Resident Engineer

KNOWLEDGE COMPUTERS PTE. LTD.; Singapore; Hybrid; SGD 56,000 - 89,000; Full time

Job summary

KNOWLEDGE COMPUTERS PTE. LTD. is seeking a Resident Engineer to provide onsite IT support and hybrid services for client staff.

You will manage onboarding of new hires, configure laptops, accounts, and software, and oversee offboarding with secure data handling and access revocation. Responsibilities include deploying Microsoft 365 tenants, Azure AD (Entra ID), Intune enrollment, Defender deployment, and ongoing security reporting.

Qualifications

• Onsite support at customer location five days per week.
• Experience configuring 365 tenants, Azure AD, Intune, Defender.
• Knowledge of identity management with SSO/MFA/CA for access control.
• Ability to onboard and offboard staff with data backups and access revocation.

Responsibilities

• Onsite and remote/onsite support as required for staff IT needs.
• Onboarding: configure laptops, create user accounts, install software, train users.
• Offboarding: backup data, refurbish devices, revoke access.
• Document configurations and maintain security posture.

Skills

IT support

Troubleshooting

Customer communication

Tools

Microsoft 365

Azure Active Directory

Intune

Windows Defender

SSO

MFA

SSPR

Conditional Access

Job description

Resident Engineer

1. Onsite Support : Resident Engineer for five (5) days per week onsite at the customer's location.


2. Remote and Onsite Support


3. Onboarding and Offboarding Services


4. Onboarding: The Resident Engineer will be responsible for the IT onboarding process for new staff members, including:

i. Preparing and configuring laptops according to the organization's standards

ii. Setting up new user accounts and email profiles

iii. Installing required software and providing initial user training as needed.

1. Offboarding: The Resident Engineer will manage the IT offboarding process for departing staff members, including:

i. Retrieving and securely backing up user data (if required)

ii. Refurbishing laptops according to internal procedures for potential reuse

iii. Revoking access to systems and deactivating user accounts.

Engineer Deliverables:

• Configured Microsoft 365 tenant


• Configured Azure AD (Entra ID) tenant with users, MFA, SSO, self-service password reset (SSPR), and conditional access policies


• Azure AD domain-joined Windows computers with Intune enrolment.


• Configured Intune environment with device configuration and compliance policies.


• Installed and configured Windows Defender on managed devices.


• Regular security reports from Windows Defender.


• Set up email accounts for initial staff.


• Installation of requested software on user devices.


• Operational ChatGPT Enterprise accounts and Microsoft Project licenses


• Ongoing onboarding and offboarding services for staff IT requirements.


• Documentation of the implemented configurations and processes.

Assumptions:

• Insight to provision all related Windows Licenses, M365 Licenses and relevant hardware and accessories.


• Assumed no on-premise IT infrastructure to be deployed in this project.


• Assumed all related on-premise IT infrastructure are in functional condition.


• SP Group will provide timely access to their premises and necessary information for the execution of the services.


• Entra ID Conditional Access Policies and Microsoft Defender for Endpoint Policies requirements to be shared by SP Group. Additional effort may be required.