What we're looking for
We are seeking a hands-on, self-directed engineer to own the technology the company itself runs on. You'll be working closely with one of our portfolio companies in the fintech sector as part of the Engineering department, supporting every team across the business - engineering, product, commercial, operations, finance and people. This company is a leading B2B fintech platform in its field, processing over US $2B across multiple currencies annually.
This is our first dedicated hire for the function, reporting to the Head of Engineering. Basic processes exist, but they were built by whoever had time and none of them scale. You will evaluate and choose the tooling, set the standards, write the policy, and decide what gets fixed first. The role starts inside Engineering, where the need is sharpest, and grows into the function that serves the whole company.
If you would rather build an IT function than inherit one, this is that seat.
This role is open to candidates based in either Singapore or Indonesia
.
Own endpoint management across macOS and Windows for company devices — enrolment, disk encryption, OS and patch policy, remote wipe - keeping every device managed and accounted for
Run the identity and access lifecycle end to end: joiner, mover, leaver; SSO and password management; provisioning complete before a start date and revocation on the day someone leaves
Administer the core business and collaboration platforms the company runs on, including licensing, security configuration and cost
Run security operations for the internal estate: endpoint protection, patch and vulnerability remediation, email and phishing defence, and first response when something looks wrong
Own vendor security review, and respond to the security assessments our counter parties send us, building reusable answers rather than starting from scratch each time
Produce the access reviews, asset records and audit evidence our compliance obligations require, continuously rather than as a project
Maintain network and remote-access posture across our offices, applying segmentation and least privilege, and extend it as the company grows
Own procurement and hardware lifecycle - vendor relationships, purchasing standards, warranty, replacement cycles across the regions we operate in
Support engineers and non-technical teams alike, and set the standard for how quickly and clearly that support is delivered
Choose and introduce the tooling this function needs. We would rather buy what the market already solves well than build it, and we expect you to make that call on cost, fit and maintenance
Automate what is left - provisioning, onboarding, environment setup, internal reporting. If something is done by hand three times, we expect you to remove it
Write and own the policies that go with all of the above, and be the person who decides what good looks like
5+ years in IT, endpoint, or systems engineering
, including time as the only person responsibleHands-on experience managing both macOS and Windows fleets, and having stood up an MDM from scratch (
Jamf, Intune, Kandji or equivalent)Proven ownership of the identity and access lifecycle - SSO, MFA, offboarding and evidenced periodic access reviews (
Okta, Entra , Google Workspace or equivalent)Comfortable on a Linux/macOS command line
, and able to script your way out of repetitive work (
Bash, Power Shell or Python
). You don't need to be a developer, but "I’d automate that" should be your first instinctWorking knowledge of VPN, firewall and least-privilege access design
Experience administering business SaaS platforms at company scale, including licensing and security settings
Experience operating in a regulated or audited environment -…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).