Modern Endpoint Management Engineer

Title: Modern Endpoint Management Engineer

Requisition : 263369

We are seeking an experienced Senior Engineer Third-Party Application Patch Management to Lead an enterprise-scale third‑party application patch management across complex endpoint environments, ensuring applications are securely updated, compliant with SLAs, and aligned to risk‑based vulnerability management. Focuses on proactive patching, automation, and operational resilience to reduce cybersecurity risk.

Is this role right for you? In this role, you will:

• Own end-to-end patch lifecycle: identify, prioritize, test, deploy, verify, and monitor third‑party application updates.
• Execute large‑scale, phased (pilot/ring‑based) deployments to minimize disruption.
• Manage and optimize patching platforms (Intune, MECM/SCCM, Patch My PC).
• Prioritize and remediate vulnerabilities using risk‑based and SLA‑driven approaches, including emergency patching and mitigations.
• Automate patching workflows and improve efficiency through scripting and standardization.
• Maintain accurate application inventory and documentation to support decision‑making and audits.
• Produce operational metrics and reporting to track performance and reduce risk exposure.
• Monitor compliance, troubleshoot failures, and drive remediation of non‑compliant devices.
• Partner with Security teams to address critical vulnerabilities within required SLA windows.
• Maintain detailed documentation of configurations, SOPs, and compliance reports.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• Bachelor’s degree in computer science, Information Technology, or a related field (or equivalent work experience).
• 5+ years of experience in endpoint engineering, patch management, or desktop engineering.
• Strong knowledge of endpoint operating systems Windows, macOS, iOS, Android.
• Strong experience with Intune, MECM/SCCM, Patch My PC, and Windows enterprise environments.
• Understanding of network protocols, authentication methods, and enterprise security frameworks.
• Experience supporting patch management in large enterprise organizations, ideally 100,000+ endpoints.
• Familiarity with scripting and automation (e.g., Power Shell, Bash, Python) for endpoint management tasks.
• Strong troubleshooting, reporting, automation, and stakeholder management skills.
• Excellent communication and collaboration skills, with the ability to work across technical and non‑technical teams.
• Relevant certifications (e.g., Microsoft Certified: Modern Desktop Administrator, CompTIA Security+, CISSP) are a plus.

Value added certifications:

• Microsoft 365 Certified:
  Fundamentals (MS-900)
• MD-102:
  Endpoint Administrator (Intune & Windows management)
• SC-900:
  Security, Compliance, and Identity Fundamentals
• SC-300:
  Identity and Access Administrator (Entra )
• Demonstrated expertise and a minimum of five years' experience in:
  Microsoft Endpoint Manager (MCM, Intune), Power Shell scripting

What's in it for you?

• Diversity, Equity, Inclusion & Allyship – we strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and embraced through bias‑free practices and inclusive values across Scotiabank.
• Accessibility and Workplace Accommodations – we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone.
• Upskilling through online courses, cross‑functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits starting day one.
• Community Engagement – opportunities for community engagement and belonging with our various programs such as hackathons, contests, and more.

Location(s): Canada :
Ontario :
Toronto