DevOps Engineer Endpoint & Automation Engineering - ensigninfosecurity

OpenTalent; Singapore; On-site; SGD 80,000 - 140,000; Full time

Job summary

Ensign is seeking a DevOps Engineer with strong Windows platform engineering capabilities to design, build, and automate solutions across our enterprise endpoint environment.

You will drive automation through scripting, IaC, and manage device deployment at scale using Microsoft Intune, collaborating with security and infrastructure teams to maintain secure and compliant operations.

Qualifications

• Proficient in Windows PowerShell scripting with production-grade scripts.
• Hands-on IaC experience to provision and manage infrastructure declaratively.
• Strong .NET Framework knowledge for WinForms/WPF desktop apps.
• Experience with Microsoft Intune deployment and policies.

Responsibilities

• Design, develop, and maintain Windows thick client applications with .NET.
• Develop and automate system admin tasks via PowerShell scripts and modules.
• Build and manage IaC configurations for repeatable deployments.
• Administer and engineer solutions on Microsoft Intune and Autopilot.
• Integrate Intune with Entra ID/Azure AD and Graph API for lifecycle mgmt.
• Troubleshoot across app, scripting, and endpoint management layers.
• Maintain CI/CD pipelines, source control hygiene, and docs.
• Collaborate with security and infra teams to meet standards.

Skills

PowerShell scripting

Infrastructure as Code

Terraform

Azure Bicep/ARM

Ansible

PowerShell DSC

WinForms/WPF

Tools

Terraform

Azure Bicep/ARM

Ansible

PowerShell DSC

WinForms/WPF

Intune

Job description

Ensign is hiring !

About the Role

We are seeking DevOps Engineer with strong Windows platform engineering capabilities to design, build, and automate solutions across our enterprise endpoint environment. This role sits at the intersection of software development and infrastructure automation — you will build Windows thick client applications, drive automation through scripting and Infrastructure as Code, and manage modern device deployment at scale through Microsoft Intune.

This is a hands‑on engineering role suited to someone who enjoys building tools that make enterprise IT environments more secure, consistent, and efficient.

Key Responsibilities

• Design, develop, and maintain Windows thick client applications using the .NET Framework, including UI development, packaging, and deployment.
• Develop, test, and maintain Windows PowerShell scripts and modules to automate system administration, configuration management, and operational workflows.
• Build and manage infrastructure using Infrastructure as Code (IaC) practices — authoring, versioning, and deploying declarative configurations for repeatable, auditable environment provisioning.
• Administer and engineer solutions on Microsoft Intune, including application packaging and deployment, compliance and configuration policies, device enrolment (Windows Autopilot), and endpoint security baselines.
• Integrate Intune with broader Microsoft ecosystem components (Entra ID / Azure AD, Endpoint Analytics, Microsoft Graph API) to automate device lifecycle management and reporting.
• Troubleshoot and resolve issues across the application, scripting, and endpoint management layers, performing root cause analysis and implementing permanent fixes.
• Maintain source control hygiene, CI/CD pipelines, and technical documentation for all scripts, applications, and infrastructure definitions.
• Collaborate with security, infrastructure, and application teams to ensure solutions meet security, compliance, and operational standards.

Requirements

• Proficient in Windows PowerShell scripting — able to write production‑grade scripts and modules for automation, system administration, and integration tasks (error handling, logging, remoting, module design).
• Proficient in Infrastructure as Code — hands‑on experience with tools such as Terraform, Azure Bicep/ARM templates, Ansible, or PowerShell DSC to provision and manage infrastructure declaratively.
• Proficient in the .NET Framework for Windows thick client development — experience building desktop applications using WinForms and/or WPF in C#, including deployment and maintenance of enterprise desktop applications.
• Hands‑on experience with Microsoft Intune — application deployment (Win32 app packaging), device configuration profiles, compliance policies, and Windows Autopilot provisioning.

Good to Have