Workplace IT Specialist

PropertyGuru Group; Bengaluru; Hybrid; INR 1,800,000 - 2,700,000; Full time

Benefits offered by this job

Hybrid work

Rewards package

Career development

Inclusive benefits

Job summary

PropertyGuru is seeking a Workplace IT Specialist to transform how technology is delivered to employees across PropertyGuru’s regional offices — moving from traditional, ticket-driven IT support to a modern, automated, engineering-led workplace.

This role focuses on building automation for one-touch onboarding, zero-touch device provisioning, and self-service access while applying deep Microsoft 365, Entra ID, Intune, and endpoint management expertise across Windows and macOS fleets.

Qualifications

• 2–5 years in IT engineering, end-user computing, modern workplace, or IT infrastructure roles.
• Engineering mindset: automate problems away, build and ship automation.
• Strong PowerShell and Microsoft Graph API skills for production automation.
• Hands-on administration of Entra ID and Azure, including identity lifecycle and CA policies.

Responsibilities

• Build one-touch onboarding/offboarding workflows end-to-end (HR trigger → identity → licensing → groups → device → apps → access revocation).
• Engineer zero-touch device provisioning with Autopilot and Intune; macOS equivalents.
• Automate routine IT operations using PowerShell, Graph API, Power Automate, REST APIs.
• Apply software engineering practices to IT: version control in Git, code review, testing, and idempotent scripts.
• Build self-service capabilities and shift-left to reduce tickets.
• Identify and eliminate toil with automated processes.

Skills

PowerShell

Microsoft Graph API

Intune

Entra ID

Azure

Git

M365 administration

Zero Trust

Automation

Networking

Tools

GitHub Actions

REST APIs

Job description

PropertyGuru is Southeast Asia’s leadingPropTech company, and the preferred destination for over 32 million property seekers monthlyto connect with over 50,000 agentsmonthly to find their dream home. PropertyGuru empowers property seekers with more than 2.1 million real estate listings, in-depth insights, and solutions that enable them to make confident property decisions across Singapore, Malaysia, Thailand and Vietnam.

PropertyGuru.com.sg was launched in Singapore in 2007 and since then, PropertyGuru Group has made the property journey a transparent one for property seekers in Southeast Asia. In the last 18 years, PropertyGuru has grown into a high-growth PropTech company with a robust portfolio including leading property marketplaces and award-winning mobile apps across its markets in Singapore, Malaysia, Vietnam, Thailand as well as the region’s biggest and most respected industry recognition platform – PropertyGuru Asia PropertyAwards, events and publications across Asia.

For more information, please visit: PropertyGuruGroup.com;PropertyGuruGrouponLinkedIn.

Recognised as a Top Employers Certified* organisation, we’re proud to be among the best workplaces in the region—celebrating an inclusive culture of excellence, growth, and well-being.

About the Role

We are looking for a Workplace ITSpecialist to help transform how technology is delivered to employees acrossPropertyGuru’sregional offices — moving us from traditional, ticket-driven IT support to a modern, automated, engineering-led workplace.

This is a builder’s role. You will design and ship automation thateliminatesmanual work — one-touch onboarding and offboarding, zero-touch device provisioning, self-service access — while providing deep (Level 2/3) technicalexpertiseacross Microsoft 365, Entra ID, Intune, and our endpoint fleet. You will treat IT operations as an engineering discipline: solutions are scripted, version-controlled in Git, peer-reviewed, and documented — not clicked together in portals.

The ideal candidate has already led or contributed to a transformation from traditional ITSM to modern workplaceengineering, andcan show working automation they have built to prove it.

What You Will Do

Automation & Workplace Engineering (primary focus)

• Build one-touch employee lifecycle automation: end-to-end onboarding and offboarding workflows (HR trigger → identity → licensing → groups → device → apps → access revocation) so new joiners are productive on day one and leavers are cleanly deprovisioned.
• Engineer zero-touch device provisioning with Windows Autopilot and Intune (and macOS equivalents), replacing manual imaging and setup.
• Automate routine IT operations using PowerShell, Microsoft Graph API, Power Automate, and REST APIs — license management, security group management, compliance reporting, fleet health monitoring, and access reviews.
• Apply software engineering practices to IT: version control in Git, code review, testing, and repeatable/idempotent scripts; move configuration toward configuration-as-code where practical.
• Build self-service and shift-left capabilities (app catalogs, automated access requests, chat-based helpers) that deflect tickets and reduce dependence on manual support.
• Identify and eliminate toil: continuously find manual, repetitive processes and engineer them away, measuring the hours saved.

Microsoft 365 & Identity Engineering

• Administer and improve Microsoft 365 services: Exchange Online, Teams, SharePoint Online, OneDrive, Intune, and Entra ID.
• Own identity lifecycle automation in Entra ID: dynamic groups, entitlement management, access packages, SCIM provisioning, SSO/enterprise application integrations.
• Design and maintain Conditional Access, MFA, and identity security policies aligned with Zero Trust and least-privilege principles.
• Administer Azure resources supporting workplace services (e.g., Automation Accounts, Logic Apps, Azure Functions used for IT automation).

Endpoint & Device Management

• Manage the Windows and macOS fleet with Microsoft Intune / MDM: security baselines, compliance policies, applicationpackagingand deployment.
• Run patch management and vulnerability remediation programmatically (Windows Update for Business / Autopatch, Defender recommendations).
• Drive Windows 11 upgrades, hardware refresh, and device lifecycle management with automated, data-driven processes.
• Build endpointmonitoringand fleet health dashboards to shift IT from reactive tickets to proactive remediation.

Advanced Support & Operations

• Provide Level 2/3 escalation support for complex issues across Windows, macOS, Microsoft 365, networking, meeting room technology, and enterprise applications — with a bias toward permanent, engineered fixes over repeat workarounds.
• Support regional offices onsite and remotely; participate in on-call and major incident response when required.
• Meet SLAs while driving down ticket volume through root-cause elimination and automation.
• Support collaboration and AV platforms: Microsoft Teams Rooms, Zoom Rooms, Logitech Rally; assist with networking fundamentals (VPN, Wi-Fi, switching, DNS/DHCP, firewall).

Security & Compliance

• Maintain endpoint and identity compliance aligned with ISO 27001; support audits and security reviews with automated evidence collection and reporting.
• Implement least-privilege access (RBAC, PIM) and endpoint security controls; act on Microsoft Defender and Secure Score recommendations.

Documentation, Projects & Mentoring

• Document as an engineer: runbooks, architecture diagrams, SOPs, and knowledge base articles kept alongside code in Git.
• Deliver regional IT projects: office builds and relocations, M365 migrations, endpoint modernization, meeting room deployments, and automation initiatives.
• Mentor junior engineers in scripting, automation, and modern workplace practices; raise the engineering bar across the team.

What You Bring

Required

• 2–5years in IT engineering, end-user computing, modern workplace, or IT infrastructure roles, with strong hands-on depth.
• An engineering mindset: you default to automating problems away rather than resolving them manually, and can show automation you have personally built and shipped.
• Strong PowerShell and Microsoft Graph API skills — able to build production-quality automation, not just run one-off scripts.
• Hands-on administration of Microsoft Entra ID and Azure: identity lifecycle, Conditional Access, enterprise apps/SSO, RBAC, and Azure services used for automation.
• Deep Microsoft 365 administration experience (Exchange Online, Teams, SharePoint, OneDrive, Intune) in an enterprise environment.
• Modern endpoint management expertise: Intune, Autopilot, compliance policies, application packaging across Windows 10/11 and macOS.
• Experience with Active Directory and Group Policy, including hybrid identity environments.
• Solid networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi-Fi, switching).
• Excellent communication and customer empathy; able to explain technical decisions to non-technical stakeholders.

Strongly Preferred

• A track record of transforming traditional ITSM into modern workplace engineering — e.g., you have implemented one-touch onboarding/offboarding, zero-touch provisioning, or replaced manual runbooks with automated workflows.
• Git and modern development workflow experience: version-controlled scripts and configurations, pull requests / code review, and ideally CI/CD pipelines (GitHub Actions, Azure DevOps) for IT automation.
• Configuration-as-code / infrastructure-as-code exposure (e.g., Terraform or Microsoft365DSC for Intune and Entra ID configuration).
• Power Platform experience (Power Automate, Power Apps) with an understanding of governance and when low-code vs. pro-code is appropriate.
• Python or another general-purpose scripting language; comfort working with REST APIs, JSON, and webhooks.
• Experience using AI tools (e.g., Copilot, Claude) to accelerate scripting, documentation, and support workflows — and helping roll such tooling out to employees.
• Experience with virtualization platforms and cloud services beyond M365.

Certifications (advantageous, not required)

• Microsoft Certified: Endpoint Administrator Associate (MD-102), Microsoft 365 Administrator Expert (MS-102), or Microsoft Applied Skills (Intune, Entra ID, Automation).
• ITIL Foundation, CompTIA Network+/Security+, Cisco CCNA, or Microsoft Power Platform Fundamentals.

What Success Looks Like

• Within 12 months, employee onboarding and offboarding run as one-touch automated workflows with measurable reductions in provisioning time and manual errors.
• Device provisioning is zero-touch; a new laptop reaches a productive, compliant state without engineer hands-on time.
• Recurring incident categories are engineered away, reducing ticket volume while SLA performance and employee satisfaction improve.
• IT automation lives in version-controlled repositories with documentation, and junior engineers are contributing to it.
• Endpoint compliance, patch currency, and Secure Score measurably improve, with automated reporting supporting ISO 27001 audits.
• You are the trusted technical advisor for modern workplace decisions and a multiplier for the wider team.

Personal Attributes

• Builder’s mentality with strong ownership — you see a manual process and itch to automate it.
• Strong analytical and troubleshooting skills; rigorous about root cause.
• Continuous learner with genuine curiosity for new technology, including AI-assisted ways of working.
• Self-motivated, well organized, and able to prioritize in a fast-paced regional environment.
• Collaborative team player who lifts others through mentoring and knowledge sharing.

Our commitment to you:

• Hybrid flexible working that focuses on outcomes over hours.
• Holistic rewards package covering your financial, physical & mental health.
• Multi-directional career development across all levels.
• Inclusive benefits like equal paternity leave, supporting all employees in work-life balance.

At PropertyGuru, you’ll be part of a Top Employers Certified* company that puts people at the heart of everything we do.