Desktop Engineering Specialist

Sun Life

Desktop Engineering Specialist at Sun Life focused on secure and scalable Windows endpoint solutions. Leading desktop initiatives and technical standards in a dynamic enterprise environment.

Posted 4/16/2026full-timeWaterloo • 🇨🇦 CanadaSeniorLead💰 CA$90,000 - CA$140,000 per yearWebsite

About the role

Key responsibilities & impact

Design, engineer, and delivering scalable, secure, and standardized desktop solutions aligned with the enterprise end‑user computing roadmap.
Act as a subject matter expert for desktop engineering, owning engineering standards, technical roadmaps, service improvements, and platform enhancements.
Serve as a technical lead on desktop initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
Design, build, and maintain Windows 11 deployment strategies including imaging, provisioning, upgrade paths, and lifecycle management.
Engineer and maintain endpoint management solutions using SCCM and Microsoft Intune, including co‑management where applicable.
Support the Global Software Delivery teams Windows servicing strategies including deployment rings, update orchestration, and phased rollout of feature and quality updates using Windows Update for Business, SCCM, and Intune.
Develop, implement, and maintain desktop security baselines, compliance policies, and endpoint hardening standards aligned with security requirements.
Perform and remediate desktop baseline scanning and compliance assessments to ensure endpoints meet security and operational standards.
Manage hardware platforms including model onboarding, driver packaging, BIOS/firmware updates, and lifecycle refresh activities.
Implement solutions to improve desktop stability, performance, security, patching, and overall end‑user experience.
Maintain accurate and current technical documentation for all desktop services and solutions in accordance with service design standards.
Balance a busy operational workload while independently running desktop engineering projects from a technical perspective (with PM support).

Requirements

What you’ll need

7+ years of experience in the IT industry, with significant focus on endpoint or desktop engineering
Advanced experience with SCCM (applications, OS deployment, compliance, reporting)
Advanced experience with Windows 10/11 imaging, deployment, and in‑place upgrades
Advanced PowerShell scripting capabilities including module development and automation frameworks
Strong hands‑on experience with Microsoft Intune (device configuration, compliance, endpoint security)
Experience designing and implementing desktop security baselines and endpoint hardening
Experience with desktop compliance scanning and remediation
Strong knowledge of hardware platforms, driver management, BIOS/firmware updates, and vendor tooling
Experience with co‑management or hybrid endpoint environments
Experience designing and implementing Windows servicing rings and update deployment strategies
Experience working in large, globally distributed enterprise environments
Familiarity with BitLocker, endpoint protection, and device security controls

Benefits

Comp & perks

Wellness programs that support the three pillars of your health – mental, physical, and financial
The opportunity to move along a variety of career paths with amazing networking potential.
Flexible work arrangements based on business and Client needs
Employee well-being prioritized with a positive work culture
Accommodations for persons with disabilities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SCCMMicrosoft IntuneWindows 10Windows 11PowerShelldesktop security baselinesendpoint hardeningcompliance scanningdriver managementBIOS updates

Soft Skills

technical leadsubject matter expertproject managementoperational workload managementknowledge transferservice improvementsdocumentationproblem-solvingcommunicationcollaboration