" is baked into every deployment.
- Act as the primary technical liaison for Cybersecurity Audits, providing data-driven evidence of compliance with global security standards (e.g., ISO 27001, SOC2).
- Mentor the team on security best practices, conducting regular knowledge-sharing sessions on the latest M365 security features and threat landscapes.
What We Are Looking For
- Identity Expertise: Technical mastery of both on-premises Active Directory and cloud-native Entra ID, including B2B/B2C scenarios, App Registrations, and Enterprise Applications.
- Security Stack Mastery: Proven experience implementing the full Microsoft 365 Defender suite and Microsoft Purview, encompassing DLP, EDR, EPP, and identity security capabilities.
- Automation-First Mindset: Proficiency in PowerShell and MS Graph API for comprehensive security and identity auditing, as well as automated threat remediation.
- Analytical Rigor: Ability to synthesize complex security and identity logs into actionable risk recommendations for executive leadership.
- Preferred Certifications: SC-100 (Microsoft Cybersecurity Architect), SC-300 (Microsoft Identity and Access Administrator), MS-500 (Microsoft 365 Security Administration), and CISSP or an equivalent security-focused accreditation.
- Proactive and dedicated individual with good leadership and multi-tasking capabilities as well as the ability to work independently without the need for close supervision.
- Experienced in contract and vendor management.
- Good communication skills, both oral and written, with the ability to pitch ideas and communicate effectively with stakeholders.
- Team player with strong organization and people handling skills.
Any personal data you share with us during the application process will be processed strictly in compliance with applicable data protection laws and our Privacy Notice.
Similar jobs
Job Title: Senior / IT Infra Engineer (Collaboration) Role Overview We are seeking highly skilled and innovative engineer to join our transformative SSOE Programme that manages more than 350 schools across Singapore. Thi…
Job Description: Senior / IT Infra Engineer (Unified Endpoint Management) Role Overview We are seeking highly skilled and innovative engineer to join our transformative SSOE Programme that manages more than 350 schools a…
About the Role We are looking for a technically driven and customer-focused Service Engineer (Cloud & Infrastructure) to join our growing Singapore team. This role is ideal for individuals who enjoy solving complex i…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
Overview: Are you passionate about driving digital transformation and working with the latest IT technology? Join us at AvePoint, where you will play a crucial role in supporting public sector organizations to achieve th…
About AvePoint: Securing the Future. AvePoint is a global leader in data management and data governance, and over 21,000 customers worldwide rely on our solutions to modernize the digital workplace across Microsoft, Goog…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
We are looking for a Software Engineer (Mid-Level / Senior) to support a large-scale Atlassian Cloud migration project. This role will focus on engineering solutions to support the transition from on-premise environments…
The Platform Operations Engineer is responsible for maintaining and supporting on-premises infrastructure platforms that underpin mission-critical systems. This role ensures platform reliability, operational stability, a…
Product Manager (Technical) Skillsets: Generala. Strong analytical, conceptualisation, and problem-solving skills, including ability to analyse user requirements and resolve complex technical issues with deep domain and…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
Securing the Future with AvePoint AvePoint is a global leader in data management and governance, trusted by over 21,000 customers worldwide to enhance their digital workplaces across Microsoft, Google, Salesforce, and ot…
Securing the Future with AvePointAvePoint is a global leader in data management and governance, trusted by over 21,000 customers worldwide to enhance their digital workplaces across Microsoft, Google, Salesforce, and oth…
DevSecOps Engineer (Contractor role, GovTech project) The Government Digital Product (GDP) Team aims to spearhead the digital transformation of government. GDP was established to develop new capabilities focusing on stra…
Technical Requirements 5+ years of software engineering experience with demonstrated progression in technical complexity and scope Strong foundation in software architecture, system design, and engineering best practices…
Est. 205,000 USD
Overview As a Solution Architect on our presales team, you will serve as the technical overlay for our most complex public sector opportunities. You will partner closely with Sales, Delivery, Product, and Engineering to…
Senior Splunk Engineer for Automation and Reliability Engineering Project Project Summary Support Automation and Reliability Engineering project and operations. Responsibilities: Observability Engineering and Governance…
Est. 45,000 EUR
About AvePoint: Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to coll…
Key Responsibilities: Manage and operate Government-to-Employee surveys for Whole-of-Government (WOG) on satisfaction of public officers with ICT tools. Collaborate with vendors and various departments to ensure smooth s…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
ROLE OVERVIEW We are looking for a seasoned Data Architect with deep expertise in enterprise data warehousing, ETL/ELT pipeline development, and business intelligence. You will be responsible for the end-to-end design an…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
Securing the Future with AvePoint AvePoint is a global leader in data management and governance, trusted by over 21,000 customers worldwide to enhance their digital workplaces across Microsoft, Google, Salesforce, and ot…
Est. 140,000 USD
Are you ready to make an impact? Overview West Monroe is excited to hire a Microsoft 365 Architect for our growing Enterprise Technology team! We’re looking for a technologist with keen business acumen to help solve some…
Est. 120,000 GBP
Enterprises are adopting AI faster than they can govern it — and they are looking for a partner who can do two things at once: speak credibly about AI trust, governance, and security, and actually build. The Forward Depl…
About the Role We are looking for a Senior Solution Architect to lead the design and implementation of cutting-edge enterprise solutions. In this role, you will be responsible for shaping the end-to-end architecture of c…
Est. 55,000 EUR
About the role: As a Pre-Sales Solutions Engineer, you will act as the technical lead throughout the sales cycle, partnering closely with Account Managers to support new business and growth opportunities. You will take a…
Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with con…
We are seeking a dedicated and detail-oriented Business Analyst to join our team, specializing in Change Management and Change Enablement to join our Transformation Programme Office within the IT Group. In this role, you…