Is this role right for you? In this role, you will: Own end-to-end patch lifecycle: identify, prioritize, test, deploy, verify, and monitor third-party application updates.

Execute large-scale, phased (pilot/ring-based) deployments to minimize disruption.

Manage and optimize patching platforms (Intune, MECM/SCCM, Patch My PC).

Prioritize and remediate vulnerabilities using risk-based and SLA-driven approaches, including emergency patching and mitigations Automate patching workflows and improve efficiency through scripting and standardization.

Maintain accurate application inventory and documentation to support decision-making and audits.

Produce operational metrics and reporting to track performance and reduce risk exposure.

Monitor compliance, troubleshoot failures, and drive remediation of non-compliant devices Partner with Security teams to address critical vulnerabilities within required SLA windows Maintain detailed documentation of configurations, SOPs, and compliance reports.

Do you have the skills that will enable you to succeed in this role? We''d love to work with you if you have: Bachelors degree in computer science, Information Technology, or a related field (or equivalent work experience). 5+ years of experience in endpoint engineering, patch management, or desktop engineering Strong knowledge of endpoint operating systems Windows, macOS, iOS, Android.

Strong experience with

Intune, MECM/SCCM, Patch My PC, and Windows enterprise environments Understanding of network protocols, authentication methods, and enterprise security frameworks.

Experience supporting patch management in large enterprise organizations, ideally 100,000+ endpoints Familiarity with scripting and automation (e.g., Power

Shell, Bash, Python) for endpoint management tasks.

Strong troubleshooting, reporting, automation,



and stakeholder management skills Excellent communication and collaboration skills, with the ability to work across technical and non-technical teams.

Relevant certifications (e.g., Microsoft Certified: Modern Desktop Administrator, CompTIA Security+, CISSP) are a plus.

Value added certifications: Microsoft 365 Certified: Fundamentals (MS-900) MD-102: Endpoint Administrator (Intune & Windows management) SC-900: Security, Compliance, and Identity Fundamentals SC-300: Identity and Access Administrator (Entra ID) Demonstrated expertise and a minimum of five years'' experience in: Microsoft Endpoint Manager (MCM,Intune),Power

Shell scripting What''s in it for you? Diversity, Equity, Inclusion & Allyship-We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank.

We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.

Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible workplace for everyone.

Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive workplace while meeting accessibility requirements.

Upskillingthrough online courses, cross-functional development opportunities, and tuition assistance.

Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.

Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

📌 Modern Endpoint Management Engineer (Toronto)
🏢 Scotiabank
📍 Toronto