Senior Endpoint Specialist

Position: Senior Endpoint Specialist (Contract)
Location:

Vancouver, BC, Canada

Employment Type:

Contractor

Workplace Type:  Hybrid

About our Vancouver Office
Located in the heart of downtown Vancouver, between the Pacific Ocean and the Coast Mountains, Teck's Corporate Office sits in one of Canada's most culturally diverse cities.

Surrounded by world-renowned nature and globally inspired cuisine, the office brings together many of Teck's corporate functions – all working toward Teck's purpose of providing the essential resources the world relies on.

Role Overview
Reporting to the Team Lead, Endpoint Management, the Senior Endpoint Specialist is responsible for the design, administration, and continuous improvement of Teck's endpoint management environment, covering desktop, laptop, and mobile devices.

Working within the Endpoint Management team, the senior Endpoint Specialist acts as a subject matter expert for Intune, SCCM, Active Directory and Teamviewer, across a co‑managed fleet of Windows, macOS, iOS, iPadOS, and Android devices, and leads project work.

The role combines hands‑on administration and troubleshooting with technical planning, automation, standards development, and project delivery to improve manageability, configuration hygiene, compliance, vulnerability management, and security posture.

This position requires working independently on complex problems, meeting tight timelines with a focus on workstation management and security, and collaborating across teams including cyber security, cloud infrastructure, server systems, network, and site support.

Don't miss out on this outstanding opportunity to be part of one of Canada's leading mining companies and join our team!

Key Responsibilities
Endpoint Architecture and Administration

Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures.

Serve as a subject matter expert for Microsoft Active Directory, Teamviewer, Intune and SCCM, providing advanced troubleshooting and escalation support for complex endpoint issues.

Design, implement and maintain endpoint configuration profiles, compliance policies, security baselines, and application deployments aligned to security frameworks like CIS/NIST/ISO.

Develop and maintain standards for Windows endpoint configuration, application deployment, and device lifecycle management.

Establish clear management boundaries between Intune, SCCM, Group Policy and other endpoint technologies to prevent conflicts and configuration drifts.

Maintain Intune and SCCM client health across the fleet.

Project Delivery

Lead and contribute to endpoint modernization projects.

Assess existing workstation configuration/policies, applications, task sequences, and Group Policy objects to determine migration strategies and identify legacy processes and infrastructure that can be retired.

Plan and manage co‑management workloads as Teck continues to modernize workstation management.

Define project scope, success criteria and test plans, and document migration plans, implementation procedures, and rollback strategies.

Identify, document, and coordinate changes through the change management process.

Patch and Vulnerability Management

Work with the Infrastructure Security Team to analyze discovered vulnerabilities, develop, and test remediation, and plan and execute deployment through Intune, SCCM, and Qualys.

Maintain a process for emergency and out‑of‑band security patch deployment.

Proactive Monitoring and Remediation

Monitor Intune Advanced Analytics and other device health telemetry to identify trends affecting performance, reliability, and user experience before they become widespread incidents.

Develop proactive remediations using Intune Scripts/Remediations and Power Shell/Graph.

Build endpoint health and compliance dashboards and…