IT Engineer – Endpoint, Identity and Security

About the role

Xenith, a B2B payment service provider, is hiring its first dedicated IT Engineer to own the technology running the company's own operations. The role sits in the Engineering department, supports every team across the business and reports to the Head of Engineering. It is open to candidates based in Singapore or Indonesia.

Key responsibilities

• Manage endpoints on macOS and Windows: enrolment, disk encryption, OS and patch policy, remote wipe
• Run the identity and access lifecycle: joiner, mover, leaver, SSO and password management, provisioning and revocation
• Administer business and collaboration platforms, including licensing, security configuration and costs
• Run security operations: endpoint protection, patching, vulnerability remediation, email and phishing defence, incident first response
• Review vendor security, respond to security assessments and produce access reviews, asset records and audit evidence
• Maintain network and remote-access posture with segmentation and least privilege
• Own procurement and hardware lifecycle, vendor relationships and warranty/replacement cycles
• Support engineers and non-technical teams, and choose and introduce the right tooling, automating repetitive work
• Write and own the policies for the function

Required profile

• 5+ years in IT, endpoint or systems engineering, including time as the only person responsible
• Hands-on macOS and Windows fleet management, having stood up an MDM from scratch
• Ownership of identity and access lifecycle with SSO, MFA and periodic access reviews
• Linux/macOS command line and scripting; ability to explain technical constraints simply
• Experience in a regulated or audited environment (PCI-DSS, ISO 27001 or SOC 2)
• Ability to work remotely across timezones and cultures, with excellent English communication and documentation

Required skills

• MDM: Jamf, Intune, Kandji or equivalent
• Identity providers: Okta, Entra ID, Google Workspace or equivalent
• Scripting: Bash, PowerShell or Python
• VPN, firewall and least-privilege design
• SaaS administration at company scale

Bonus points: being the first IT or security hire at a growing company, multi-country operations, cloud platform and cloud identity familiarity, EDR or device compliance tooling, and AI-assisted workflow tools.