Desktop Engineer

Sun Life

Desktop Engineering Specialist responsible for desktop engineering practices and managing Windows endpoint solutions. Engages in initiatives that improve stability, performance, and security of desktop environments.

Posted 4/17/2026full-timeWaterloo • 🇨🇦 CanadaSeniorLead💰 CA$90,000 - CA$140,000 per yearWebsite

About the role

Key responsibilities & impact

Design, engineer, and deliver scalable, secure, and standardized desktop solutions aligned with the enterprise end‑user computing roadmap.
Act as a subject matter expert for desktop engineering, owning engineering standards, technical roadmaps, service improvements, and platform enhancements.
Serve as a technical lead on desktop initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
Design, build, and maintain Windows 11 deployment strategies including imaging, provisioning, upgrade paths, and lifecycle management.
Engineer and maintain endpoint management solutions using SCCM and Microsoft Intune, including co‑management where applicable.
Support the Global Software Delivery teams Windows servicing strategies including deployment rings, update orchestration, and phased rollout of feature and quality updates using Windows Update for Business, SCCM, and Intune.
Develop, implement, and maintain desktop security baselines, compliance policies, and endpoint hardening standards aligned with security requirements.
Perform and remediate desktop baseline scanning and compliance assessments to ensure endpoints meet security and operational standards.
Manage hardware platforms including model onboarding, driver packaging, BIOS/firmware updates, and lifecycle refresh activities.
Implement solutions to improve desktop stability, performance, security, patching, and overall end‑user experience.
Maintain accurate and current technical documentation for all desktop services and solutions in accordance with service design standards.
Balance a busy operational workload while independently running desktop engineering projects from a technical perspective (with PM support).
Identify when additional capacity is required and engage or coordinate contract and partner resources to support delivery.
Collaborate with operations and support teams to analyze incident, problem, and trend data for continuous improvement.
Work closely with infrastructure, security, service desk, and front‑line support teams to ensure desktop solutions are supportable and aligned.

Requirements

What you’ll need

7+ years of experience in the IT industry, with significant focus on endpoint or desktop engineering
Advanced experience with SCCM (applications, OS deployment, compliance, reporting)
Advanced experience with Windows 10/11 imaging, deployment, and in‑place upgrades
Advanced PowerShell scripting capabilities including module development and automation frameworks
Strong hands‑on experience with Microsoft Intune (device configuration, compliance, endpoint security)
Experience designing and implementing desktop security baselines and endpoint hardening
Experience with desktop compliance scanning and remediation
Strong knowledge of hardware platforms, driver management, BIOS/firmware updates, and vendor tooling
Experience with co‑management or hybrid endpoint environments
Experience designing and implementing Windows servicing rings and update deployment strategies
Experience working in large, globally distributed enterprise environments
General knowledge of networking, servers, identity, and security concepts as they relate to endpoint computing
University degree / college diploma in a related discipline or equivalent practical experience.

Benefits

Comp & perks

Wellness programs that support the three pillars of your health – mental, physical, and financial
The opportunity to move along a variety of career paths with amazing networking potential
Flexible working hours

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

desktop engineeringWindows 11 deploymentSCCMMicrosoft IntunePowerShell scriptingdesktop security baselinescompliance scanningdriver managementBIOS updatesWindows servicing strategies

Soft Skills

technical leadcollaborationproblem analysisproject managementknowledge transferservice improvementoperational workload managementcommunication