Responsibilities

• Mentor junior team members and support project rollouts
• Deliver advanced support for escalated cases and coordinate with external vendors
• Partner with managed services providers on vulnerability, patching, monitoring, and alerting
• Develop standardized processes and maintain operational documentation
• Build compliance metrics and reports for endpoint and infrastructure improvement
• Perform routine backup and restore drills
• Manage endpoints across desktop and mobile using Intune, GPO, registry, and PowerShell
• Administer virtual machines on Azure and AliCloud
• Oversee vulnerability and patch management with Intune and Qualys
• Implement and manage Single Sign-On solutions with Microsoft Entra and third-party SaaS
• Configure conditional access for secure authentication
• Operate Microsoft security and compliance tools including Purview, MDE, KQL, and Sentinel
• Manage email filtering with Barracuda and Microsoft Exchange
• Support M365 suite including Copilot, SharePoint, and Teams
• Maintain remote work solutions with Prisma Access and Azure Virtual Desktop
• Administer print management systems such as Papercut
• Support voice and conferencing platforms including MS Teams and Zoom
• Manage data centre and hub room operations

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or equivalent experience; Microsoft Windows certification (MCSA/MCSE) preferred
• 5+ years of experience with Microsoft endpoint solutions (Intune, Group Policy, Registry, PowerShell)
• 5+ years of experience managing Microsoft Azure virtual machines
• 5+ years of experience with Microsoft Entra SSO, including conditional access and SaaS integrations
• 5+ years of experience with remote work solutions such as Prisma Access and Azure Virtual Desktop
• 3+ years of experience with security operations tools (PAM, Qualys, MDE)
• Solid understanding of network support (DHCP, DNS, Certificate Authority)
• Strong knowledge of ITIL processes and procedures
• Document management experience is an advantage
• Excellent communication, problem-solving, and analytical skills
• Skilled in vendor management, particularly with infrastructure managed services and security operations centers
• Client-focused with proven ability to build strong relationships
• Experienced technical lead contributing to IT team success
• High discretion in handling sensitive information and maintaining confidentiality
• Committed to continuous improvement, with expertise in change management and vulnerability/patch management
• Resilient under pressure with ability to meet strict deadlines
• Demonstrated leadership, work ethic, and mentoring capabilities
• Competent at advanced levels of application systems analysis
• Familiar with project management and structured operational practices
• Exceptional troubleshooting abilities
• Strong proficiency in spoken and written English
• Preference for spoken Cantonese and Putonghua
• Preference for reading and writing in both traditional and simplified Chinese