VP, Endpoint & Device Management Engineering

GIC Private Limited; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

GIC Private Limited in Singapore is seeking an AVP/VP, Endpoint & Device Management Engineer to lead the design, build, and operation of our enterprise endpoint platforms across Windows, macOS, iOS, and Android.

You will own zero‑touch provisioning, patch management, device compliance, and security hardening, partnering with Information Security and Risk to keep a large, regulated fleet safe and compliant.

Qualifications

• 12+ years of hands‑on engineering experience in endpoint, device, or digital workplace infrastructure at enterprise scale.
• Demonstrated ownership of a multi‑platform fleet of comparable size and geographic spread (Windows, macOS, mobile).
• Experience operating in a regulated environment — financial services or equivalent audit/change obligations.
• Track record of delivering a modernisation programme (MECM to Intune, imaging to Autopilot, cloud-native management) in live production estate.

Responsibilities

• Own the design, build, and run engineering of the enterprise endpoint platforms: Intune, Entra ID, Autopilot, MECM/Configuration Manager, Jamf Pro.
• Define target-state endpoint architecture across Windows, macOS, iOS/iPadOS, and Android.
• Engineer device configuration profiles, security baselines, and compliance policies as code artefacts.
• Manage full device lifecycle: enrolment, provisioning, configuration, binding, refresh, wipe, retirement.
• Maintain platform currency and roadmap adoption aligned with Microsoft/Apple release cycles.
• Engineer zero-touch provisioning and device experience improvements across all platforms.

Skills

Endpoint engineering

PowerShell

Microsoft Graph API

Python

Terraform

Azure AD/Entra ID

Tools

MECM/Configuration Manager

Jamf Pro

Intune

Entra ID

Job description

GIC Private Limited in Singapore is seeking an AVP/VP, Endpoint & Device Management Engineer to lead the design, build, and operation of our enterprise endpoint platforms across Windows, macOS, iOS, and Android.

You will own zero‑touch provisioning, patch management, device compliance, and security hardening, partnering with Information Security and Risk to keep a large, regulated fleet safe and compliant.