Singapore Management University Hiring! Full Time Technology Solutions Engineer, Endpoint Technologies Management, IITS in - Ricebowl

Responsibilities

• This position is for Office of Integrated Information Technology Services (IITS).
• Build, implement, and maintain software installation, configuration, and lifecycle management for Windows, Mac, and mobile devices — including rollouts, upgrades, patches, and service packs.
• Manage and deploy Windows and Mac endpoints using Microsoft Intune (Windows Autopilot) and JAMF, covering all end-user devices across the university.
• Coordinate with the IT Help Centre on desktop application updates and rollouts via Microsoft Intune/JAMF across different business departments.
• Deliver endpoint technical solutions aligned with specified plans, deliverables, costs, and timelines.
• Ensure high availability, performance, and overall user experience in line with business and academic expectations.
• Monitor and manage all endpoint vulnerabilities across client OS, applications, and hardware by applying critical security and application updates in a timely manner.
• Monitor and assess business needs against endpoint security concerns, collaborating with the security team to manage overall endpoint security posture.
• Respond to, investigate, and escalate alerted events and incidents from security technologies.
• Administer and tune Microsoft Defender for Endpoint, including Vulnerability Management, Incidents/Alerts, and integration with Microsoft Intune for device compliance enforcement.
• Support the university's Zero Trust security framework — enforcing least-privilege access, Conditional Access policies, and continuous device health compliance checks.
• Manage Endpoint Data Loss Prevention (DLP) and Endpoint Privilege Management solutions in line with university policies.
• Design and implement self-service capabilities that reduce help desk dependency and improve end-user experience.
• Administer Microsoft Purview (Information Protection, Records Management, Data Loss Prevention) to ensure data governance and compliance.
• Manage Microsoft Conditional Access policies and Microsoft Entra ID for identity-based endpoint access control.
• Support Microsoft Defender for Cloud Apps for SaaS application visibility and control across managed endpoints.
• Maintain proficiency across the Microsoft 365 security stack and contribute to continuous improvement of the university's security posture.
• Provide Level-2 support for escalated endpoint issues, investigating root causes and implementing lasting fixes.
• Provide dedicated IT support for the senior executive team, ensuring a premium and responsive experience.
• Identify trends in specific support areas and work proactively with stakeholders to address them.
• Collaborate with external vendors and suppliers to evaluate emerging technologies and develop cost-optimised solutions; maintain vendor relations and perform procurement comparisons.
• Maintain accurate records of licensing, inventory, and maintenance contracts.
• Create, review, and maintain technical documentation including design guides, operational runbooks, and internal knowledge base articles.
• Share knowledge through documentation and demonstrations of technologies, tools, and methodologies.
• Identify and implement process improvements to increase productivity and drive consistency in end-user support.
• Participate in evaluating, testing, and recommending OS patch management strategies and provide technical support across production and development environments.
• Other duties as assigned.
  
  

Qualifications

• Degree in Information Technology, Computer Science, Engineering, or a related discipline.
• 5 to 8 years of experience in endpoint management, desktop engineering, or IT operations in a fast-paced enterprise environment.
• In-depth knowledge of Microsoft Windows OS and macOS environments, including administration, troubleshooting, upgrading, patching, and configuration.
• Hardware knowledge of laptops, desktops, thin clients, printers, iMac, and MacBook in an enterprise environment.
• Expertise with SCCM, Microsoft Intune, and JAMF for orchestration, software delivery, and modern device management.
• Experience with Microsoft Purview, Microsoft Defender (for Endpoint, Cloud Apps, Vulnerability Management), and Microsoft Conditional Access.
• Strong knowledge of Active Directory, Microsoft Entra ID, DNS, networking, routing, VPN, firewall, and system security.
• Experience with endpoint security solutions including Endpoint Data Loss Prevention and Endpoint Privilege Management.
• Proficiency in scripting with PowerShell and Python for automation and workflow development.
• (New) Familiarity with Zero Trust architecture principles and their practical application in endpoint management.
• (New) Exposure to AI/Copilot-assisted IT operations tools and willingness to adopt emerging automation technologies.
• Experience automating workflows and delivering self-service capabilities to end-users.
• Experience designing technical solutions that address complex business and compliance requirements.
• Self-motivated with a strong customer-service orientation and a proactive, can-do attitude.
• Ability to work independently and collaborate effectively in a cross-functional environment.
• Strong prioritisation and multitasking skills while maintaining high quality of service.
• Excellent written and verbal communication skills for authoring technical documentation and engaging stakeholders.
• Keen interest in staying current with cybersecurity and endpoint technology trends.
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102).
• Microsoft Certified: Security, Compliance, and Identity Fundamentals / Associate.
• CompTIA Security+ or equivalent cybersecurity certification.
• ITIL Foundation.
  
  

Other Information

Candidates who do not possess the stipulated qualifications but have relevant work experience may still apply. Remuneration and appointment terms shall commensurate with qualifications and experience. SMU reserves the right to modify the appointment terms where necessary.