Install, configure and harden Windows NPS instances and configure RADIUS clients, policies, authentication settings, logging and required certificates/secrets.
Serve as the primary Singapore-based IT support contact, handling, prioritising, resolving, and closing incidents and service requests within agreed service level agreements (SLAs) via email, chat, phone, or face-to-face support.
Deploy policies and perform compliance checks for endpoint security software (such as antivirus, internet behavior management, and Network Access Control/NAC) to prevent weak passwords and ransomware.Strictly enforce company data security and confidentiality policies, perform audits on non-compliant peripherals, intercept unauthorized network access, and regularly generate security audit compliance reports.
Work on IAM-related use cases such as user lifecycle automation, access provisioning, de-provisioning, role management, access reviews, and exception handling.
Build Kubernetes and AWS integrations and standard patterns for teams to follow. Drive adoption through self-service onboarding, reusable modules and adoption metrics.
Administer Microsoft Entra ID, including RBAC, Privileged Identity Management (PIM), Conditional Access, application registrations / enterprise applications, and identity governance.
Build resilient, event-driven integration flows on Kubernetes and AWS, managed as code through Terraform, Ansible and GitHub CI/CD. Operate the layer as a business-critical (Tier-0) service with high availability, disaster recovery and full monitoring.
