M365 Productivity & Collaboration Engineer (MS InTune, SCCM

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our

Purpose:

helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

The M365 Productivity & Collaboration Engineer is a hands‑on technical team member who delivers secure, scalable, and high‑performing Microsoft 365 productivity, collaboration, and endpoint solutions in a large enterprise environment. This role blends deep Windows OS, Microsoft 365, identity, and collaboration expertise with modern desktop engineering practices to enable world‑class end‑user experiences. The engineer thrives on solving complex business and technical problems, owns outcomes end‑to‑end, and balances operational excellence with project delivery.

• Design and deliver scalable and secure, Microsoft 365 and collaboration solutions aligned with the enterprise technology and end‑user computing roadmap.
• Act as a subject matter expert for Windows, M365 productivity, collaboration, identity, and endpoint platforms, owning engineering standards, roadmaps, service improvements, and feature enhancements.
• Serve as technical lead on initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
• Develop and maintain design specifications, and engineering artifacts that meet technical, functional, non‑functional, security, and regulatory requirements.

• Engineer and operate Microsoft 365 services including Teams, Entra  (Azure AD), Conditional Access, MFA, Intune, and Graph API integrations.
• Participate in identity security, assessment, and hardening initiatives across Entra , Conditional Access, and privileged access controls.
• Coordinate with business and application teams on SSO, identity lifecycle, and application integrations.
• Support audits and regulatory requirements (e.g., ISO, OSFI/OFSI, CDCP) by providing defensible engineering evidence and documentation.

• Design, engineer, and maintain standardized Windows 10/11 endpoint platforms, including imaging, deployment, and in‑place upgrades.
• Participate in Group Policy to Intune policy migrations and manage hybrid/comanaged environments using SCCM and Microsoft Intune.
• Develop, implement, and remediate endpoint security baselines, compliance policies, and desktop hardening standards.
• Support Windows servicing strategies including deployment rings, phased rollouts, and update orchestration using Windows Update for Business, SCCM, and Intune.

• Collaborate with operations and support teams to analyze incident, problem, and trend data for continuous improvement and capacity planning.
• Implement solutions to improve stability, performance, security, patching, and overall end‑user experience.
• Develop and maintain Power Shell automation for configuration, reporting, and operational efficiency.
• Identify when additional delivery capacity is required and coordinate internal, contract, or partner resources as needed.

• Partner closely with networking, server, storage, security, service desk, and frontline support teams to ensure solutions are supportable and aligned.
• Communicate technical concepts clearly…