M365 Productivity & Collaboration Engineer

Sun Life • Waterloo, ON

1d • CA$100,000 - CA$143,000 • Hybrid

About The Position

The M365 Productivity & Collaboration Engineer is a hands-on technical team member who delivers secure, scalable, high-performing Microsoft 365 productivity, collaboration, and endpoint solutions in a large enterprise environment. The role combines Windows OS, Microsoft 365, identity, collaboration, and modern desktop engineering expertise to support strong end-user experiences. The engineer takes ownership of outcomes from design through operations, balancing operational excellence with project delivery.

The role designs and operates Microsoft 365 services and Windows endpoint platforms, supports identity security and regulatory requirements, improves operational stability and end-user experience, and partners with technical and business teams to deliver supportable solutions. The position is hybrid, with employees choosing to work from the office or virtually based on business, Client, and individual needs.

Requirements

• 7+ years of experience in the IT industry, with a strong focus on Microsoft 365, identity, collaboration, and/or endpoint engineering.
• Strong written and verbal communication skills and excellent interpersonal skills.
• Proven troubleshooting, analytical, and problem-solving abilities in complex enterprise environments.
• Ability to manage competing priorities and balance operational responsibilities with project delivery.
• University degree or college diploma in a related discipline, or equivalent practical experience.

Nice To Haves

• Deep understanding of Microsoft 365, collaboration, and security concepts.
• Advanced hands-on experience with Microsoft Intune device configuration, compliance, and endpoint security.
• Advanced hands-on experience with Group Policy security and configuration.
• Advanced hands-on experience with Windows 10/11 imaging, deployment, and upgrade strategies.
• Advanced hands-on experience with Entra ID/Azure AD, MFA, Conditional Access, and P2 capabilities.
• Strong experience with endpoint security baselines, hardening, and compliance scanning.
• Advanced PowerShell scripting and automation skills.
• Experience with Intune, co-management, and hybrid endpoint environments.
• Knowledge of identity management, SSO, LDAP/LDAPS, and certificate services/PKI.
• Experience supporting audits and regulatory requirements.
• Working knowledge of endpoint security tooling such as BitLocker and endpoint protection platforms.

Responsibilities

• Design and deliver scalable, secure Microsoft 365 and collaboration solutions aligned with enterprise technology and end-user computing roadmaps.
• Serve as a subject matter expert for Windows, M365 productivity, collaboration, identity, and endpoint platforms; own engineering standards, roadmaps, service improvements, and feature enhancements.
• Lead technical initiatives by building, validating, testing, and documenting solutions, and ensuring operational handover and knowledge transfer.
• Develop and maintain design specifications and engineering artifacts that meet technical, functional, non-functional, security, and regulatory requirements.
• Engineer and operate Microsoft 365 services, including Teams, Entra ID (Azure AD), Conditional Access, MFA, Intune, and Graph API integrations.
• Participate in identity security assessment and hardening across Entra ID, Conditional Access, and privileged access controls.
• Coordinate with business and application teams on SSO, identity lifecycle, and application integrations.
• Support audits and regulatory requirements by providing engineering evidence and documentation.
• Design, engineer, and maintain standardized Windows 10/11 endpoint platforms, including imaging, deployment, and in-place upgrades.
• Participate in Group Policy-to-Intune migrations and manage hybrid or co-managed environments using SCCM and Microsoft Intune.
• Develop, implement, and remediate endpoint security baselines, compliance policies, and desktop hardening standards.
• Support Windows servicing strategies, including deployment rings, phased rollouts, and update orchestration using Windows Update for Business, SCCM, and Intune.
• Collaborate with operations and support teams to analyze incident, problem, and trend data for continuous improvement and capacity planning.
• Implement solutions to improve stability, performance, security, patching, and the overall end-user experience.
• Develop and maintain PowerShell automation for configuration, reporting, and operational efficiency.
• Identify when additional delivery capacity is required and coordinate internal, contract, or partner resources as needed.
• Partner with networking, server, storage, security, service desk, and frontline support teams to ensure solutions are supportable and aligned.
• Communicate technical concepts clearly to technical and non-technical stakeholders.
• Complete applicable background checks before the start date and during employment, in accordance with company policies and practices.

Benefits

• Wellness programs supporting mental, physical, and financial health.
• Opportunities to pursue a variety of career paths with networking potential.
• Hybrid work flexibility, with the choice to work from the office or virtually based on business, Client, and individual needs.
• Eligible employees may participate in incentive plans; payments are discretionary and subject to individual and company performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree