IT Infra Engineer (Endpoint Management)

IT Infra Engineer (Endpoint Management) | Careers | AvePoint Opens in a new window Opens an external website Opens an external website in a new window

This website utilizes technologies such as cookies to enable essential site functionality, as well as for analytics, personalization, and targeted advertising. You may change your settings at any time or accept the default settings. You may close this banner to continue with only essential cookies. Privacy Policy

Manage Preferences Accept All Reject Non-Essential

Storage Preferences

IT Infra Engineer (Endpoint Management)

Location

Singapore

Department

Technology

Posted Date

8/6/2026

About AvePoint

AvePoint is the unifying Trust Layer for AI. AvePoint enables more than 28,000 organizations and 6,000 channel partners to protect, secure, and govern their entire AI estate across data, infrastructure, AI and agents for Microsoft, Google, Salesforce, and other leading cloud environments — so that enterprises can deploy AI with confidence and scale innovation without scaling risk. To learn more, visit www.avepoint.com.

Job Description

Senior / IT Infra Engineer (Unified Endpoint Management)

Role Overview

We are seeking highly skilled and innovative engineer to join our transformative SSOE Programme that manages more than 350 schools across Singapore. This is an exceptional opportunity to shape the future of educational technology infrastructure and enhance the learning experience of more than 450,000 students and 35,000 education professionals.

As a Senior / IT Infra Engineer specializing in Unified Endpoint Management (UEM), you will design and scale our holistic device ecosystem. You will be responsible for the seamless migration and orchestration of a multi-platform environment including Windows, macOS, iOS (iPads), ChromeOS And Android.

Your mission is two-fold

maintaining a hardened, high-performance environment for Enterprise users while architecting a flexible, resilient, and manageable digital learning space for Students. You will ensure that regardless of the hardware or the user, the experience is secure, automated, and ready for use from the moment the box is opened.

Key Responsibilities

• Multi-Platform Engineering & Orchestration
• Unified Management: Architect, migrate and maintain a "single pane of glass" management strategy using Microsoft Intune, Apple School Manager, and Google Admin Console to ensure seamless integrations.
• Zero-Touch Provisioning: Design and optimize automated deployment workflows—including Windows Autopilot, Apple School Manager (DEP), and Chrome Zero-Touch Enrollment—to eliminate manual imaging.
• Platform Specialization: Windows: Manage physical hardware and Cloud PCs via modern MDM policies.
• Apple: Oversee macOS and iPadOS configuration profiles and VPP app distribution.
• ChromeOS: Manage fleet-wide policies and application delivery for Chromebooks.
• Enterprise vs. Student Strategy
• Enterprise Excellence: Implement "Zero Trust" security baselines, Conditional Access, and seamless SSO for corporate staff to ensure maximum productivity and data protection.
• Student Enablement: Design specialized configurations for student devices, focusing on Shared iPad setups, "Kiosk Mode" for high-stakes testing, and web-content filtering.
• Scale & Lifecycle: Manage the lifecycle of thousands of devices, from procurement and automated enrolment to remote wipe and decommissioning.
• Secure Endpoint Management
• Architect secure device compliance frameworks within Intune, ensuring only "healthy" and compliant devices (including Cloud PCs) can access corporate resources.
• Utilize tools such as KQL (Kusto Query Language) and Sentinel to build advanced security visualizations and monitoring workbooks, identifying anomalous behaviour across the M365 stack.
• Eliminate technical debt by transitioning legacy GPOs and security configurations to modern, cloud-based security baselines.
• Automation & Observability
• Automation: Engineer for scalability by building reusable automation and utilizing PowerShell scripting and related tools like PowerBI, Dynatrace and Axonius to monitor service health and reporting to derive insights.
• Scripting & API: Use PowerShell, Bash, and Python to automate repetitive tasks and interact with the Microsoft Graph API for custom reporting.
• Fleet Analytics: Utilize KQL and Endpoint Analytics to monitor device health, battery wear, and application performance across the entire estate.
• Self-Service: Develop and maintain "Self-Service" portals for both staff and students to empower users and reduce helpdesk ticket volume.
• General Responsibilities
• Engage stakeholders to translate business requirement into design and services to meet the intended availability, capacity, resiliency, security and continuity requirements.
• Forecast budget needed to support the project initiatives and maintenance contracts.
• Ensure MOE’s related Technical Architecture are in compliance with IM8 and Agency’s IT Policies and Standards.
• Manage day-to-day delivery and support of application infrastructure services and collaborate with other government agencies and central services teams to facilitate and deliver government-wide services.

Leadership & Strategic Compliance

• Strategic Design: Develop global standards for device hardware, OS patch management, and application packaging.
• Cross-Functional Collaboration: Partner with Security, EdTech, and Operations teams to ensure device policies meet both regulatory compliance and educational outcomes.
• Mentorship: Act as the Tier 3 escalation point and mentor for junior engineers and campus technicians.

What We Are Looking For

• Deep UEM Expertise: Proven experience migrating and managing 1,000+ endpoints across Windows, Apple, and Chrome ecosystems.
• M365 Mastery: Advanced knowledge of Microsoft Intune (MEM) and its integration with Entra ID and Defender.
• Education-Specific Tech: Familiarity with Apple School Manager, Google for Education, and managing devices in a shared-user or classroom environment.
• Automation-First Mindset: Advanced proficiency in optimizing and automating cross-platform workflows using PowerShell scripting and MS Graph API.
• Security Mindset: Experience implementing Defender for Endpoint, Purview and other related security tools across diverse operating systems.
• Preferred Certifications: Microsoft Certified: Endpoint Administrator Associate (MD-102), Google Professional ChromeOS Administrator, ACSP (Apple Certified Support Professional).
• Proactive and dedicated individual with good leadership and multi-tasking capabilities as well as the ability to work independently without the need for close supervision.
• Experienced in contract and vendor management.
• Good communication skills, both oral and written, with the ability to pitch ideas and communicate effectively with stakeholders.
• Team player with strong organization and people handling skills.

Any personal data you share with us during the application process will be processed strictly in compliance with applicable data protection laws and our Privacy Notice.

Why AvePoint?

We are invested in the success of our colleagues, partners, customers, and community. We do this by promoting global collaboration and taking pride in helping, sharing, mentoring, and coaching each other.

Life at AvePoint

Similar Job Positions

Junior QA Engineer - Da Nang Da Nang, Da Nang, Vietnam

Junior QA Engineer - Hanoi Hanoi, Hanoi, Vietnam

Junior Software Developer - Da Nang Da Nang, Da Nang, Vietnam

Ready to see AvePoint in action?

Experience the power of comprehensive data protection that goes beyond traditional solutions.

Get a Demo

By clicking 'Get a Demo,' you agree to the use of your data in accordance with AvePoint's Privacy Notice, including for marketing purposes.

Solutions

Platform

Resources

Services

About

Solutions

Need

• Foundational AI Readiness
• Agentic AI Governance
• Cloud ROI & Optimization
• Security Posture Management
• Ransomware Protection & Disaster Recovery
• Regulatory Compliance & Information Lifecycle
• Cloud Transformation & Modernization
• Multi-Tenant Management at Scale
• Operational Governance

Industry

Environment

Partners

Platform

For Organizations

• Records & Information Lifecycle Management
• Cloud Backup & Ransomware Defense
• Data & Security Insights
• Express Recovery for Microsoft 365
• Policy Enforcement & Drift Control
• Content and Identity Migration
• Access & Power Platform Governance
• Adoption & Usage Analytics
• Automated Workspace Management
• Secure Messaging & Virtual Data Rooms
• License & Cost Management
• Data Owner Engagement

For Partners

Resources

By Type

• Account Portal
• Customer Stories
• eBooks
• Webinars
• Blogs
• Events
• Analyst Reports
• Product Brochures
• #shifthappens

By Topic

• Disaster Recovery
• Cloud Backup Complete Guide
• Data Sovereignty
• Information Lifecycle Management
• Data Residency
• Zero Trust AI
• AI Governance
• Managed Service Providers

Services

AvePoint Client Services

• Advisory & Implementation
• Deployment Services

About

Company

• Overview
• History
• Leadership
• Corporate Responsibilities
• Awards
• Careers
• Investor Relations
• Newsroom
• Contact Us

2026 © All Rights Reserved | AvePoint, Inc

• Sitemap
• Terms & Conditions
• Privacy Notice
• Trust Center
• AvePoint Anonymous Reporting Hotline

Back to top