Platform Operations Engineer

Key Responsibilities

Identity and Access Management

· Design, implement, configure and maintain IAM solutions across the organisation.

· Support the delivery, operation and continuous improvement of Whole-of-Government identity solutions used by government agencies and stakeholders.

· Configure and manage identity brokering and federation products, with a focus on the Microsoft ecosystem, including Active Directory, AD FS, Public Key Infrastructure and Microsoft Entra ID.

· Implement and manage authentication and authorisation protocols, including Kerberos, SAML, OAuth and OpenID Connect.

· Use Microsoft Graph API to support identity administration, integration and automation.

· Ensure the security, resilience, governance and compliance of identity platfrom.

Platform Automation and Operations

· Develop and maintain scripts, tools and automation to reduce operational toil and eliminate repetitive manual tasks.

· Build and maintain platform and deployment automation using appropriate scripting, configuration management and CI/CD practices.

· Apply DevSecOps principles to platform, identity and security automation.

· Support day-to-day operations, troubleshoot incidents and resolve IAM and platform-related issues.

· Contribute to monitoring, documentation, testing, change management and operational readiness activities.

Collaboration and Stakeholder Engagement

· Work closely with team members to plan, deliver and support identity and automation initiatives.

· Collaborate with cross-functional teams, government agencies, vendors and technology partners to resolve issues and deliver outcomes.

· Communicate technical matters clearly to both technical and non-technical stakeholders.

· Share knowledge, support teammates and contribute positively to a collaborative and inclusive team culture.

· Participate in on-call, incident response or other operational support arrangements where required.

Required Skills and Experience

Core Requirements

· Degree in Computer Science, Computer Engineering, Information Technology, Engineering or a related discipline, or an equivalent combination of relevant qualifications and professional experience.

· At least 2 years of experience in IAM, platform engineering, automation or a related field.

· Experience with directory and identity services, such as Active Directory, LDAP, AD FS and Microsoft Entra ID.

· Strong understanding of identity and federation protocols, including SAML, OAuth and OpenID Connect. Knowledge of Kerberos is an advantage.

· Experience using Microsoft Graph API for identity management, integration or automation tasks.

· Proficiency in scripting and automation using PowerShell, Python or similar technologies.

· Knowledge of identity governance, access management and compliance requirements.

· Strong troubleshooting, analytical and problem-solving skills.

· Good written and verbal communication skills.

· Demonstrated ability to work effectively as a team player in a collaborative, multi-stakeholder environment.

· Willingness to support the operations and continuous improvement of Whole-of-Government identity services.

Preferred Qualifications

· Microsoft Certified: Identity and Access Administrator Associate.

· Microsoft Certified: Azure Security Engineer Associate.

· Relevant Azure, AWS or DevOps certifications.

· Experience supporting identity federation or shared identity platforms across multiple organisations or agencies

· Knowledge of, and practical experience working with, Singapore Government identity platforms, together with architectural experience designing and integrating identity solutions in government, regulated or large enterprise environments.