Ensign is hiring !
About the Role
We are seeking DevOps Engineer with strong Windows platform engineering capabilities to design, build, and automate solutions across our enterprise endpoint environment. This role sits at the intersection of software development and infrastructure automation — you will build Windows thick client applications, drive automation through scripting and Infrastructure as Code, and manage modern device deployment at scale through Microsoft Intune.
This is a hands-on engineering role suited to someone who enjoys building tools that make enterprise IT environments more secure, consistent, and efficient.
Key Responsibilities
- Design, develop, and maintain Windows thick client applications using the .NET Framework, including UI development, packaging, and deployment.
- Develop, test, and maintain Windows PowerShell scripts and modules to automate system administration, configuration management, and operational workflows.
- Build and manage infrastructure using Infrastructure as Code (IaC) practices — authoring, versioning, and deploying declarative configurations for repeatable, auditable environment provisioning.
- Administer and engineer solutions on Microsoft Intune, including application packaging and deployment, compliance and configuration policies, device enrolment (Windows Autopilot), and endpoint security baselines.
- Integrate Intune with broader Microsoft ecosystem components (Entra ID / Azure AD, Endpoint Analytics, Microsoft Graph API) to automate device lifecycle management and reporting.
- Troubleshoot and resolve issues across the application, scripting, and endpoint management layers, performing root cause analysis and implementing permanent fixes.
- Maintain source control hygiene, CI/CD pipelines, and technical documentation for all scripts, applications, and infrastructure definitions.
- Collaborate with security, infrastructure, and application teams to ensure solutions meet security, compliance, and operational standards.
Requirements
- Proficient in Windows PowerShell scripting — able to write production-grade scripts and modules for automation, system administration, and integration tasks (error handling, logging, remoting, module design).
- Proficient in Infrastructure as Code — hands-on experience with tools such as Terraform, Azure Bicep/ARM templates, Ansible, or PowerShell DSC to provision and manage infrastructure declaratively.
- Proficient in the .NET Framework for Windows thick client development — experience building desktop applications using WinForms and/or WPF in C#, including deployment and maintenance of enterprise desktop applications.
- Hands-on experience with Microsoft Intune — application deployment (Win32 app packaging), device configuration profiles, compliance policies, and Windows Autopilot provisioning.
Good to Have
- Experience with Microsoft Graph API for Intune/Entra ID automation.
- Familiarity with Azure services (Azure Functions, Log Analytics, Automation Accounts).
- Experience with CI/CD tooling (Azure DevOps, GitHub Actions) and Git-based workflows.
- Knowledge of endpoint security concepts — device hardening, CIS benchmarks, Defender for Endpoint.
- Relevant certifications such as MD-102 (Endpoint Administrator), AZ-104, or AZ-400.
Skills Required
- Production-grade Windows PowerShell scripting and module development (error handling, logging, remoting)
- Infrastructure as Code experience (Terraform, Azure Bicep/ARM templates, Ansible, or PowerShell DSC)
- .NET Framework desktop development using C# (WinForms and/or WPF), including UI, packaging, and deployment
- Hands-on Microsoft Intune experience: Win32 app packaging/deployment, configuration and compliance policies, Windows Autopilot
- Maintain source control hygiene, CI/CD pipelines, and technical documentation for scripts, applications, and infrastructure definitions
What We Do
Ensign InfoSecurity is the largest pure-play end-to-end cybersecurity service provider in Asia. Headquartered in Singapore, Ensign offers bespoke solutions and services to address their clients’ cybersecurity needs. Their core competencies are in the provision of cybersecurity advisory and assurance services, architecture design and systems integration services, and managed security services for advanced threat detection, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. Ensign has two decades of proven track record as a trusted and relevant service provider, serving clients from the public and private sectors in the Asia Pacific region
.png){kind=logo}
.jpeg)
