IT Infrastructure Engineer

5 day work week ( Monday to Friday )

Job Title: IT Infrastructure Engineer(Identity and Security)

Role Overview

We are looking for a motivated IT Infrastructure Engineer to join the SSOE Programme, which manages more than350 schools across Singapore. In this role, you will support the identity and security infrastructure serving over 450,000 students and 35,000 education professionals.

You will work within our Zero Trust ecosystem, contributing to endpoint security and identity-driven access governance across Microsoft 365, on-premises Active Directory (AD), and cloud-native Entra ID. You will work closely with senior engineers and the security team to keep users, devices, and applications secure and well-managed.

• Support the configuration and maintenance of Entra ID (Azure AD), including Conditional Access policies and Multi-Factor Authentication (MFA).
• Assist in managing Identity Lifecycle processes, including provisioning and de-provisioning of user accounts across on-premises Active Directory and cloud identity systems.
• Help implement and maintain Passwordless authentication to reduce credential-based risks.
• Participate in access reviews and assist in enforcing least-privileged access principles.

• Assist n operating Microsoft Defender for Endpoint and Defender for Office 365(EPP/EDR) to monitor and remediate security threats.
• Support the deployment and management of Microsoft Purview for Data Loss Prevention(DLP) and information protection.
• Contribute to the development of automated response playbooks using PowerShell and Microsoft Graph API.

• Write and maintain PowerShell and Python scripts to automate routine identity and security tasks.
• Use KQL and Endpoint Analytics to monitor device health and application performance across the estate.
• Assist in building and maintaining self-service portals for staff and students to reduce helpdesk ticket volume.
• Support reporting and dashboards using tools such as PowerBI.

• Work with stakeholders to understand business requirements and translate them into technical solutions.
• Assist in ensuring compliance with IM8 and Agency IT Policies and Standards.
• Collaborate with other government agencies and central services teams to support government-wide services.
• Support day-to-day delivery and maintenance of IT infrastructure services.

• Basic working knowledge of Active Directory and Entra ID (Azure AD), including user and group management.
• Familiarity with Microsoft 365 security tools such as Microsoft Defender and Microsoft Purview.
• Some experience or exposure to PowerShell scripting or other scripting languages(Python, Bash).
• Understanding of fundamental security concepts such as MFA, least privilege, and Zero Trust principles.

• Relevant certifications are a plus, such as SC-300 (Microsoft Identity and Access Administrator), MS-500 (Microsoft 365 Security Administration), or equivalent.
• Diploma or degree in Computer Science, Information Technology, or a related field.

• Eager to learn and develop skills in identity and security engineering.
• Good communication skills, both written and verbal, with the ability to work effectively in a team.
• Organised, proactive, and able to manage tasks independently with appropriate guidance.
• A team player who is willing to contribute across different areas as needed.

Note: Training will be provided