Desktop Engineering Specialist
Sun Life
full-time
Posted on:
Location Type: Hybrid
Location: Waterloo • Canada
Visit company websiteExplore more
Salary
💰 CA$90,000 - CA$140,000 per year
About the role
- Design, engineer, and delivering scalable, secure, and standardized desktop solutions aligned with the enterprise end‑user computing roadmap.
- Act as a subject matter expert for desktop engineering, owning engineering standards, technical roadmaps, service improvements, and platform enhancements.
- Serve as a technical lead on desktop initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
- Design, build, and maintain Windows 11 deployment strategies including imaging, provisioning, upgrade paths, and lifecycle management.
- Engineer and maintain endpoint management solutions using SCCM and Microsoft Intune, including co‑management where applicable.
- Support the Global Software Delivery teams Windows servicing strategies including deployment rings, update orchestration, and phased rollout of feature and quality updates using Windows Update for Business, SCCM, and Intune.
- Develop, implement, and maintain desktop security baselines, compliance policies, and endpoint hardening standards aligned with security requirements.
- Perform and remediate desktop baseline scanning and compliance assessments to ensure endpoints meet security and operational standards.
- Manage hardware platforms including model onboarding, driver packaging, BIOS/firmware updates, and lifecycle refresh activities.
- Implement solutions to improve desktop stability, performance, security, patching, and overall end‑user experience.
- Maintain accurate and current technical documentation for all desktop services and solutions in accordance with service design standards.
- Balance a busy operational workload while independently running desktop engineering projects from a technical perspective (with PM support).
Requirements
- 7+ years of experience in the IT industry, with significant focus on endpoint or desktop engineering
- Advanced experience with SCCM (applications, OS deployment, compliance, reporting)
- Advanced experience with Windows 10/11 imaging, deployment, and in‑place upgrades
- Advanced PowerShell scripting capabilities including module development and automation frameworks
- Strong hands‑on experience with Microsoft Intune (device configuration, compliance, endpoint security)
- Experience designing and implementing desktop security baselines and endpoint hardening
- Experience with desktop compliance scanning and remediation
- Strong knowledge of hardware platforms, driver management, BIOS/firmware updates, and vendor tooling
- Experience with co‑management or hybrid endpoint environments
- Experience designing and implementing Windows servicing rings and update deployment strategies
- Experience working in large, globally distributed enterprise environments
- Familiarity with BitLocker, endpoint protection, and device security controls
Benefits
- Wellness programs that support the three pillars of your health – mental, physical, and financial
- The opportunity to move along a variety of career paths with amazing networking potential.
- Flexible work arrangements based on business and Client needs
- Employee well-being prioritized with a positive work culture
- Accommodations for persons with disabilities
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
SCCMMicrosoft IntuneWindows 10Windows 11PowerShelldesktop security baselinesendpoint hardeningcompliance scanningdriver managementBIOS updates
Soft Skills
technical leadsubject matter expertproject managementoperational workload managementknowledge transferservice improvementsdocumentationproblem-solvingcommunicationcollaboration