IT Infra Engineer (Endpoint Management)

<p><strong>Job Description: Senior / IT Infra Engineer (Unified Endpoint Management) </strong></p> <p><strong>Role Overview </strong></p> <p>We are seeking highly skilled and innovative engineer to join our transformative SSOE Programme that manages more than 350 schools across Singapore. This is an exceptional opportunity to shape the future of educational technology infrastructure and enhance the learning experience of more than 450,000 students and 35,000 education professionals.</p> <p>As a Senior / IT Infra Engineer specializing in Unified Endpoint Management (UEM), you will design and scale our holistic device ecosystem. You will be responsible for the seamless migration and orchestration of a multi-platform environment including <strong>Windows, macOS, iOS (iPads), ChromeOS And Android</strong>. Your mission is two-fold: maintaining a hardened, high-performance environment for <strong>Enterprise users </strong>while architecting a flexible, resilient, and manageable digital learning space for <strong>Students</strong>. You will ensure that regardless of the hardware or the user, the experience is secure, automated, and ready for use from the moment the box is opened.</p> <p><strong>Key Responsibilities </strong></p> <ul> <li><strong>Multi-Platform Engineering & Orchestration </strong></li> <li><strong>Unified Management: </strong>Architect, migrate and maintain a "single pane of glass" management strategy using <strong>Microsoft Intune</strong>, <strong>Apple School Manager</strong>, and <strong>Google Admin Console </strong>to ensure seamless integrations.</li> <li><strong>Zero-Touch Provisioning: </strong>Design and optimize automated deployment workflows—including <strong>Windows Autopilot</strong>, <strong>Apple School Manager (DEP)</strong>, and <strong>Chrome Zero-Touch Enrollment</strong>—to eliminate manual imaging. <ul> <li>Platform Specialization: <strong>Windows: </strong>Manage physical hardware and Cloud PCs via modern MDM policies.</li> <li><strong>Apple: </strong>Oversee macOS and iPadOS configuration profiles and VPP app distribution.</li> <li><strong>ChromeOS: </strong>Manage fleet-wide policies and application delivery for Chromebooks.</li> <li> </li> <li>Enterprise vs. Student Strategy</li> <li><strong>Enterprise Excellence: </strong>Implement "Zero Trust" security baselines, Conditional Access, and seamless SSO for corporate staff to ensure maximum productivity and data protection.</li> </ul> </li> </ul> <ul> <li><strong>Student Enablement: </strong>Design specialized configurations for student devices, focusing on <strong>Shared iPad </strong>setups, "Kiosk Mode" for high-stakes testing, and web-content filtering.</li> <li><strong>Scale & Lifecycle: </strong>Manage the lifecycle of thousands of devices, from procurement and automated enrolment to remote wipe and decommissioning.</li> <li>Secure Endpoint Management</li> <li>Architect secure device compliance frameworks within <strong>Intune</strong>, ensuring only "healthy" and compliant devices (including Cloud PCs) can access corporate resources.</li> <li>Utilize tools such as <strong>KQL (Kusto Query Language) </strong>and Sentinel to build advanced security visualizations and monitoring workbooks, identifying anomalous behaviour across the M365 stack.</li> <li>Eliminate technical debt by transitioning legacy GPOs and security configurations to modern, cloud-based security baselines.</li>