Digital Workplace & Collaboration Security

Own and secure the Microsoft 365 environment (Email/Exchange Online, Teams, SharePoint, OneDrive), including tenant hardening, data protection, and secure collaboration controls.
Manage email security, sharing policies, and access governance across collaboration platforms.

Mobile Device Management

Administer and secure the mobile fleet via Microsoft Intune, including enrolment, compliance policies, conditional access, and app protection.

Identity & Access Governance

Support identity lifecycle, provisioning, and access certification through SailPoint and its integration with workplace platforms.

Endpoint Management & Automated Deployment

Design, build, and operate automated endpoint deployment using SCCM (MECM) and ManageEngine.
Own application packaging, patching, and lifecycle management for non-Windows / third-party applications (e.g., 7-Zip, Notepad++), ensuring timely updates and vulnerability remediation.
Define, implement, and maintain Windows 10 / Windows 11 hardening baselines aligned to CIS Benchmarks and Microsoft Security Baselines.
Monitor endpoint compliance and remediate configuration drift.

Bachelor's degree in Computer Science, Information Technology, Information Security, or related disciplines
4 years of experience in endpoint / digital workplace engineering with a strong security focus
Hands-on experience securing and administering Microsoft 365 (Exchange Online, Teams, SharePoint, OneDrive)
Solid experience with SCCM and ManageEngine for endpoint deployment, patching, and application management
Practical experience administering Microsoft Intune (MDM/MAM, compliance, conditional access)
Demonstrated experience applying Windows 10/11 hardening baselines (CIS / Microsoft Security Baselines)
Working knowledge of SailPoint for identity governance and access management
Experience packaging and maintaining third-party / non-Windows applications
Scripting and automation skills (PowerShell, Office Scripts) is a big advantage
Certifications such as Microsoft SC-300, MD-102, SC-200, AZ-500 or CompTIA Security+ is preferred
Experience in change management and supporting production environments
Ability to work under pressure and prioritise work effectively

Bupa offers 5 days’ work per week and comprehensive remuneration packages including base salary, study assistance plan, company pension plan, life and medical benefit, dental benefit, annual leave, examination leave, etc.

Bupa is an equal opportunity employer and welcomes applications from qualified candidates. Information provided will be treated in strict confidence and only be used for consideration of application with Bupa.

Personal data collected will be used for recruitment purposes only. Bupa will be in touch for any opportunities that matches your profile. All personal data of unsuccessful application will be destroyed 24 months from the date of receiving the application. Full version of Data Privacy Notice available upon request.

What we offer?

Pension Plan
Paid Time Off
Work From Home
Training & Development
Performance Bonus

Quality Health Services remote jobs

Information Security Analyst

Workplace Security Engineer

客戶服務助理 Customer Services Representative/ Assistant Officer, CS