Workplace IT Specialist

For more information, please visit: PropertyGuruGroup.com; PropertyGuru Group on LinkedIn.

Recognised as a Top Employers Certified* organisation, we’re proud to be among the best workplaces in the region—celebrating an inclusive culture of excellence, growth, and well-being.

About the Role

We are looking for a Workplace ITSpecialistto help transform how technology is delivered to employees acrossPropertyGuru’sregional offices — moving us from traditional, ticket-driven IT support to a modern, automated, engineering-led workplace.

This is a builder’s role. You will design and ship automation thateliminatesmanual work — one-touch onboarding and offboarding, zero-touch device provisioning, self-service access — while providing deep (Level 2/3) technicalexpertiseacross Microsoft 365, Entra ID, Intune, and our endpoint fleet. You will treat IT operations as an engineering discipline: solutions are scripted, version-controlled in Git, peer-reviewed, and documented — not clicked together in portals.

The ideal candidate has already led or contributed to a transformation from traditional ITSM to modern workplaceengineering, andcan show working automation they have built to prove it.

What You Will Do

Automation & Workplace Engineering (primary focus)

Build one-touch employee lifecycle automation:end-to-end onboarding and offboarding workflows (HR trigger → identity → licensing → groups → device → apps → access revocation) so new joiners are productive on day one and leavers are cleanly deprovisioned.

Engineer zero-touch device provisioningwith Windows Autopilot and Intune (and macOS equivalents), replacing manual imaging and setup.

Automate routine IT operationsusing PowerShell, Microsoft Graph API, Power Automate, and REST APIs — license management, security group management, compliance reporting, fleet health monitoring, and access reviews.

Apply software engineering practices to IT:version control in Git, code review, testing, and repeatable/idempotent scripts; move configuration toward configuration-as-code where practical.

Build self-service and shift-left capabilities(app catalogs, automated access requests, chat-based helpers) that deflect tickets and reduce dependence on manual support.

Identifyandeliminatetoil:continuously find manual, repetitive processes and engineer them away, measuring the hours saved.

Microsoft 365 & Identity Engineering

Administer and improve Microsoft 365 services: Exchange Online, Teams, SharePoint Online, OneDrive, Intune, and Entra ID.

Own identity lifecycle automation in Entra ID: dynamic groups, entitlement management, access packages, SCIM provisioning, SSO/enterprise application integrations.

Design andmaintainConditional Access, MFA, and identity security policies aligned with Zero Trust and least-privilege principles.

Administer Azure resources supporting workplace services (e.g., Automation Accounts, Logic Apps, Azure Functions used for IT automation).

Endpoint & Device Management

Manage the Windows and macOS fleet with Microsoft Intune / MDM: security baselines, compliance policies, applicationpackagingand deployment.

Run patch management and vulnerability remediation programmatically (Windows Update for Business / Autopatch, Defender recommendations).

Drive Windows 11 upgrades, hardware refresh, and device lifecycle management with automated, data-driven processes.

Build endpointmonitoringand fleet health dashboards to shift IT from reactive tickets to proactive remediation.

Advanced Support & Operations

Provide Level 2/3 escalation support for complex issues across Windows, macOS, Microsoft 365, networking, meeting room technology, and enterprise applications — with a bias toward permanent, engineered fixes over repeat workarounds.

Support regional offices onsite and remotely;participatein on-call and major incidentresponsewhenrequired.

Meet SLAs while driving down ticket volume through root-cause elimination and automation.

Support collaboration and AV platforms: Microsoft Teams Rooms, Zoom Rooms, Logitech Rally;assistwith networking fundamentals (VPN, Wi-Fi, switching, DNS/DHCP,firewall).

Security & Compliance

Maintain endpoint and identity compliance aligned with ISO 27001; support audits and security reviews with automated evidence collection and reporting.

Implement least-privilege access (RBAC, PIM) and endpoint security controls; act on Microsoft Defender and Secure Score recommendations.

Documentation, Projects & Mentoring

Document as an engineer: runbooks, architecture diagrams, SOPs, and knowledge base articles kept alongside code in Git.

Deliver regional IT projects: office builds and relocations, M365 migrations, endpoint modernization, meeting room deployments, and automation initiatives.

Mentor junior engineers in scripting, automation, and modern workplacepractices;raise the engineering bar across the team.

What You Bring

Required

2–5years in IT engineering, end-user computing, modern workplace, or IT infrastructure roles, with strong hands-on depth.

An engineering mindset:you default to automating problems away rather than resolving themmanually, andcan show automation you have personally built and shipped.

Strong PowerShell and Microsoft Graph API skills— able to build production-quality automation, not just run one-off scripts.

Hands-on administration of Microsoft Entra ID and Azure:identity lifecycle, Conditional Access, enterprise apps/SSO, RBAC, and Azure services used for automation.

Deep Microsoft 365 administration experience(Exchange Online, Teams, SharePoint, OneDrive, Intune) in an enterprise environment.

Modern endpoint managementexpertise:Intune, Autopilot, compliance policies, application packaging across Windows 10/11 and macOS.

Experience with Active Directory and Group Policy, including hybrid identity environments.

Solid networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi-Fi, switching).

Excellent communication and customer empathy; able to explain technical decisions to non-technical stakeholders.

Strongly Preferred

A track recordof transforming traditional ITSM into modern workplace engineering— e.g., you have implemented one-touch onboarding/offboarding, zero-touch provisioning, or replaced manual runbooks with automated workflows.

Git and modern development workflow experience:version-controlled scripts and configurations, pull requests / code review, and ideally CI/CD pipelines (GitHub Actions, Azure DevOps) for IT automation.

Configuration-as-code / infrastructure-as-code exposure(e.g., Terraform or Microsoft365DSC for Intune and Entra ID configuration).

Power Platform experience (Power Automate, Power Apps) with an understanding of governance and whenlow-codevs. pro-code isappropriate.

Python or another general-purpose scripting language; comfort working with REST APIs, JSON, and webhooks.

Experience using AI tools (e.g., Copilot, Claude) to accelerate scripting, documentation, and support workflows — and helping roll such tooling out to employees.

Experience with virtualization platforms and cloud services beyond M365.

Certifications (advantageous, notrequired)

Microsoft Certified: Endpoint Administrator Associate (MD-102), Microsoft 365 Administrator Expert (MS-102), or Microsoft Applied Skills (Intune, Entra ID, Automation).

ITIL Foundation, CompTIA Network+/Security+, Cisco CCNA, or Microsoft Power Platform Fundamentals.

What Success Looks Like

Within 12 months, employeeonboardingand offboarding run as one-touch automated workflows with measurable reductions in provisioning time and manual errors.

Device provisioning is zero-touch; a new laptop reaches a productive, compliant state without engineer hands-on time.

Recurring incident categories are engineered away, reducing ticket volume while SLA performance and employee satisfaction improve.

IT automation lives in version-controlled repositories with documentation, and junior engineers are contributing to it.

Endpoint compliance, patch currency, and Secure Score measurably improve, with automated reporting supporting ISO 27001 audits.

You are the trusted technical advisor for modern workplace decisions and a multiplier for the wider team.

Personal Attributes

Builder’s mentality with strong ownership — you see a manual process and itch to automate it.

Strong analytical and troubleshooting skills;rigorous aboutroot cause.

Continuouslearnerwith genuine curiosity fornew technology, including AI-assisted ways of working.

Self-motivated, well organized, and able to prioritize in a fast-paced regional environment.

Collaborative team player who lifts others through mentoring and knowledge sharing.

Our commitment to you:

Hybrid flexible working that focuses on outcomes over hours.

Holistic rewards package covering your financial, physical & mental health.

Multi-directional career development across all levels.

Inclusive benefits like equal paternity leave, supporting all employees in work-life balance.

At PropertyGuru, you’ll be part of a Top Employers Certified* company that puts people at the heart of everything we do.