VP, M365 Engineering, Technology Group

Join to apply for the VP, M365 Engineering, Technology Group role at GIC

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long‑term investor, we work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

We are looking for an experienced and highly skilled Microsoft 365 Engineer with strong hands‑on expertise in engineering, security and automation. The ideal candidate will be responsible for building, securing, and maintaining Microsoft 365 services across the enterprise – ensuring optimal performance, robust security, and compliance. This is a technical, hands‑on engineering role that involves daily operational support, advanced troubleshooting, Power Shell automation, and collaboration with security and identity teams to enhance the M365 ecosystem.

• Design, build, configure, and manage core M365 & AVD services – Exchange Online, SharePoint Online, One Drive, Teams, Intune (including endpoint and mobile management) and AVD.
• Engineer and optimize device compliance, configuration profiles, and application protection policies in Intune.
• Perform M365 tenant management, including license allocation, mail flow rules, and Teams/SharePoint governance.
• Build and maintain automation scripts using Power Shell for reporting, compliance checks, and routine administration tasks.
• Troubleshoot complex service, sync, and policy issues across hybrid and cloud M365 environments.
• Implement and maintain Microsoft Defender for Office 365, Defender for Endpoint, and Microsoft Purview DLP and sensitivity labels.
• Enforce Conditional Access, MFA, and device compliance policies via Entra  Intune.
• Perform regular security posture reviews using Secure Score and compliance insights.
• Respond to security alerts and incidents from Defender and Entra , driving engineered remediation actions.
• Partner with identity and SOC teams to improve detection and harden M365 security configurations.

• Integrate M365 services with on-prem Active Directory, Entra , Azure, and security platforms (Sentinel/SIEM).
• Support hybrid identity scenarios including AAD Connect, authentication methods, and password policies.
• Collaborate with Red Team, Security Engineering, and Cloud Infrastructure teams to remediate findings and strengthen Zero Trust controls.

• Maintain up-to-date documentation, configuration baselines, and change records.
• Create runbooks, Power Shell scripts, and automation playbooks for common operational workflows that the Operations team will utilise.
• Stay current with Microsoft 365 roadmap updates, recommending improvements and adopting new features securely.

At least 12 years total IT experience, with 5+ years hands‑on in M365 engineering and security.

• Exchange Online, Teams, SharePoint, One Drive, and Intune.
• Microsoft Defender suite, Purview Compliance, and Entra  controls.
• Power Shell scripting (advanced level – automation, APIs, bulk actions, reporting).
• Conditional Access, MFA, identity protection, and device compliance.
• Experience managing hybrid identity setups (AAD Connect, password hash/single sign‑on).
• Strong analytical and troubleshooting skills for M365‑related incidents and service issues.
• Understanding of Zero Trust concepts and secure collaboration practices.

• Microsoft Certified: M365 Security Administrator Associate (MS-500)
• Microsoft Certified:
  Enterprise Administrator Expert (MS-100/MS-101)
• SC-300 or AZ-500 – a strong plus
• Experience working with Microsoft Sentinel or other SIEM tools.
• Familiarity with API integrations or Graph API for M365 automation.

We need to be forward‑looking to attract the right people to help us become the Leading Global…