About the Role

We are looking for a Workplace ITSpecialistto help transform how technology is delivered to employees acrossPropertyGuru’sregional offices — moving us from traditional, ticket-driven IT support to a modern, automated, engineering-led workplace.

This is a builder’s role. You will design and ship automation thateliminatesmanual work — one-touch onboarding and offboarding, zero-touch device provisioning, self-service access — while providing deep (Level 2/3) technicalexpertiseacross Microsoft 365, Entra ID, Intune, and our endpoint fleet. You will treat IT operations as an engineering discipline: solutions are scripted, version-controlled in Git, peer-reviewed, and documented — not clicked together in portals.

The ideal candidate has already led or contributed to a transformation from traditional ITSM to modern workplaceengineering, andcan show working automation they have built to prove it.

What You Will Do

Automation & Workplace Engineering (primary focus)

• Build one-touch employee lifecycle automation:end-to-end onboarding and offboarding workflows (HR trigger → identity → licensing → groups → device → apps → access revocation) so new joiners are productive on day one and leavers are cleanly deprovisioned.

• Engineer zero-touch device provisioningwith Windows Autopilot and Intune (and macOS equivalents), replacing manual imaging and setup.

• Automate routine IT operationsusing PowerShell, Microsoft Graph API, Power Automate, and REST APIs — license management, security group management, compliance reporting, fleet health monitoring, and access reviews.

• Apply software engineering practices to IT:version control in Git, code review, testing, and repeatable/idempotent scripts; move configuration toward configuration-as-code where practical.

• Build self-service and shift-left capabilities(app catalogs, automated access requests, chat-based helpers) that deflect tickets and reduce dependence on manual support.

• Identifyandeliminatetoilcontinuously find manual, repetitive processes and engineer them away, measuring the hours saved.

Microsoft 365 & Identity Engineering

• Administer and improve Microsoft 365 services: Exchange Online, Teams, SharePoint Online, OneDrive, Intune, and Entra ID.

• Own identity lifecycle automation in Entra ID: dynamic groups, entitlement management, access packages, SCIM provisioning, SSO/enterprise application integrations.

• Design andmaintainConditional Access, MFA, and identity security policies aligned with Zero Trust and least-privilege principles.

• Administer Azure resources supporting workplace services (e.g., Automation Accounts, Logic Apps, Azure Functions used for IT automation).

Endpoint & Device Management

• Manage the Windows and macOS fleet with Microsoft Intune / MDM: security baselines, compliance policies, applicationpackagingand deployment.

• Run patch management and vulnerability remediation programmatically (Windows Update for Business / Autopatch, Defender recommendations).

• Drive Windows 11 upgrades, hardware refresh, and device lifecycle management with automated, data-driven processes.

• Build endpointmonitoringand fleet health dashboards to shift IT from reactive tickets to proactive remediation.

Advanced Support & Operations

• Provide Level 2/3 escalation support for complex issues across Windows, macOS, Microsoft 365, networking, meeting room technology, and enterprise applications — with a bias toward permanent, engineered fixes over repeat workarounds.

• Support regional offices onsite and remotely;participatein on-call and major incidentresponsewhenrequired

• Meet SLAs while driving down ticket volume through root-cause elimination and automation.

• Support collaboration and AV platforms: Microsoft Teams Rooms, Zoom Rooms, Logitech Rally;assistwith networking fundamentals (VPN, Wi-Fi, switching, DNS/DHCP,firewall).

Security & Compliance

• Maintain endpoint and identity compliance aligned with ISO 27001; support audits and security reviews with automated evidence collection and reporting.

• Implement least-privilege access (RBAC, PIM) and endpoint security controls; act on Microsoft Defender and Secure Score recommendations.

Documentation, Projects & Mentoring

• Document as an engineer: runbooks, architecture diagrams, SOPs, and knowledge base articles kept alongside code in Git.

• Deliver regional IT projects: office builds and relocations, M365 migrations, endpoint modernization, meeting room deployments, and automation initiatives.

• Mentor junior engineers in scripting, automation, and modern workplacepractices;raise the engineering bar across the team.

What You Bring

Required

• 2–5years in IT engineering, end-user computing, modern workplace, or IT infrastructure roles, with strong hands-on depth.

• An engineering mindset:you default to automating problems away rather than resolving themmanually, andcan show automation you have personally built and shipped.

• Strong PowerShell and Microsoft Graph API skills— able to build production-quality automation, not just run one-off scripts.

• Hands-on administration of Microsoft Entra ID and Azure:identity lifecycle, Conditional Access, enterprise apps/SSO, RBAC, and Azure services used for automation.

• Deep Microsoft 365 administration experience(Exchange Online, Teams, SharePoint, OneDrive, Intune) in an enterprise environment.

• Modern endpoint managementexpertiseIntune, Autopilot, compliance policies, application packaging across Windows 10/11 and macOS.

• Experience with Active Directory and Group Policy, including hybrid identity environments.

• Solid networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi-Fi, switching).

• Excellent communication and customer empathy; able to explain technical decisions to non-technical stakeholders.

Strongly Preferred

• A track recordof transforming traditional ITSM into modern workplace engineering— e.g., you have implemented one-touch onboarding/offboarding, zero-touch provisioning, or replaced manual runbooks with automated workflows.

• Git and modern development workflow experience:version-controlled scripts and configurations, pull requests / code review, and ideally CI/CD pipelines (GitHub Actions, Azure DevOps) for IT automation.

• Configuration-as-code infrastructure-as-code exposure(e.g., Terraform or Microsoft365DSC for Intune and Entra ID configuration).

• Power Platform experience (Power Automate, Power Apps) with an understanding of governance and whenlow-codevs. pro-code isappropriate

• Python or another general-purpose scripting language; comfort working with REST APIs, JSON, and webhooks.

• Experience using AI tools (e.g., Copilot, Claude) to accelerate scripting, documentation, and support workflows — and helping roll such tooling out to employees.

• Experience with virtualization platforms and cloud services beyond M365.

Certifications (advantageous, notrequired)

• Microsoft Certified: Endpoint Administrator Associate (MD-102), Microsoft 365 Administrator Expert (MS-102), or Microsoft Applied Skills (Intune, Entra ID, Automation).

• ITIL Foundation, CompTIA Network+/Security+, Cisco CCNA, or Microsoft Power Platform Fundamentals.

What Success Looks Like

• Within 12 months, employeeonboardingand offboarding run as one-touch automated workflows with measurable reductions in provisioning time and manual errors.

• Device provisioning is zero-touch; a new laptop reaches a productive, compliant state without engineer hands-on time.

• Recurring incident categories are engineered away, reducing ticket volume while SLA performance and employee satisfaction improve.

• IT automation lives in version-controlled repositories with documentation, and junior engineers are contributing to it.

• Endpoint compliance, patch currency, and Secure Score measurably improve, with automated reporting supporting ISO 27001 audits.

• You are the trusted technical advisor for modern workplace decisions and a multiplier for the wider team.

Personal Attributes

• Builder’s mentality with strong ownership — you see a manual process and itch to automate it.

• Strong analytical and troubleshooting skills;rigorous aboutroot cause.

• Continuouslearnerwith genuine curiosity fornew technology, including AI-assisted ways of working.

• Self-motivated, well organized, and able to prioritize in a fast-paced regional environment.

• Collaborative team player who lifts others through mentoring and knowledge sharing.