Workspace Security Engineer

About the role

OCBC, Singapore's oldest bank, is looking for a hands-on Workspace Security Engineer to strengthen its security engineering capability across Microsoft endpoint and modern workplace technologies. The role suits an experienced EUC or modern workplace engineer who understands the Microsoft ecosystem and is ready to take deeper ownership of security policy engineering, solution design, automation and control assurance.

Key responsibilities

• Engineer Microsoft endpoint and modern workplace security policies, configurations and technical controls.
• Contribute to the workspace security solution roadmap and the evolution of endpoint security capabilities.
• Translate security requirements and control gaps into policy designs, configuration changes and engineering solutions.
• Configure and enhance security across Microsoft Intune, Microsoft 365, Entra ID, Conditional Access, device compliance and endpoint-management services.
• Improve security baselines, endpoint protection, attack-surface reduction, application and device control, vulnerability remediation and endpoint telemetry.
• Evaluate new Microsoft security features and develop recommendations, test plans and implementation approaches.
• Define security configuration standards, reference settings, technical guardrails and exception requirements.
• Develop monitoring and reporting for policy deployment, configuration compliance, control coverage and security effectiveness.
• Use PowerShell, Microsoft Graph APIs, scripting and automation to improve configuration management, validation and reporting.
• Investigate complex endpoint-security issues and produce engineering documentation, test evidence, implementation guidance and operating procedures.
• Collaborate with stakeholders across functions and share reusable engineering practices with the wider cybersecurity team.

Required profile

• Approximately 8 or more years of relevant experience in EUC, endpoint engineering, modern workplace, infrastructure or cybersecurity in enterprise environments.
• Strong hands-on experience with Microsoft Intune, Microsoft 365, Entra ID or Azure AD, Active Directory, Group Policy, device compliance and Conditional Access.
• Experience designing, configuring, testing or modernising endpoint policies, such as GPO-to-Intune migration or large-scale device-management initiatives.
• Ability to turn security requirements or control gaps into structured technical solutions and implementation plans.
• Strong troubleshooting, analytical, documentation, communication and stakeholder-management skills.

Required skills

• PowerShell, Microsoft Graph APIs, scripting, workflow automation or configuration-as-code.
• Preferred: Microsoft certifications in Azure, Microsoft 365, Security, Compliance and Identity, Endpoint Administration or related fields.
• Preferred: experience with endpoint protection, application control, attack-surface reduction, security monitoring, vulnerability management, privileged-workstation security, Windows and mobile-device security, and dashboard or compliance-reporting automation.

What we offer

• Competitive base salary.
• A suite of flexible benefits and community initiatives.
• Learning and professional development opportunities.