About the job
AvePoint is hiring a Senior IT Infrastructure Engineer with a focus on Identity and Security for the SSOE Programme in Singapore. This position plays a key role in supporting technology solutions for more than 350 schools, reaching over 450,000 students and 35,000 education staff. The work centers on building secure, modern learning environments and strengthening the Microsoft 365 cloud platform.
Role overview
This engineer leads the design and rollout of secure endpoint environments. The role emphasizes Data Loss Prevention (DLP), Endpoint Protection Platforms (EPP), and Endpoint Detection and Response (EDR). Managing identity-driven access across both on-premises Active Directory and cloud-native Entra is a core responsibility, all within a Zero Trust security approach.
Key responsibilities
- Identity & Access Governance: Design and architect Entra ID (Azure AD) solutions, focusing on Conditional Access policies, Privileged Identity Management (PIM), and Identity Protection to enforce least-privileged access.
- Oversee complex identity lifecycle operations, ensuring secure integration between on-premises Active Directory and cloud-native identity providers.
- Implement and maintain passwordless authentication and Multi-Factor Authentication (MFA) to reduce credential-based risks.
- Security Engineering & Threat Protection: Collaborate with the security team to engineer and manage Microsoft Defender for Endpoint and Defender for Office 365 (EPP/EDR), proactively detecting threats and addressing vulnerabilities.
- Deploy and manage Microsoft Purview for information protection, DLP, and eDiscovery, keeping sensitive data governed and compliant.
- Develop automated response playbooks using PowerShell and Microsoft Graph API to address security incidents in real time.
