IT Infrastructure Engineer

Hirsch Bedner Associates Pte Ltd; Singapore; Hybrid; SGD 90,000 - 110,000; Full time

Job summary

Hirsch Bedner Associates Pte Ltd in Singapore seeks an IT Infrastructure Engineer to join the technology team. You will bridge on-premises and cloud environments, implement projects, and ensure secure, scalable systems aligned with business goals.

The role requires 3–5 years of hands-on infrastructure experience, a relevant degree, and certifications; you will work across AD/Entra ID, Azure, Fortinet, M365, and automation, contributing to ITIL processes and documentation.

Qualifications

• Degree in IT/CS or related field required.
• 3–5 years of hands-on IT infrastructure experience.
• Experience in hybrid on-prem + cloud environments.
• Relevant certifications are highly regarded.
• Strong scripting and automation skills.

Responsibilities

• Design, implement, and manage infrastructure projects per IT roadmaps.
• Administer hybrid AD and Entra ID with SSO and provisioning.
• Manage Azure resources, VMs, networking, storage, and governance.
• Configure Fortinet devices and VPNs; enforce security policies.
• Develop automation scripts (PowerShell, Python, Bash).
• Integrate systems via REST APIs and with M365 services.
• Support cybersecurity, vulnerability management, and patching.
• Maintain Microsoft 365 services and Defender.
• Produce documentation, runbooks, and architecture diagrams.
• Provide Tier 2/3 escalation support.

Skills

Analytical thinking

Problem-solving

Communication

Self-motivation

Team collaboration

Documentation

Education

Diploma or Bachelor's degree in IT/CS

Tools

Azure

Fortinet

Microsoft 365

PowerShell

Python

Entra ID

ITIL

Job description

We are seeking a skilled and driven IT Infrastructure Engineer to join our technology team. In this role, you will be responsible for implementing and operationalizing new projects and strategic initiatives as directed by management. You will operate across a hybrid environment, bridging on-premises infrastructure with cloud-based services, and will play a hands-on role in ensuring systems are secure, scalable, and aligned with business objectives.

KEY RESPONSIBILITIES

• Design, implement, and manage infrastructure projects and initiatives in alignment with management directives and IT roadmaps.
• Administer and maintain hybrid identity environments spanning Windows Active Directory (AD) and Microsoft Entra ID, including user provisioning, group policies, and SSO integrations.
• Manage and optimise Microsoft Azure environments, including virtual machines, networking, storage, and cloud-native services.
• Configure, monitor, and maintain network devices including Fortinet firewalls — handling policy management, VPN configurations, and threat prevention.
• Develop and maintain automation scripts (PowerShell, Python, or Bash) to streamline operations, reduce manual effort, and improve consistency.
• Integrate systems and automate workflows via REST APIs, including interactions with M365 services, Azure, and third-party platforms.
• Support and enforce cybersecurity best practices across the environment — including vulnerability assessments, access controls, patch management, and incident response.
• Manage and administer Microsoft 365 services including Exchange Online, Teams, SharePoint, Intune, and Defender.
• Contribute to ITIL-aligned processes including change management, incident management, problem management, and service requests.
• Produce clear technical documentation, runbooks, and architecture diagrams for implemented solutions.
• Provide Tier 2/3 escalation support and collaborate with cross-functional teams on infrastructure-related matters.

TECHNICAL REQUIREMENTS

Identity & Directory Services

• Hands-on experience with Windows Active Directory — GPO, DNS, DHCP, FSMO roles, trust relationships.
• Practical knowledge of Microsoft Entra ID — Conditional Access, MFA, Privileged Identity Management (PIM), Entra Connect / cloud sync.

Cloud & Azure

• Demonstrable experience managing Azure environments — compute, networking (VNet, NSG, Azure Firewall), storage, and resource governance.
• Familiarity with Azure security tools: Microsoft Defender for Cloud, Sentinel, and Azure Monitor.
• Understanding of Azure Landing Zones, subscription management, and cost optimisation.

Networking & Security

• Practical experience with Fortinet products — FortiGate firewall administration, FortiManager, SSL/IPSec VPN, security policies, and firmware management.
• Strong networking fundamentals: TCP/IP, routing (BGP/OSPF), VLANs, switching, and SD-WAN.
• Understanding of cybersecurity principles — zero trust, least privilege, network segmentation, and vulnerability management.

Scripting & Automation

• Proficient in at least one scripting language: PowerShell (preferred), Python, or Bash — for task automation, reporting, and system administration.
• Experience consuming and integrating REST APIs — building integrations with platforms such as Microsoft Graph API, Azure REST API, or third-party services.

Microsoft 365

• Working knowledge of M365 administration across Exchange Online, Teams, SharePoint, OneDrive, Intune (MDM/MAM), and Microsoft Defender.
• Familiarity with Microsoft 365 compliance tools and data governance features is an advantage.

QUALIFICATIONS & EXPERIENCE

• Diploma or Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum 3–5 years of hands-on experience in an IT infrastructure or systems engineering role.
• Experience operating in a hybrid (on-premises + cloud) environment is essential.
• Relevant certifications are highly regarded:
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft 365 Certified: Enterprise Administrator Expert or Fundamentals
• Fortinet NSE 4 or above
• ITIL Foundation (v3 or v4)
• CompTIA Security+ or equivalent

COMPETENCIES & ATTRIBUTES

• Strong analytical and problem-solving skills with the ability to troubleshoot complex infrastructure issues.
• Eective communicator — able to convey technical concepts clearly to both technical and non-technical stakeholders.
• Self-motivated with the ability to manage multiple projects and priorities simultaneously.
• Collaborative team player who is also capable of working independently.
• Detail-oriented with a commitment to documentation and knowledge sharing.