Endpoint Engineering Lead (GIS)

GMP Technologies; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

GMP Technologies (S) Pte Ltd is seeking an experienced Endpoint Security Engineer to drive engineering execution across endpoint platforms and automation initiatives in Singapore. You will contribute to vulnerability remediation and ensure alignment with architecture and operational requirements.

The role requires hands-on experience with Intune, MECM and AVD, along with PowerShell and Python scripting, ITSM awareness, and strong collaboration with Security and Engineering teams.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering or related discipline.
• 6+ years of hands-on experience in endpoint engineering, infrastructure engineering or related domains.
• Hands-on experience with endpoint engineering and management platforms such as Intune, MECM, AVD or equivalent technologies.
• Strong experience in vulnerability management, patch management strategies, and endpoint security controls.
• Experience with scripting/automation using PowerShell, Python or equivalent technologies.
• Knowledge of ITSM processes (Incident, Change, Problem) related to endpoint services.
• Experience supporting service transition and operational readiness activities.
• Strong analytical skills to analyze operational data, identify trends and drive improvements.

Responsibilities

• Drive engineering execution across endpoint and client services platforms aligned with architecture standards.
• Develop and scale automation solutions to reduce manual effort in endpoint management and remediation.
• Collaborate with Security, Architecture, and Engineering to enhance vulnerability posture and reporting workflows.
• Support endpoint security controls, baselines, and patch management across enterprise environments.
• Ensure integration between endpoint platforms, vulnerability tools, ITSM, and reporting capabilities.
• Contribute engineering expertise to solution design for scalable and operable systems.
• Assist in service transition ensuring deliverables and automation ready before BAU handover.
• Develop and maintain automation frameworks and orchestration processes to improve endpoint lifecycle management.
• Monitor operational performance and vulnerability trends to drive continuous improvements.
• Collaborate with global teams to ensure consistent adoption of standards and tools.
• Contribute to continuous improvement initiatives across endpoint engineering and service operations.
• Perform any other duties as assigned by the Reporting Manager.

Skills

Endpoint engineering

Automation

PowerShell

Python

ITSM

Security/vulnerability management

Analysis

Cross-functional collaboration

Education

Bachelor's degree in Information Technology, Computer Science, Engineering

Tools

Intune

MECM

Azure Virtual Desktop (AVD)

Job description

Responsibilities

• Drive engineering execution across endpoint and client services platforms, ensuring solutions are implemented in alignment with architecture standards and operational requirements.


• Act as a key contributor to automation and integration initiatives by developing and scaling solutions that reduce manual effort and improve consistency in endpoint management and vulnerability remediation.


• Partner with Security, Architecture, and Engineering teams to manage and enhance endpoint vulnerability posture, including vulnerability identification, prioritisation, remediation, and reporting workflows.


• Support the implementation of endpoint security controls, compliance baselines, and patch management strategies across enterprise environments.


• Ensure seamless integration between endpoint platforms, vulnerability management tools, ITSM systems, and reporting capabilities to enable end-to-end visibility and control.


• Participate in solution design discussions by providing engineering expertise to help shape solutions that are practical, scalable, and operationally supportable.


• Support service transition activities by ensuring engineering deliverables, automation workflows, and operational readiness requirements are in place prior to BAU handover.


• Develop and maintain s, automation frameworks, and orchestration processes to improve endpoint lifecycle management and reduce vulnerability response times.


• Monitor operational performance and vulnerability trends, identifying opportunities to improve automation, standardisation, and remediation efficiency.


• Collaborate with global operations teams to ensure consistent adoption of engineering standards, tools, and processes across regions.


• Contribute to continuous improvement initiatives across endpoint engineering, vulnerability management, and service operations.


• Perform any other duties as assigned by the Reporting Manager.

Requirements

• Bachelors Degree in Information Technology, Computer Science, Engineering, or a related discipline, with at least 6 years of relevant experience in endpoint engineering, infrastructure engineering, client services, or related technical domains, including hands‑on experience in automation and security/vulnerability management.


• Hands‑on experience with endpoint engineering and management platforms such as Microsoft Intune, MECM, Azure Virtual Desktop (AVD), or equivalent technologies.


• Strong experience in vulnerability management, patch management strategies, and endpoint security controls.


• Experience with ing and automation using PowerShell, Python, or equivalent technologies.


• Working knowledge of systems integration, API‑based automation, and orchestration tools.


• Good understanding of IT Service Management (ITSM) processes, particularly Incident, Change, and Problem Management related to endpoint services.


• Experience supporting or contributing to service transition and operational readiness activities.


• Strong analytical skills with the ability to analyse operational data, identify trends, and drive continuous improvements in engineering and service performance.


• Excellent communication and collaboration skills, with the ability to work effectively across Engineering, Security, and Operations teams.

Preferred Qualifications

• Microsoft Endpoint Administrator (Intune)


• Microsoft Modern Desktop Administrator or equivalent


• CompTIA Security+


• Associate CISSP


• Certified Ethical Hacker (CEH) or equivalent


• Microsoft Azure Administrator Associate


• Azure DevOps Engineer or equivalent


• ITIL Foundation


• Agile / Scrum certifications (e.g. Scrum Master, SAFe) will be an advantage.

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239