Endpoint Security Engineer: Microsoft 365 & Intune

OCBC Bank; Singapore; On-site; SGD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Job summary

OCBC Group is seeking a seasoned Workspace Security Engineer to strengthen Microsoft endpoint and modern workplace security across Intune, 365, Entra ID, and CA. The role emphasizes policy design, automation, and measurable security controls within a large enterprise.

The ideal candidate has 8+ years in EUC/security engineering, strong scripting skills, and a proven ability to translate security needs into practical, scalable configurations.

Qualifications

• Extensive experience in EUC, endpoint engineering, or modern workplace within enterprise environments.
• Strong hands-on experience with the Microsoft ecosystem and security policy engineering.
• Ability to translate security requirements into practical configurations and controls.
• Experience designing and implementing endpoint security baselines and telemetry.
• Proven ability to work across security and technology teams in a complex environment.

Responsibilities

• Engineer Microsoft endpoint and modern workplace security policies, configurations, and controls.
• Contribute to the workspace security solution roadmap and evolution of endpoint security capabilities.
• Translate requirements into practical policy designs, changes, and engineering solutions.
• Configure and enhance security across Microsoft Intune, 365, Entra ID, CA, and device compliance.
• Develop monitoring and reporting for policy deployment, compliance, and security effectiveness.
• Use PowerShell, Graph APIs, scripting, and automation to improve configuration management and reporting.
• Collaborate with stakeholders to deliver effective workspace security controls.
• Produce engineering documentation, test evidence, and operating procedures.

Skills

Endpoint engineering

PowerShell

Intune

Azure AD

Policy automation

Threat modeling

Stakeholder management

Scripting

Tools

Microsoft Intune

Microsoft 365

Entra ID

Azure AD

Active Directory

Group Policy

Conditional Access

Job description

OCBC Group is seeking a seasoned Workspace Security Engineer to strengthen Microsoft endpoint and modern workplace security across Intune, 365, Entra ID, and CA. The role emphasizes policy design, automation, and measurable security controls within a large enterprise.

The ideal candidate has 8+ years in EUC/security engineering, strong scripting skills, and a proven ability to translate security needs into practical, scalable configurations.