Senior EUC & Endpoint Security Engineer

OVERSEA-CHINESE BANKING CORPORATION LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OCBC Bank is seeking an experienced Workspace Security Engineer to strengthen our security engineering capability across Microsoft endpoint and modern workplace technologies. The role focuses on policy engineering, solution design, automation, and control assurance within a complex enterprise environment in Singapore.

You will translate security requirements into practical configurations, develop standards, and shape secure endpoint solutions while partnering with cross-functional teams to

Qualifications

• Approximately 8 or more years of relevant EUC/endpoint engineering experience.
• Strong hands-on experience with Microsoft Intune, Microsoft 365, Entra ID/Azure AD, Active Directory, Group Policy, device compliance, and Conditional Access.
• Experience designing or modernising endpoint policies including GPO-to-Intune migration or large-scale device-management initiatives.
• Understanding of endpoint security baselines, identity-driven access, vulnerability remediation, patching, application deployment, device compliance, and secure configuration management.
• Ability to translate security requirements into structured technical solutions and implementation plans.
• Experience assessing platform capabilities, identifying limitations, and recommending practical improvements or new feature adoption.
• Experience with PowerShell, Microsoft Graph APIs, scripting, automation, or configuration-as-code practices.
• Strong troubleshooting, analytical, documentation, communication, and stakeholder-management skills.
• Ability to work across security and technology teams in a complex enterprise environment.
• Curiosity to build expertise across Microsoft endpoint security, telemetry, and automation.

Responsibilities

• Engineer Microsoft endpoint security policies, configurations, and technical controls.
• Contribute to workspace security solution roadmap and endpoint security capabilities evolution.
• Translate requirements and control gaps into policy designs, configuration changes, and engineering solutions.
• Configure and enhance security across Microsoft Intune, Microsoft 365, Entra ID, CA, device compliance, and endpoint-management services.
• Engine and improve security baselines, threat surface reduction, application control, device control, vulnerability remediation, and endpoint telemetry.
• Evaluate new Microsoft security features and develop test plans and implementation approaches.
• Define security configuration standards, reference settings, guardrails, and exception requirements.
• Develop monitoring and reporting for policy deployment, configuration compliance, control coverage, and effectiveness.
• Use PowerShell, Graph APIs, scripting, and automation to improve configuration management and evidence collection.
• Investigate complex endpoint-security issues and remediation strategies.
• Produce engineering documentation and operating procedures.
• Collaborate with stakeholders to deliver effective workspace security controls.

Job description

OCBC Bank is seeking an experienced Workspace Security Engineer to strengthen our security engineering capability across Microsoft endpoint and modern workplace technologies. The role focuses on policy engineering, solution design, automation, and control assurance within a complex enterprise environment in Singapore.

You will translate security requirements into practical configurations, develop standards, and shape secure endpoint solutions while partnering with cross-functional teams to