Microsoft System Engineer

Alphaeus Pte Ltd; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Alphaeus Pte Ltd in Singapore seeks a hands-on lead to own the Microsoft 365, endpoint, and identity backbone of a mid-to-enterprise IT environment. You will drive Intune, Entra ID, hybrid AD, patching, and automation across hundreds of users and devices, partnering with Security on hardening and compliance.

The role emphasizes real outcomes: stability, patch compliance, and well-documented device estates through proactive automation and pilot-led deployments.

Qualifications

• 3–5 years in modern workplace, endpoint management, or desktop engineering.
• 3+ years hands-on with M365, Intune, and Entra ID specifically.
• Strong PowerShell/Graph scripting and Windows 10/11 expertise.

Responsibilities

• Own Microsoft 365 & Endpoint Ops, including Teams, SharePoint, OneDrive, Exchange, Intune and endpoint compliance baselines.
• Lead deployment and patch management, Autopilot lifecycle and rollback planning.
• Manage Entra ID and hybrid AD: users, groups, MFA, CA, access troubleshooting.
• Build PowerShell/Microsoft Graph scripts to automate admin tasks and remediation.
• Partner with Security to implement endpoint hardening and provide audit-ready evidence.

Skills

PowerShell scripting

Microsoft Graph

Intune

Entra ID

Endpoint management

Tools

PowerShell

Microsoft Graph

Job description

Own the Microsoft 365, endpoint, and identity backbone of a mid-to-enterprise IT environment. This is a hands-on lead role — you'll drive Intune, Entra ID, hybrid AD, patching, and automation across several hundred users and devices, partnering closely with Security on hardening and compliance.

What You'll Own

• Microsoft 365 & Endpoint Ops — Full administration of M365 (Teams, SharePoint, OneDrive, Exchange), Intune, MDM/MAM, and endpoint compliance baselines.
• Deployment & Patch Management — Lead patch rollouts, application deployment, and device lifecycle (Autopilot to retirement), with defined pilot waves and rollback plans.
• Identity Operations — Manage Entra ID and hybrid AD: users, groups, MFA, Conditional Access, and access troubleshooting.
• Automation — Build PowerShell/Microsoft Graph scripts to eliminate manual admin and speed up remediation.
• Security Partnership — Implement approved endpoint hardening (Defender, BitLocker, ASR) and supply audit-ready compliance evidence.

What You Bring

• 3–5 years in modern workplace, endpoint management, or desktop engineering — 3+ years hands-on with M365, Intune, and Entra ID specifically.
• Strong PowerShell/Graph scripting and Windows 10/11 expertise.
• Microsoft 365 Endpoint Administrator Associate or equivalent security/identity/Azure certification is a plus.

Why It Matters

You'll be measured on real outcomes — service stability, patch compliance, clean deployments with minimal disruption, and an accurate, well-documented device estate.