M365 Intune Engineer (GC/SW)

ST Engineering; Singapore; Hybrid; SGD 70,000 - 90,000; Full time

Job summary

A leading tech firm in Singapore is looking for an experienced Intune Engineer to design and manage Microsoft Intune across various devices. The role involves ensuring compliance, supporting Windows Autopilot, and providing advanced support for Intune and Exchange integration. Candidates should have over 5 years of experience in endpoint management and relevant Microsoft certifications. This position offers a hybrid work arrangement based in Seletar, Singapore.

Qualifications

• Over 5 years experience in endpoint management and/or messaging support.
• Hands-on knowledge of Microsoft Intune and endpoint compliance.
• Experience managing Windows, iOS, or Android devices in Intune.

Responsibilities

• Design and maintain Intune policies and compliance baselines.
• Support Windows Autopilot and ensure device compliance.
• Provide Level 3 support for escalations related to Intune.

Skills

Microsoft Intune

PowerShell scripting

SPF, DKIM, DMARC

Endpoint management

Messaging support

Entra ID Conditional Access

Analytical abilities

Education

Microsoft Certified: Endpoint Administrator Associate

Microsoft Certified: Modern Desktop Administrator Associate

Microsoft Certified: Administrator Expert

Job description

The Intune Engineer is responsible for the design, deployment, and management of Microsoft Intune (Endpoint Manager) across the enterprise environment. This role ensures that all corporate and BYOD devices are secure, compliant, and aligned with organizational policies, while delivering a seamless end-user experience across Windows, iOS, and Android platforms.

In addition, familiarity with Exchange Online and on-premises Exchange will be advantageous to support integration points, mail client configurations, and related email security controls such as SPF, DKIM, and DMARC.

Key Responsibilities

• Design, configure, and maintain Microsoft Intune policies, profiles, and compliance baselines for Windows, macOS, iOS, and Android devices.
• Deploy and manage applications via Intune.
• Support Windows Autopilot, hybrid join, and Entra ID join deployments.
• Maintain configuration baselines (BitLocker, LAPS, Firewall, etc.) and ensure continuous device compliance.

Messaging & Email Security (Good to Have)

• Provide operational support for Exchange Online and on-premises Exchange environments as part of the Messaging team.
• Assist with mail flow, transport rules, and client access policies as they relate to device compliance.
• Understand and help maintain email authentication configurations (SPF, DKIM, DMARC) and message hygiene.

Operations & Support

• Monitor enrollment, compliance, and device health dashboards.
• Automate operational workflows using PowerShell.
• Maintain documentation, SOPs, and configuration baselines.
• Provide Level 3 support for escalations related to device management, Autopilot, or Exchange/Intune integration issues.

Modernization & Projects

• Participate in endpoint modernization initiatives, including migration from on-premises to cloud management.
• Support enterprise programs such as zero-trust enablement, passwordless authentication, and BYOD adoption.
• Test new Intune releases and evaluate impact on enterprise configurations.
• Collaborate with architects to design future-state endpoint and messaging strategies.

Qualifications

• More than 5 years experience in endpoint management and/or messaging support.
• Strong hands-on knowledge of Microsoft Intune (Configuration Profiles, Compliance, App Deployment).
• Strong hands-on knowledge of Entra ID Conditional Access and Device Join Types (Hybrid, Entra, Autopilot).
• Strong hands-on knowledge of Exchange Server (2016/2019) and Exchange Online administration basics.
• Strong hands-on knowledge of SPF, DKIM, DMARC, and email authentication mechanism.
• Strong hands-on knowledge of PowerShell scripting for automation and troubleshooting.
• Strong hands-on knowledge of Experience managing WinOS, iOS, or Android devices in Intune.
• Microsoft Certified: 1) Endpoint Administrator Associate, 2) Microsoft Certified: Modern Desktop Administrator Associate and 3) Administrator Expert.
• Strong analytical and troubleshooting abilities.
• Collaborative mindset and ability to work across teams.
• Detail-oriented, self-driven, and process-focused.
• Effective documentation and communication skills.
• Working location at Seletar - hybrid work arrangement.