Lead Engineer/ Engineer, Immigration & Checkpoints Infrastructure & Security

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth. The ICT Infrastructure Sustainment Centre is dedicated to delivering robust and reliable information and communication technology (ICT) infrastructure solutions that empower the operations of the Ministry of Home Affairs (MHA). You play an important role in the implementation and maintenance of ICT end-user devices, networks and infrastructures for a Home Team Department (e.g. Singapore Police Force, Singapore Civil Defence Force, Singapore Prison Service, Immigration & Checkpoints Authority, etc.), always ensuring their operational readiness. You are expected to manage complex environments involving enterprise network technologies, large-scale endpoint services, Active Directory/Azure AD, shared storage and backup management, and Hybrid Cloud networks. Responsibilities The jobholder is responsible for the Governance, Risk, audit and process management of enterprise ICT infrastructure services systems (such as end-user devices, virtualised infrastructure, active directory, network, serve, etc.) that are across all MHA Home Team Departments (HTDs). The principal accountabilities of the job holder are: • Manage ICT Infrastructure Security Governance, Risk, and Compliance (GRC). Define business processes and controls. Champion IT Operation automation for compliance. • Serve as Point of Contact for ICT Project Handovers, ensuring "Security by Design". Lead new ICT security initiatives and infrastructure enhancements to comply with government policies. • Execute hands-on network management, troubleshooting, LAN/WAN design, NAC management, firewall configuration and configuration of NOC tools. • Perform Endpoint Infrastructure Management: Directly manage endpoint OS and common service software lifecycle, patching and device policy management. • Manage incidents and vendors to fulfil service levels and take corrective actions. • Manage contracts to ensure vendors meet operational needs. • Identify and evaluate cost-effective technical solutions (e.g., infrastructure refresh). Manage procurement, including tender specifications, evaluation, and awards. • Manage GRC processes and documentations. Handle 24/7 Security operations with tight response times. • Lead end-to-end device deployment (laptops, etc.) across agencies. Coordinate site readiness and user communications. • Oversee OS standardization and provisioning via MDM (Intune, SCCM). Ensure devices meet security baselines (encryption, hardening). • Manage OEMs for hardware availability. Maintain 100% inventory accuracy. Requirements • Tertiary qualification in Electronics/ Electrical Engineering, Computer Studies, or related disciplines such as ICT Technology or Cyber Security. • Minimally 1 year working experience in cyber security related programs such as audits support, risk assessments, audit findings remediation and cyber security compliance management. • Recently certified (less than 2 years ago) with CCIE/CCNP/CCNA, MCSE/MCSA, Azure Architect/Administrator, and/or professional certifications from OEMs of major technology providers would be an added advantage. • In-depth understanding of desktop clients/servers, cloud infrastructure, enterprise networking concepts (VLANs, Network Access Control, Load Balancing, Routing, Firewalls & IPS), software-defined network (SDN), structure cabling systems and working knowledge/skills in system administration such as Microsoft Windows Server and Active Directory. • Proficiency with ITSM tools (e.g., ServiceNow), network operations tools (e.g., Solarwinds, Tenable and Splunk), ITIL and Systems Engineering Lifecycle Management. Personal Characteristics & Behaviours We are looking for motivated individual(s) who: • is excellent in communication (both oral and written) for diverse audiences. • ability to apply risk-based approaches to audits. • has strong project, vendor, and contract-management skills. • can work independently without the need for close supervision, able to prioritize tasks, and remain calm under pressure. • is competent, self-motivated, proactive, dedicated, and responsible. All new appointees will be appointed on a two-year contract in the first instance. We wish to inform that only shortlisted candidates will be notified within 4 weeks upon closing of the advertisement. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. #L1-FL1