Technology Solutions Engineer, Endpoint Technologies Management, IITS

HYPERSCAL SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Singapore Management University is seeking a seasoned endpoint management professional to build, deploy, and maintain device ecosystems across Windows, macOS, and mobile platforms. You will manage endpoints via Intune and JAMF, coordinate updates with the IT Help Centre, and ensure strong security postures and compliance with university policies.

The role emphasizes vulnerability management, patching, and integration with Defender and Purview, while supporting enterprise security initiatives and

Qualifications

• Degree in Information Technology, Computer Science, Engineering, or related discipline.
• 5–8 years of endpoint management, desktop engineering, or IT operations in a fast-paced enterprise environment.
• In-depth knowledge of Microsoft Windows OS and macOS environments, including administration, troubleshooting, upgrading, patching, and configuration.
• Expertise with SCCM, Microsoft Intune, and JAMF for orchestration, software delivery, and modern device management.

Responsibilities

• Build, implement, and maintain software installation, configuration, and lifecycle management for Windows, Mac, and mobile devices.
• Manage and deploy Windows and Mac endpoints using Microsoft Intune (Windows Autopilot) and JAMF across all end-user devices.
• Coordinate with the IT Help Centre on desktop application updates and rollouts via Microsoft Intune/JAMF across different business departments.
• Deliver endpoint technical solutions aligned with specified plans, deliverables, costs, and timelines.
• Monitor and manage all endpoint vulnerabilities across client OS, applications, and hardware by applying critical security and application updates in a timely manner.
• Support the university's Zero Trust security framework - enforcing least-privilege access, Conditional Access policies, and continuous device health compliance checks.

Education

Degree in Information Technology, Computer Science, Engineering, or related discipline

Tools

SCCM

Microsoft Intune

JAMF

Microsoft Purview

Microsoft Defender

Microsoft Conditional Access

Active Directory

Microsoft Entra ID

Job description

COMPANY DESCRIPTION

Singapore Management University is a place where high-level professionalism blends together with a healthy informality. The 'family-like' atmosphere among the SMU community fosters a culture where employees work, plan, organise and play together - building a strong collegiality and morale within the university.

Our commitment to attract and retain talent is ongoing. We offer attractive benefits and welfare, competitive compensation packages, and generous professional development opportunities - all to meet the work-life needs of our staff. No wonder, then, that SMU continues to be given numerous awards and recognition for its human resource excellence.

RESPONSIBILITIES

• Build, implement, and maintain software installation, configuration, and lifecycle management for Windows, Mac, and mobile devices - including rollouts, upgrades, patches, and service packs.
• Manage and deploy Windows and Mac endpoints using Microsoft Intune (Windows Autopilot) and JAMF, covering all end-user devices across the university.
• Coordinate with the IT Help Centre on desktop application updates and rollouts via Microsoft Intune/JAMF across different business departments.
• Deliver endpoint technical solutions aligned with specified plans, deliverables, costs, and timelines.
• Ensure high availability, performance, and overall user experience in line with business and academic expectations.
• Monitor and manage all endpoint vulnerabilities across client OS, applications, and hardware by applying critical security and application updates in a timely manner.
• Monitor and assess business needs against endpoint security concerns, collaborating with the security team to manage overall endpoint security posture.
• Respond to, investigate, and escalation alerted events and incidents from security technologies.
• Administer and tune Microsoft Defender for Endpoint, including Vulnerability Management, Incidents/Alerts, and integration with Microsoft Intune for device compliance enforcement.
• Support the university's Zero Trust security framework - enforcing least-privilege access, Conditional Access policies, and continuous device health compliance checks.
• Manage Endpoint Data Loss Prevention (DLP) and Endpoint Privilege Management solutions in line with university policies.
• Design and implement self-service capabilities that reduce help desk dependency and improve end-user experience.
• Administer Microsoft Purview (Information Protection, Records Management, Data Loss Prevention) to ensure data governance and compliance.
• Manage Microsoft Conditional Access policies and Microsoft Entra ID for identity-based endpoint access control.
• Support Microsoft Defender for Cloud Apps for SaaS application visibility and control across managed endpoints.
• Maintain proficiency across the Microsoft 365 security stack and contribute to continuous improvement of the university's security posture.
• Provide Level-2 support for escalated endpoint issues, investigating root causes and implementing lasting fixes.
• Provide dedicated IT support for the senior executive team, ensuring a premium and responsive experience.
• Identify trends in specific support areas and work proactively with stakeholders to address them.
• Collaborate with external vendors and suppliers to evaluate emerging technologies and develop cost-optimised solutions; maintain vendor relations and perform procurement comparisons.
• Maintain accurate records of licensing, inventory, and maintenance contracts.
• Create, review, and maintain technical documentation including design guides, operational runbooks, and internal knowledge base articles.
• Share knowledge through documentation and demonstrations of technologies, tools, and methodologies.
• Identify and implement process improvements to increase productivity and drive consistency in end-user support.
• Participate in evaluating, testing, and recommending OS patch management strategies and provide technical support across production and development environments.
• Other duties as assigned.

QUALIFICATIONS

• Degree in Information Technology, Computer Science, Engineering, or a related discipline.
• 5 to 8 years of experience in endpoint management, desktop engineering, or IT operations in a fast-paced enterprise environment.
• In-depth knowledge of Microsoft Windows OS and macOS environments, including administration, troubleshooting, upgrading, patching, and configuration.
• Hardware knowledge of laptops, desktops, thin clients, printers, iMac, and MacBook in an enterprise environment.
• Expertise with SCCM, Microsoft Intune, and JAMF for orchestration, software delivery, and modern device management.
• Experience with Microsoft Purview, Microsoft Defender (for Endpoint, Cloud Apps, Vulnerability Management), and Microsoft Conditional Access.
• Strong knowledge of Active Directory, Microsoft Entra ID, DN