Desktop Engineer (with Intune Patching)

GOLDTECH RESOURCES PTE LTD; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

GOLDTECH RESOURCES PTE LTD is seeking an Endpoint Engineer to manage Microsoft Intune/Endpoint Manager, enforce device compliance, and oversee patch management across the enterprise. The role emphasizes configuring policies, applying updates, and maintaining secure endpoints.

Ideal candidates bring 5+ years in desktop/endpoint management, strong troubleshooting, and collaboration skills to work with security and IT teams. Singapore on-site employment with growth opportunities.

Qualifications

• 5+ years in desktop engineering or endpoint management.
• Hands-on with Microsoft Intune/Endpoint Manager for patching and policy config.
• Experience with Windows 10/11, Group Policy, and Active Directory.
• Knowledge of Windows patch lifecycle management and security/compliance.
• Strong troubleshooting and analytical abilities.
• Excellent communication and collaboration skills.

Responsibilities

• Manage, configure, and maintain Microsoft Intune for enrollment, compliance, and patching.
• Develop and deploy Windows update rings, feature updates, and third‑party patching strategies.
• Oversee health and performance of desktop systems across the enterprise.
• Create and maintain endpoint security policies (BitLocker, antivirus, firewall) via Intune.
• Implement and manage configuration profiles, compliance policies, and app deployments.
• Troubleshoot and resolve complex desktop, software, and endpoint issues.
• Collaborate with IT security and infrastructure teams to align patching with risk mitigation.
• Maintain documentation for processes, standards, and configurations.
• Provide guidance and mentoring to junior staff as needed.

Skills

Troubleshooting

Analytical skills

Communication

Collaboration

Mentoring

Tools

Microsoft Intune

PowerShell

SCCM

Group Policy

Active Directory

Job description

We are seeking an Endpoint Engineer with strong expertise in Microsoft Intune / Endpoint Manager to manage and support enterprise-wide device compliance, security, and patch management. You will play a critical role in maintaining a secure, reliable, and efficient endpoint environment across our organization.

Responsibilities

• Manage, configure, and maintain Microsoft Intune for device enrollment, compliance, and patching.
• Develop and deploy Windows update rings, feature updates, and third-party patching strategies.
• Oversee the health and performance of desktop systems across the enterprise.
• Create and maintain endpoint security policies (BitLocker, antivirus, firewall, etc.) via Intune.
• Implement and manage configuration profiles, compliance policies, and application deployments.
• Troubleshoot and resolve complex desktop, software, and endpoint-related issues.
• Collaborate with IT security and infrastructure teams to ensure patching aligns with risk mitigation strategies.
• Maintain documentation for processes, standards, and configurations.
• Provide guidance and mentoring to junior support staff as needed.

Requirements

• 5+ years of experience in desktop engineering or endpoint management roles.
• Strong hands‑on experience with Microsoft Intune (Endpoint Manager), including patching, policy configuration, and app deployment.
• In‑depth knowledge of Windows 10/11, Group Policy, and Active Directory.
• Experience with Windows update and patch lifecycle management.
• Solid understanding of endpoint security and compliance practices.
• Excellent troubleshooting and analytical skills.
• Strong communication and collaboration abilities.

Preferred Qualifications

• Microsoft certifications (e.g., MD-102: Endpoint Administrator, Microsoft 365 Certified: Modern Desktop Administrator Associate).
• Experience with Autopilot, Co-management (Intune + SCCM), and conditional access policies.
• Familiarity with PowerShell scripting for automation and reporting.