Sun Life

Desktop Engineer

Sun Life

full-time

Posted on:

Location Type: Hybrid

Location: WaterlooCanada

Visit company website

Explore more

AI Apply
Apply

Salary

💰 CA$90,000 - CA$140,000 per year

Job Level

About the role

  • Design, engineer, and deliver scalable, secure, and standardized desktop solutions aligned with the enterprise end‑user computing roadmap.
  • Act as a subject matter expert for desktop engineering, owning engineering standards, technical roadmaps, service improvements, and platform enhancements.
  • Serve as a technical lead on desktop initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
  • Design, build, and maintain Windows 11 deployment strategies including imaging, provisioning, upgrade paths, and lifecycle management.
  • Engineer and maintain endpoint management solutions using SCCM and Microsoft Intune, including co‑management where applicable.
  • Support the Global Software Delivery teams Windows servicing strategies including deployment rings, update orchestration, and phased rollout of feature and quality updates using Windows Update for Business, SCCM, and Intune.
  • Develop, implement, and maintain desktop security baselines, compliance policies, and endpoint hardening standards aligned with security requirements.
  • Perform and remediate desktop baseline scanning and compliance assessments to ensure endpoints meet security and operational standards.
  • Manage hardware platforms including model onboarding, driver packaging, BIOS/firmware updates, and lifecycle refresh activities.
  • Implement solutions to improve desktop stability, performance, security, patching, and overall end‑user experience.
  • Maintain accurate and current technical documentation for all desktop services and solutions in accordance with service design standards.
  • Balance a busy operational workload while independently running desktop engineering projects from a technical perspective (with PM support).
  • Identify when additional capacity is required and engage or coordinate contract and partner resources to support delivery.
  • Collaborate with operations and support teams to analyze incident, problem, and trend data for continuous improvement.
  • Work closely with infrastructure, security, service desk, and front‑line support teams to ensure desktop solutions are supportable and aligned.

Requirements

  • 7+ years of experience in the IT industry, with significant focus on endpoint or desktop engineering
  • Advanced experience with SCCM (applications, OS deployment, compliance, reporting)
  • Advanced experience with Windows 10/11 imaging, deployment, and in‑place upgrades
  • Advanced PowerShell scripting capabilities including module development and automation frameworks
  • Strong hands‑on experience with Microsoft Intune (device configuration, compliance, endpoint security)
  • Experience designing and implementing desktop security baselines and endpoint hardening
  • Experience with desktop compliance scanning and remediation
  • Strong knowledge of hardware platforms, driver management, BIOS/firmware updates, and vendor tooling
  • Experience with co‑management or hybrid endpoint environments
  • Experience designing and implementing Windows servicing rings and update deployment strategies
  • Experience working in large, globally distributed enterprise environments
  • General knowledge of networking, servers, identity, and security concepts as they relate to endpoint computing
  • University degree / college diploma in a related discipline or equivalent practical experience.
Benefits
  • Wellness programs that support the three pillars of your health – mental, physical, and financial
  • The opportunity to move along a variety of career paths with amazing networking potential
  • Flexible working hours
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
desktop engineeringWindows 11 deploymentSCCMMicrosoft IntunePowerShell scriptingdesktop security baselinescompliance scanningdriver managementBIOS updatesWindows servicing strategies
Soft Skills
technical leadcollaborationproblem analysisproject managementknowledge transferservice improvementoperational workload managementcommunication