Senior Workplace IT Specialist

PropertyGuru is Southeast Asia’s leading PropTech company, and the preferred destination for over 32 million property seekers monthly to connect with over 50,000 agents monthly to find their dream home. PropertyGuru empowers property seekers with more than 2.1 million real estate listings, in-depth insights, and solutions that enable them to make confident property decisions across Singapore, Malaysia, Thailand and Vietnam. was launched in Singapore in 2007 and since then, PropertyGuru Group has made the property journey a transparent one for property seekers in Southeast Asia. In the last 18 years, PropertyGuru has grown into a high-growth PropTech company with a robust portfolio including leading property marketplaces and award-winning mobile apps across its markets in Singapore, Malaysia, Vietnam, Thailand as well as the region’s biggest and most respected industry recognition platform – PropertyGuru Asia Property Awards , events and publications across Asia. For more information, please visit: ; PropertyGuru Group on LinkedIn . Recognised as a Top Employers Certified* organisation, we’re proud to be among the best workplaces in the region—celebrating an inclusive culture of excellence, growth, and well-being. About the Role We are looking for a Workplace IT Specialist to help transform how technology is delivered to employees across PropertyGuru’s regional offices — moving us from traditional, ticket-driven IT support to a modern, automated, engineering-led workplace. This is a builder’s role. You will design and ship automation that eliminates manual work — one-touch onboarding and offboarding, zero-touch device provisioning, self-service access — while providing deep (Level 2/3) technical expertise across Microsoft 365, Entra ID, Intune, and our endpoint fleet. You will treat IT operations as an engineering discipline: solutions are scripted, version-controlled in Git, peer-reviewed, and documented — not clicked together in portals. The ideal candidate has already led or contributed to a transformation from traditional ITSM to modern workplace engineering, and can show working automation they have built to prove it. What You Will Do Automation & Workplace Engineering (primary focus) Build one-touch employee lifecycle automation: end-to-end onboarding and offboarding workflows (HR trigger → identity → licensing → groups → device → apps → access revocation) so new joiners are productive on day one and leavers are cleanly deprovisioned. Engineer zero-touch device provisioning with Windows Autopilot and Intune (and macOS equivalents), replacing manual imaging and setup. Automate routine IT operations using PowerShell, Microsoft Graph API, Power Automate, and REST APIs — license management, security group management, compliance reporting, fleet health monitoring, and access reviews. Apply software engineering practices to IT: version control in Git, code review, testing, and repeatable/idempotent scripts; move configuration toward configuration-as-code where practical. Build self-service and shift-left capabilities (app catalogs, automated access requests, chat-based helpers) that deflect tickets and reduce dependence on manual support. Identify and eliminate toil: continuously find manual, repetitive processes and engineer them away, measuring the hours saved. Microsoft 365 & Identity Engineering Administer and improve Microsoft 365 services: Exchange Online, Teams, SharePoint Online, OneDrive, Intune, and Entra ID. Own identity lifecycle automation in Entra ID: dynamic groups, entitlement management, access packages, SCIM provisioning, SSO/enterprise application integrations. Design and maintain Conditional Access, MFA, and identity security policies aligned with Zero Trust and least-privilege principles. Administer Azure resources supporting workplace services (e.g., Automation Accounts, Logic Apps, Azure Functions used for IT automation). Endpoint & Device Management Manage the Windows and macOS fleet with Microsoft Intune / MDM: security baselines, compliance policies, application packaging and deployment. Run patch management and vulnerability remediation programmatically (Windows Update for Business / Autopatch, Defender recommendations). Drive Windows 11 upgrades, hardware refresh, and device lifecycle management with automated, data-driven processes. Build endpoint monitoring and fleet health dashboards to shift IT from reactive tickets to proactive remediation. Advanced Support & Operations Provide Level 2/3 escalation support for complex issues across Windows, macOS, Microsoft 365, networking, meeting room technology, and enterprise applications — with a bias toward permanent, engineered fixes over repeat workarounds. Support regional offices onsite and remotely; participate in on-call and major incident response when required. Meet SLAs while driving down ticket volume through root-cause elimination and automation. Support collaboration and AV platforms: Microsoft Teams Rooms, Zoom Rooms, Logitech Rally; assist with networking fundamentals (VPN, Wi-Fi, switching, DNS/DHCP, firewall). Security & Compliance Maintain endpoint and identity compliance aligned with ISO 27001; support audits and security reviews with automated evidence collection and reporting. Implement least-privilege access (RBAC, PIM) and endpoint security controls; act on Microsoft Defender and Secure Score recommendations. Documentation, Projects & Mentoring Document as an engineer: runbooks, architecture diagrams, SOPs, and knowledge base articles kept alongside code in Git. Deliver regional IT projects: office builds and relocations, M365 migrations, endpoint modernization, meeting room deployments, and automation initiatives. Mentor junior engineers in scripting, automation, and modern workplace practices; raise the engineering bar across the team. What You Bring Required 5-8 years in IT engineering, end-user computing, modern workplace, or IT infrastructure roles, with strong hands-on depth. An engineering mindset: you default to automating problems away rather than resolving them manually, and can show automation you have personally built and shipped. Strong PowerShell and Microsoft Graph API skills — able to build production-quality automation, not just run one-off scripts. Hands-on administration of Microsoft Entra ID and Azure: identity lifecycle, Conditional Access, enterprise apps/SSO, RBAC, and Azure services used for automation. Deep Microsoft 365 administration experience (Exchange Online, Teams, SharePoint, OneDrive, Intune) in an enterprise environment. Modern endpoint management expertise: Intune, Autopilot, compliance policies, application packaging across Windows 10/11 and macOS. Experience with Active Directory and Group Policy, including hybrid identity environments. Solid networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi-Fi, switching). Excellent communication and customer empathy; able to explain technical decisions to non-technical stakeholders. Strongly Preferred A track record of transforming traditional ITSM into modern workplace engineering — e.g., you have implemented one-touch onboarding/offboarding, zero-touch provisioning, or replaced manual runbooks with automated workflows. Git and modern development workflow experience: version-controlled scripts and configurations, pull requests / code review, and ideally CI/CD pipelines (GitHub Actions, Azure DevOps) for IT automation. Configuration-as-code / infrastructure-as-code exposure (e.g., Terraform or Microsoft365DSC for Intune and Entra ID configuration). Power Platform experience (Power Automate, Power Apps) with an understanding of governance and when low-code vs. pro-code is appropriate. Python or another general-purpose scripting language; comfort working with REST APIs, JSON, and webhooks. Experience using AI tools (e.g., Copilot, Claude) to accelerate scripting, documentation, and support workflows — and helping roll such tooling out to employees. Experience with virtualization platforms and cloud services beyond M365. Certifications (advantageous, not required) Microsoft Certified: Endpoint Administrator Associate (MD-102), Microsoft 365 Administrator Expert (MS-102), or Microsoft Applied Skills (Intune, Entra ID, Automation). ITIL Foundation, CompTIA Network+/Security+, Cisco CCNA, or Microsoft Power Platform Fundamentals. What Success Looks Like Within 12 months, employee onboarding and offboarding run as one-touch automated workflows with measurable reductions in provisioning time and manual errors. Device provisioning is zero-touch; a new laptop reaches a productive, compliant state without engineer hands-on time. Recurring incident categories are engineered away, reducing ticket volume while SLA performance and employee satisfaction improve. IT automation lives in version-controlled repositories with documentation, and junior engineers are contributing to it. Endpoint compliance, patch currency, and Secure Score measurably improve, with automated reporting supporting ISO 27001 audits. You are the trusted technical advisor for modern workplace decisions and a multiplier for the wider team. Personal Attributes Builder’s mentality with strong ownership — you see a manual process and itch to automate it. Strong analytical and troubleshooting skills; rigorous about root cause. Continuous learner with genuine curiosity for new technology, including AI-assisted ways of working. Self-motivated, well organized, and able to prioritize in a fast-paced regional environment. Collaborative team player who lifts others through mentoring and knowledge sharing. Our commitment to you: Hybrid flexible working that focuses on outcomes over hours. Holistic rewards package covering your financial, physical & mental health. Multi-directional career development across all levels. Inclusive benefits like equal paternity leave, supporting all employees in work-life balance. At PropertyGuru, you’ll be part of a Top Employers Certified* company that puts people at the heart of everything we do.