Windows Endpoint Resilience Engineer (Patch & Compliance)

Scotiabank • Toronto, ON

11d • Onsite

About The Position

Join our team! Would you like to complete your internship with an organization that has been in the market for more than 35 years, dedicated to improving our customers’ financial well-being through comprehensive and innovative solutions? The Role: Technical Specialist Advisory, Modern Endpoint & Patch Engineering. In this role, you will champion a customer-focused culture that strengthens employee experience while leveraging enterprise platforms, partnerships, and technical expertise. You will design, implement, and support Windows Autopilot provisioning services, including deployment profiles, Enrollment Status Page (ESP), dynamic group assignment, Autopilot Reset, pre-provisioning, Entra ID join, and Intune enrollment. You will lead the enterprise cloud patch management practice across Windows Update for Business, Microsoft Autopatch, Microsoft 365 Apps, and driver and firmware updates. Establish deployment ring strategies that enable safe, predictable, and measurable updates across approximately 94,000 workstations globally. Develop and manage third-party application patching capabilities using enterprise patch management platforms integrated with Intune, ensuring alignment with vulnerability remediation objectives and security standards. Define and evolve enterprise standards for Company Portal and Intune application delivery, including packaging governance, application lifecycle management, self-service experiences, and targeting strategies. Implement and maintain CIS benchmarks, security baselines, and compliance controls in partnership with Cyber Security and OS Product teams, ensuring secure and consistent deployment at enterprise scale. Lead complex troubleshooting and root-cause analysis activities related to provisioning, patching, compliance, and enrollment services, driving permanent corrective actions and platform improvements. Support tenant modernization initiatives across subsidiary organizations, including Intune adoption, co-management transitions, and cloud endpoint management transformation programs. Advance platform maturity through automation and engineering best practices using PowerShell, Microsoft Graph API, Azure Automation, and other modern automation frameworks. Partner with Cyber Security, Identity, Networking, End User Services, and Operations teams to embed security-by-design principles, Zero Trust controls, and audit-ready processes. Ensure adherence to ITIL service management practices, change management standards, risk assessment requirements, and operational support commitments, including participation in major incident response and Patch Tuesday activities. Apply sound judgment and risk-based decision making while ensuring compliance with internal policies, regulatory requirements, and security controls. Contribute to a collaborative, high-performing engineering culture focused on innovation, accountability, continuous improvement, and technical excellence.

Requirements

• Bachelor’s degree in computer science, Information Technology, Engineering, or equivalent practical experience.
• 5-8 years of experience in endpoint engineering, modern device management, workplace technology, or platform engineering, including at least 4 years of hands-on experience with Microsoft Intune.
• Strong expertise in Microsoft Intune, Windows Autopilot, Entra ID, Conditional Access, and Windows Update for Business or Microsoft Autopatch.
• Experience implementing and managing enterprise-scale third-party application patching solutions integrated with Intune such as PathMypc.
• Deep understanding of Windows servicing, Patch Tuesday processes, deployment rings, update governance, and vulnerability remediation practices.
• Experience delivering and supporting Win32 applications, Microsoft Store applications, MSIX packaging, and application lifecycle management within Intune.
• Knowledge of CIS benchmarks, Microsoft security baselines, device compliance policies, and endpoint security controls.
• Advanced PowerShell scripting skills and experience leveraging Microsoft Graph APIs for automation and reporting.
• Experience working within large, regulated enterprise environments; financial services industry experience is considered an asset.
• Relevant Microsoft certifications such as MD-102, SC-300, AZ-104, or equivalent certifications are considered an asset.
• Strong analytical, troubleshooting, stakeholder management, and communication skills.
• Spanish language proficiency is considered an asset and may support collaboration with LATAM-based teams and subsidiaries.

Nice To Haves

• financial services industry experience is considered an asset.
• Relevant Microsoft certifications such as MD-102, SC-300, AZ-104, or equivalent certifications are considered an asset.
• Spanish language proficiency is considered an asset and may support collaboration with LATAM-based teams and subsidiaries.

Responsibilities

• Champion a customer-focused culture that strengthens employee experience while leveraging enterprise platforms, partnerships, and technical expertise.
• Design, implement, and support Windows Autopilot provisioning services, including deployment profiles, Enrollment Status Page (ESP), dynamic group assignment, Autopilot Reset, pre-provisioning, Entra ID join, and Intune enrollment.
• Lead the enterprise cloud patch management practice across Windows Update for Business, Microsoft Autopatch, Microsoft 365 Apps, and driver and firmware updates. Establish deployment ring strategies that enable safe, predictable, and measurable updates across approximately 94,000 workstations globally.
• Develop and manage third-party application patching capabilities using enterprise patch management platforms integrated with Intune, ensuring alignment with vulnerability remediation objectives and security standards.
• Define and evolve enterprise standards for Company Portal and Intune application delivery, including packaging governance, application lifecycle management, self-service experiences, and targeting strategies.
• Implement and maintain CIS benchmarks, security baselines, and compliance controls in partnership with Cyber Security and OS Product teams, ensuring secure and consistent deployment at enterprise scale.
• Lead complex troubleshooting and root-cause analysis activities related to provisioning, patching, compliance, and enrollment services, driving permanent corrective actions and platform improvements.
• Support tenant modernization initiatives across subsidiary organizations, including Intune adoption, co-management transitions, and cloud endpoint management transformation programs.
• Advance platform maturity through automation and engineering best practices using PowerShell, Microsoft Graph API, Azure Automation, and other modern automation frameworks.
• Partner with Cyber Security, Identity, Networking, End User Services, and Operations teams to embed security-by-design principles, Zero Trust controls, and audit-ready processes.
• Ensure adherence to ITIL service management practices, change management standards, risk assessment requirements, and operational support commitments, including participation in major incident response and Patch Tuesday activities.
• Apply sound judgment and risk-based decision making while ensuring compliance with internal policies, regulatory requirements, and security controls.
• Contribute to a collaborative, high-performing engineering culture focused on innovation, accountability, continuous improvement, and technical excellence.

Benefits

• Diversity, Equity, Inclusion & Allyship
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement
• Work-life balance matters to us — we are the first bank in Chile to reduce the workweek to 39 hours!
• Continuous learning and development — participate in projects, conferences, and events that help you build new skills and gain relevant knowledge.
• We are diverse and inclusive.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level