Digital Workplace Engineer

About IDP

IDP is the global leader in international education services, delivering global success to students, test takers and our partners, through trusted human relationships, digital technology and customer research. An Australian-listed company, we operate in more than 50 countries around the world.

Our team is comprised of over 7,000 people of various nationalities, ages and cultural backgrounds. Proudly customer-first, our expert people are powered by global technology. Together, we offer unmatched services, helping local dreams become realities, all over the world.

Learn more at www.careers.idp.com

Role purpose

The Digital Workplace Engineer sits within IDP’s Cyber Security Platforms and Engineering team and is accountable for the day-to-day engineering, secure configuration, governance and continuous improvement of IDP’s Microsoft 365 services and platforms — including Microsoft Intune, Defender, SharePoint, OneDrive, Exchange Online, Teams, the Microsoft 365 services/licence estate and the broader end-user computing toolset. 

As part of IDP’s evolution to a domain-led, platforms-driven operating model, this role brings the previous Digital Workplace capability into the Cyber Security function — baking security into every laptop, desktop and branch office and moving repeatable workplace controls from reactive support into a mature, automated and measurable operating model. 

The successful candidate will be proactive, technically strong, communicative and a self-starter who leads from the front rather than waiting for direction. They will be heavily involved in the management of  platform health, secure-by-default baselines, patching and vulnerability hygiene, modern collaboration governance and the safe enablement of AI-ready foundations across IDP’s global tenant. 

The role also owns the end-to-end Digital Workplace SOPs and knowledge base referenced in IDP’s Confluence and ServiceNow knowledge sources, ensuring service boundaries, runbooks and ‘how to engage’ documentation stay current and useful for the global business.

Key accountabilities

Microsoft 365 Services

• Responsible for configuring and operating IDP's Microsoft 365 security baselines across Intune, Exchange Online, SharePoint, OneDrive, Teams, and related services.
• Maintain tenant governance standards and secure-by-default configurations.
• Drive standardization, configuration drift monitoring, change discipline, and lifecycle management across the digital workplace environment.
• Handle escalations from the Service Desk.

End User Compute

• Manage Intune device compliance baselines, configuration profiles, application deployment, and Windows Autopilot/zero-touch provisioning.
• Manage application deployments and decommissioning while ensuring applications remain up to date.
• Continuously improve the endpoint user experience by leveraging automation, self-service capabilities, and proactive issue prevention.
• Handle escalations from the Service Desk.

Patching & Vulnerability Governance

• Support patching and vulnerability governance through Ivanti Neurons, including reporting improvements, remediation tracking, and operational visibility.
• Partner with the SOC, Network Security, Infrastructure, and Service Desk teams to drive vulnerability remediation in line with IDP expectations and SLAs.
• Maintain patch readiness for Windows, macOS, and supported workplace applications.

Key Accountabilities 2

Data Protection, Collaboration Governance & Copilot Readiness

• Govern the lifecycle of SharePoint, OneDrive, and Teams, including external sharing, permissions hygiene, retention policies, sensitivity labels, and operational runbooks.
• Enable the secure adoption of Microsoft 365 Copilot by strengthening data governance, addressing oversharing risks, and implementing appropriate access controls.

Digital Workplace Software, Licensing & Tooling

• Manage Digital Workplace software platforms and licensing, including Microsoft 365, Teams, Adobe, Upstream Printer, and the broader software portfolio.
• Support Microsoft 365 license optimization initiatives.
• Monitor SharePoint storage consumption and implement version trimming or other storage optimization activities as required.

SOPs, Knowledge & Service Boundaries

• Maintain the Digital Workplace Standard Operating Procedures (SOPs) and end-to-end process documentation in Confluence, along with the ServiceNow Knowledge Base.
• Ensure procedures, runbooks, ownership boundaries, and engagement documentation remain accurate, current, and easy to follow.
• Transition repeatable Level 2 and Level 3 Digital Workplace activities to the Service Desk or partner teams through well-defined procedures, quality controls, and measurable reduction in escalations.

Communication, Stakeholder Engagement & Leadership

• Act as a technical leader and trusted point of contact for Digital Workplace and Microsoft 365 security across the global organization.
• Communicate effectively with both technical and non-technical stakeholders, including Cyber Security leadership, Service Desk teams, business users, and external vendors.
• Lead initiatives independently, proactively identify risks, recommend practical solutions, and mentor or coach other teams where appropriate.

Compliance, Risk & Reporting

• Operate Digital Workplace platforms in accordance with IDP's security policies, risk appetite, privacy obligations, and regulatory requirements.
• Produce operational metrics covering Intune compliance, patch compliance, endpoint security posture, platform health, and overall service performance.
• Ensure audit readiness through documented procedures, reliable operational records, and comprehensive platform reporting.

Required experience