IT Infrastructure Engineer ( Identity and Security )

5 day work week ( Monday to Friday ) Location : near MRT station Job Title IT Infrastructure Engineer ( Identity and Security ) Occupation RESIDENT TECHNICAL OFFICER Job Description & Requirements Job Title: IT Infrastructure Engineer(Identity and Security) Role OverviewWe are looking for a motivated IT Infrastructure Engineer to join the SSOE Programme, which manages more than350 schools across Singapore. In this role, you will support the identity and security infrastructure serving over 450,000 students and 35,000 education professionals. You will work within our Zero Trust ecosystem, contributing to endpoint security and identity-driven access governance across Microsoft 365, on-premises Active Directory (AD), and cloud-native Entra ID. You will work closely with senior engineers and the security team to keep users, devices, and applications secure and well-managed. KeyResponsibilitiesIdentity & Access Management•       Support the configuration and maintenance of Entra ID (Azure AD), including Conditional Access policies and Multi-Factor Authentication (MFA). •       Assist in managing Identity Lifecycle processes, including provisioning and de-provisioning of user accounts across on-premises Active Directory and cloud identity systems. •       Help implement and maintain Passwordless authentication to reduce credential-based risks. •       Participate in access reviews and assist in enforcing least-privileged access principles. Security Engineering & Endpoint Protection•       Assist n operating Microsoft Defender for Endpoint and Defender for Office 365(EPP/EDR) to monitor and remediate security threats. •       Support the deployment and management of Microsoft Purview for Data Loss Prevention(DLP) and information protection. •       Contribute to the development of automated response playbooks using PowerShell and Microsoft Graph API. Automation &Monitoring•       Write and maintain PowerShell and Python scripts to automate routine identity and security tasks. •       Use KQL and Endpoint Analytics to monitor device health and application performance across the estate. •       Assist in building and maintaining self-service portals for staff and students to reduce helpdesk ticket volume. •       Support reporting and dashboards using tools such as PowerBI. General Responsibilities•       Work with stakeholders to understand business requirements and translate them into technical solutions. •       Assist in ensuring compliance with IM8 and Agency IT Policies and Standards. •       Collaborate with other government agencies and central services teams to support government-wide services. •       Support day-to-day delivery and maintenance of IT infrastructure services. What We Are Looking ForTechnical Skills•       Basic working knowledge of Active Directory and Entra ID (Azure AD), including user and group management. •       Familiarity with Microsoft 365 security tools such as Microsoft Defender and Microsoft Purview. •       Some experience or exposure to PowerShell scripting or other scripting languages(Python, Bash). •       Understanding of fundamental security concepts such as MFA, least privilege, and Zero Trust principles. Preferred Qualifications•       Relevant certifications are a plus, such as SC-300 (Microsoft Identity and Access Administrator), MS-500 (Microsoft 365 Security Administration), or equivalent. •       Diploma or degree in Computer Science, Information Technology, or a related field. Personal Attributes•       Eager to learn and develop skills in identity and security engineering. •       Good communication skills, both written and verbal, with the ability to work effectively in a team. •       Organised, proactive, and able to manage tasks independently with appropriate guidance. •       A team player who is willing to contribute across different areas as needed. Note: Training will be provided