Senior IT Specialist (Infrastructure & Cyber Security)

Pathlight School / Autism Resource Centre (Singapore); Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Pathlight School / Autism Resource Centre (Singapore) seeks an experienced Senior IT Specialist - Infrastructure & Cyber Security to safeguard a multi-campus network and a hybrid Windows/Apple environment. You will own network security, policy governance and vulnerability management while guiding vendors and staff in best practices.

The role requires hands-on firewall and SD-WAN administration, identity protection, incident response, and strong collaboration with IT teams to maintain continuity

Qualifications

• Degree in Information Technology, Cyber Security or related field or equivalent experience.
• 5–8 years of progressive IT infrastructure and cyber security experience.
• Hands-on enterprise firewall and wired/wireless network administration.
• Experience securing a hybrid Windows and Apple endpoint estate.
• Experience with core identity infrastructure (Windows Server, Active Directory, DNS, DHCP) and cloud security (Microsoft 365, Entra ID).
• Proven cyber security governance, policy development and risk reporting.
• Strong written, verbal and visual communication skills.

Responsibilities

• Own administration, management and monitoring of network infrastructure across campuses.
• Administer Fortinet firewalls, VPN, web filtering and threat inspection; maintain firmware lifecycle and policies.
• Oversee SD-WAN and Aruba wired/wireless infrastructure; ensure failover, configuration and access control.
• Lead fault resolution with vendors; perform root cause analysis and preventive actions.
• Manage network segmentation, VLAN design and IP address management; plan for new campuses.
• Administer Windows Server, Active Directory, DNS, DHCP, file services and virtualization; patching and backups.
• Ensure 100% daily readiness of network and server services; renew hardware and support contracts.
• Develop and maintain cyber security policies, standards and procedures; conduct security testing.
• Monitor risk, incidents and posture; ensure PDPA and MOE compliance; assess third-party security.
• Coordinate phishing simulations, training and staff awareness programs; incident response and DR testing.

Skills

Network security

Fortinet firewalls

Hybrid Windows/macOS security

Active Directory / Microsoft 365

Security governance

Policy & risk reporting

Communication skills

Education

Degree in IT / Cyber Security or related

Tools

Fortinet

HPE Aruba networking

SD-WAN

ManageEngine Desktop Central / Jamf

Entra ID / Microsoft 365 security

Job description

Join us to Transform Lives!

Autism Resource Centre (Singapore) or ARC(S), is a not-for-profit charity based in Singapore. ARC(S) is dedicated to serving children and adults on the autism spectrum, to help these individuals lead meaningful and independent lives in society. ARC (S) offers a wide range of services: Pathlight School, and two social enterprises, The Art Faculty and Professor Brawn.

Pathlight School is the first autism-focused school in Singapore to offer a unique blend of mainstream academic curriculum and life readiness skills. We are currently the largest special education school in Singapore and due to our further expansion, we invite candidates who have proven commitment and competence to join us in the role of Senior IT Specialist - Infrastructure & Cyber Security.

The Team:

The Information Technology (IT) provides an enabling, robust and supportive technological environment to empower users guided by principles of accountability, security and privacy. Ultimately, it is the rocket fuel of the organisation, jetting it forward and yet safe to use.

Your Impact and Contribution:

We are looking for an experienced network and security professional to help us realise our vision of building the next-gen learning community of empowered future technology leaders and learners. This role owns the security of a network that serves thousands of students across multiple campuses - the firewalls, the SD-WAN and the wireless estate that everything else depends on, together with a hybrid Windows and Apple endpoint environment.

Beyond technical execution, the role holds cyber security governance for the organisation: setting the policies and controls, assuring them through testing, and building a staff community that can recognise a threat when it arrives. You will be the person who decides what good looks like, proves it, and teaches it.

What You’re Involved In:

1. Network & Server Infrastructure

• Own the administration, management and monitoring of the organisation’s network infrastructure and services across all campuses and partner schools.
• Administer and optimise the organisation’s Fortinet firewalls - security policy, VPN, web filtering and threat inspection, firmware lifecycle and rule base documentation.
• Administer and optimise the organisation-wide SD-WAN and HPE Aruba wired and wireless infrastructure - configuration, failover assurance, switching, controllers, access points and network access control.
• Lead the resolution of escalated network and security faults, including root cause analysis, drive vendors and principal support to closure, and implement preventive measures to reduce recurrence.
• Own network segmentation, VLAN design and IP address management, and provide design and planning input for network services at new and existing campuses.
• Administer core server and directory services - Windows Server, Active Directory, DNS, DHCP, file services and virtualisation - including patching, hardening, backup and capacity planning.
• Ensure 100% daily readiness of all physical and virtual network and server services. Lead the timely renewal of hardware and service support contracts.

2. Cyber Security Governance

• Own, develop and maintain the organisation’s cyber security policies, standards and procedures, including the review cycle.
• Design, implement and assure security controls across infrastructure, endpoints and cloud services.
• Maintain the IT risk register, track remediation, and report on the organisation’s security posture, incidents and findings to management.
• Ensure compliance with PDPA, MOE and other applicable requirements, and conduct security assessment of third parties and vendors prior to engagement and at renewal.

3. Security Operations

• Hybrid identity security across Active Directory, Microsoft 365 and Entra ID - Conditional Access, identity protection, privileged access and authentication policy.
• Email and endpoint security - endpoint protection platform, anti-phishing and anti-spam policy, alert triage and response.
• Endpoint management across a hybrid Windows and Apple estate - ManageEngine Desktop Central and Jamf, device enrolment, compliance policies, patch deployment and platform hardening, with vulnerability scanning and remediation tracking across both platforms.
• Security monitoring and incident response, including post-incident review, and assurance of backup, recovery and business continuity arrangements.

4. Security Assurance & Awareness

• Plan, scope and coordinate penetration testing and vulnerability assessment with appointed vendors, and track findings to closure against agreed timelines.
• Plan and run phishing simulation exercises, analyse results and target follow-up training.
• Coordinate incident response and disaster recovery exercises, and document outcomes and lessons learnt.
• Develop and run the staff cyber security awareness programme, including onboarding and refresher training pitched for both technical and non-technical staff, and measure its effectiveness.

5. Management, Procurement & Internal Operations

• Manage technical evaluation and procurement of network and security hardware, software and cloud services.
• Manage vendors, support contracts and renewal cycles, including SLA performance and escalation, ensuring the organisation receives value from its technology investments.
• Ensure system and service readiness, and appropriate monitoring of IT systems and services.
• Develop and maintain standard operating procedures, runbooks and technical documentation.
• Provide technical guidance and mentoring to IT Specialists and IT Support Engineers, and regularly give status reports across projects.
• Strictly adhere to and preserve the confidentiality of all IT systems and services, and comply with and help to enforce organisation-wide policies and procedures.

6. Communication

• Point of contact on cyber security and network matters.
• Relay relevant IT-related information to staff.
• Respond and act on leader’s direction.
• Any other responsibilities as assigned by Head of Department

Your must-haves

• Degree qualification in Information Technology, Cyber Security or a related field, or equivalent experience
• At least 5 to 8 years of progressive experience in IT infrastructure and cyber security
• Hands-on experience administering enterprise firewalls and wired and wireless network infrastructure
• Hands-on experience managing and securing a hybrid Windows and Apple (macOS and iOS) endpoint estate
• Experience administering core server and identity infrastructure - Windows Server, Active Directory, DNS, DHCP - together with Microsoft 365 and Entra ID security in a hybrid environment
• Experience in cyber security governance - policies, controls assurance and risk reporting
• Able to work in a fast-paced environment

Your good-to-haves

• Hands-on experience with any of the platforms in our environment - Fortinet firewalls, HPE Aruba wired and wireless networking, SD-WAN, ManageEngine Desktop Central or Jamf
• Experience coordinating penetration testing, and running security awareness training and phishing simulation exercises
• Experience leading escalated fault resolution with vendors, and managing IT services across multiple locations
• Professional certification in one or more of the following: Fortinet, HPE Aruba Networking, Jamf, Microsoft security (such as SC-200 or SC-300), CISSP, CISM, CompTIA Security+ or ITIL
• Experience in the education or public sector, including MOE systems and data protection practice under PDPA
• Foundational knowledge of procurement workflows (sourcing, PR/PO cycles, and vendor management)
• Good written, verbal and visual communication skills, including the ability to explain security matters to non-technical staff
• Hands-on and self-motivated, able to work independently and in a team setting
• Desire to learn about autism and the passion to serve the autism community

We offer a competitive remuneration package and the professional advantages of a dynamic workplace that enables your professional development and values your contributions.

We seek your understanding that only shortlisted candidates will be notified.

Our organisation is committed to protecting our children and young people from harm. We require all applicants to undergo a comprehensive screening process prior to hire.