Technical Specialist Advisory

Scotiabank • Toronto, ON

7d • Onsite

About The Position

We are seeking an experienced Senior Engineer Third-Party Application Patch Management to Lead an enterprise-scale third-party application patch management across complex endpoint environments, ensuring applications are securely updated, compliant with SLAs, and aligned to risk-based vulnerability management. Focuses on proactive patching, automation, and operational resilience to reduce cybersecurity risk.

Requirements

• Bachelor’s degree in computer science, Information Technology, or a related field (or equivalent work experience).
• 5+ years of experience in endpoint engineering, patch management, or desktop engineering
• Strong knowledge of endpoint operating systems Windows, macOS, iOS, Android.
• Strong experience with Intune, MECM/SCCM, Patch My PC, and Windows enterprise environments
• Understanding of network protocols, authentication methods, and enterprise security frameworks.
• Experience supporting patch management in large enterprise organizations, ideally 100,000+ endpoints
• Familiarity with scripting and automation (e.g., PowerShell, Bash, Python) for endpoint management tasks.
• Strong troubleshooting, reporting, automation, and stakeholder management skills
• Excellent communication and collaboration skills, with the ability to work across technical and non-technical teams.

Nice To Haves

• Relevant certifications (e.g., Microsoft Certified: Modern Desktop Administrator, CompTIA Security+, CISSP) are a plus.
• Microsoft 365 Certified: Fundamentals (MS-900)
• MD-102: Endpoint Administrator (Intune & Windows management)
• SC-900: Security, Compliance, and Identity Fundamentals
• SC-300: Identity and Access Administrator (Entra ID)
• Demonstrated expertise and a minimum of five years' experience in: Microsoft Endpoint Manager (MCM,Intune), PowerShell scripting

Responsibilities

• Own end-to-end patch lifecycle: identify, prioritize, test, deploy, verify, and monitor third-party application updates.
• Execute large-scale, phased (pilot/ring-based) deployments to minimize disruption.
• Manage and optimize patching platforms (Intune, MECM/SCCM, Patch My PC).
• Prioritize and remediate vulnerabilities using risk-based and SLA-driven approaches, including emergency patching and mitigations
• Automate patching workflows and improve efficiency through scripting and standardization.
• Maintain accurate application inventory and documentation to support decision-making and audits.
• Produce operational metrics and reporting to track performance and reduce risk exposure.
• Monitor compliance, troubleshoot failures, and drive remediation of non-compliant devices
• Partner with Security teams to address critical vulnerabilities within required SLA windows
• Maintain detailed documentation of configurations, SOPs, and compliance reports.

Benefits

• Diversity, Equity, Inclusion & Allyship
• Accessibility and Workplace Accommodations
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior