DevOps Engineer (Endpoint & Automation Engineering)

Ensign InfoSecurity; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Ensign InfoSecurity is seeking a Software Engineer to design, build, and automate Windows‑based enterprise endpoint solutions. The role blends software development with infrastructure automation, including Windows thick client apps, scripting, and device deployment at scale with Microsoft Intune.

You will create tools that strengthen security and efficiency across IT environments, collaborating with security, infra, and application teams to meet standards and maintain CI/CD pipelines, source

Qualifications

• Production‑grade PowerShell scripts and modules for automation.
• Declarative infrastructure provisioning with IaC tools (Terraform, Azure Bicep/ARM, Ansible).
• Experience building Windows desktop apps (WinForms/WPF) in C#.
• Hands‑on with Microsoft Intune and endpoint management capabilities.

Responsibilities

• Design, develop, and maintain Windows thick client applications using the .NET Framework, including UI development, packaging, and deployment.
• Develop, test, and maintain PowerShell scripts and modules to automate system administration and workflows.
• Build and manage IaC configurations to provision repeatable environments.
• Administer and engineer solutions on Microsoft Intune, including packaging, deployment, and device policies.
• Integrate Intune with Entra ID/Azure AD and reporting to automate device lifecycle management.
• Troubleshoot issues across application, scripting, and endpoint management layers; implement permanent fixes.
• Maintain source control hygiene, CI/CD pipelines, and comprehensive technical documentation.
• Collaborate with security, infrastructure, and application teams to meet security and operational standards.

Skills

Windows PowerShell scripting

Infrastructure as Code

NET Framework desktop apps

Windows Intune / device management

Automation tooling

Tools

Terraform

Azure Bicep/ARM

Ansible

PowerShell DSC

Azure DevOps

GitHub Actions

Job description

We are seeking a Software Engineer with strong Windows platform engineering capabilities to design, build, and automate solutions across our enterprise endpoint environment. This role sits at the intersection of software development and infrastructure automation — you will build Windows thick client applications, drive automation through scripting and Infrastructure as Code, and manage modern device deployment at scale through Microsoft Intune.

This is a hands-on engineering role suited to someone who enjoys building tools that make enterprise IT environments more secure, consistent, and efficient.

Key Responsibilities

• Design, develop, and maintain Windows thick client applications using the .NET Framework, including UI development, packaging, and deployment.
• Develop, test, and maintain Windows PowerShell scripts and modules to automate system administration, configuration management, and operational workflows.
• Build and manage infrastructure using Infrastructure as Code (IaC) practices — authoring, versioning, and deploying declarative configurations for repeatable, auditable environment provisioning.
• Administer and engineer solutions on Microsoft Intune, including application packaging and deployment, compliance and configuration policies, device enrolment (Windows Autopilot), and endpoint security baselines.
• Integrate Intune with broader Microsoft ecosystem components (Entra ID / Azure AD, Endpoint Analytics, Microsoft Graph API) to automate device lifecycle management and reporting.
• Troubleshoot and resolve issues across the application, scripting, and endpoint management layers, performing root cause analysis and implementing permanent fixes.
• Maintain source control hygiene, CI/CD pipelines, and technical documentation for all scripts, applications, and infrastructure definitions.
• Collaborate with security, infrastructure, and application teams to ensure solutions meet security, compliance, and operational standards.

Requirements

• Proficient in Windows PowerShell scripting — able to write production‑grade scripts and modules for automation, system administration, and integration tasks (error handling, logging, remoting, module design).
• Proficient in Infrastructure as Code — hands‑on experience with tools such as Terraform, Azure Bicep/ARM templates, Ansible, or PowerShell DSC to provision and manage infrastructure declaratively.
• Proficient in the .NET Framework for Windows thick client development — experience building desktop applications using WinForms and/or WPF in C#, including deployment and maintenance of enterprise desktop applications.
• Hands‑on experience with Microsoft Intune — application deployment (Win32 app packaging), device configuration profiles, compliance policies, and Windows Autopilot provisioning.

Good to Have

• Experience with Microsoft Graph API for Intune/Entra ID automation.
• Familiarity with Azure services (Azure Functions, Log Analytics, Automation Accounts).
• Experience with CI/CD tooling (Azure DevOps, GitHub Actions) and Git‑based workflows.
• Knowledge of endpoint security concepts — device hardening, CIS benchmarks, Defender for Endpoint.
• Relevant certifications such as MD‑102 (Endpoint Administrator), AZ‑104, or AZ‑400.