Permanent Full Time The Engineering Specialist is a senior technical role responsible for designing, implementing, securing, and continuously improving the organization's end-user computing and digital workplace platforms. This role combines endpoint engineering, desktop engineering, virtual desktop infrastructure, automation, security, compliance, and service improvement responsibilities to deliver secure, scalable, and user-focused workplace technology services. Design, develop, and maintain modern endpoint management capabilities across Windows, macOS, physical desktop, and virtual desktop environments.

Administer and enhance platforms including Microsoft Intune, MECM, Entra ID, Microsoft Defender, Windows Autopatch, Microsoft 365 Apps, Jamf, and related management services. Develop automation using PowerShell, Microsoft Graph, REST APIs, Azure tooling, and other approved technologies to improve provisioning, software deployment, compliance, reporting, and operational efficiency. Evaluate emerging endpoint, AI-enabled, and digital workplace technologies to improve service delivery, employee experience, resiliency, and supportability.

Azure Virtual

Desktop & Cloud Desktop Services Design, deploy, and manage Azure Virtual Desktop environments including host pools, session hosts, application groups, images, scaling plans, and user access models. Implement and troubleshoot FSLogix profile containerization, user profile issues, session host performance, and service reliability concerns. Integrate AVD/AVDI with Microsoft Entra ID, Conditional Access, MFA, network controls, and enterprise security requirements.

Optimize virtual desktop performance and health through Azure Monitor, Log Analytics, endpoint analytics, DEX insights, and operational reporting. Support infrastructure-as-code and repeatable deployment practices using Terraform or other approved automation frameworks. Patching, Security, Compliance & Risk Develop, maintain, and continuously improve endpoint patching, vulnerability management, configuration baseline, compliance, and endpoint hardening processes.

Design and implement endpoint security controls, compliance policies, application control capabilities, software governance practices, and audit-supporting controls. Monitor, assess, and remediate security, compliance, vulnerability, and audit findings through automation, reporting, risk assessment, and collaboration with Security and Infrastructure teams. Support governance, change management, technical review, operational readiness, and positive risk-culture expectations across engineering deliverables.

Network, Access & Platform Reliability Troubleshoot endpoint and AVD-related connectivity issues, including routing, firewall, segmentation, policy, and access control challenges. Collaborate with Network, Cloud, Security, IAM, and Infrastructure teams to analyze traffic flows,



resolve firewall rule conflicts, and ensure secure access to workplace services. Identify root causes of recurring environmental issues and recommend proactive engineering improvements that reduce downtime, support incidents, and operational risk.

End User

Experience, Tier 3 Support & Service Improvement Provide Tier 3 support for complex endpoint, software, security, desktop, and virtual desktop incidents and escalations. Partner with Service Desk, Field Services, End User Operations, Security, Cloud, and partner teams to drive timely resolution and knowledge transfer. Use endpoint health, performance, DEX, and incident trends to identify opportunities for proactive remediation and measurable service improvement.

Develop support guidance, technical training, change enablement material, and adoption support for new technologies and workplace services.

Project

Delivery, Lifecycle & Roadmap Contribution Lead and participate in endpoint, desktop, AVDI, modernization, lifecycle, migration, and compliance-related projects. Contribute to technology roadmaps, lifecycle planning, platform modernization, Windows servicing, device lifecycle, and continuous improvement initiatives. Work within Agile delivery practices including sprint planning, backlog refinement, daily standups, retrospectives, release planning, and prioritization using Jira, ServiceNow, Azure DevOps, or other approved tools.

Provide technical leadership to ensure solutions are secure, supportable, operationally ready, and aligned with business, architectural, compliance, and service‑management standards. Develop and maintain engineering standards, technical documentation, architecture diagrams, operational procedures, configuration baselines, compliance controls, and support documentation. Promote process standardization, knowledge sharing, handoff readiness, and continuous improvement across End User Technology and partner support teams.

Ensure documentation supports effective transition of operational activities where appropriate while preserving engineering accountability for design and lifecycle ownership. 5-7 years of experience in endpoint engineering, desktop engineering, workplace technology, virtual desktop, infrastructure engineering, or related technical roles. ~ Strong experience supporting and engineering enterprise Windows environments, with working knowledge of macOS management in enterprise settings. ~ Deep knowledge of Microsoft endpoint and workplace technologies including Intune, MECM, Entra ID,



Microsoft Defender, Windows Autopatch, Microsoft 365 Apps, endpoint analytics, and related management capabilities. ~ Hands-on experience with Azure Virtual Desktop, FSLogix, virtual desktop operations, image management, session host troubleshooting, and performance optimization. ~ Strong understanding of endpoint lifecycle management, configuration baselines, software deployment, vulnerability management, patching, compliance, and audit-supporting processes. ~ Proficiency with PowerShell and experience leveraging Microsoft Graph, REST APIs, automation technologies, reporting, and operational scripting. ~ Practical understanding of Azure networking and security concepts relevant to endpoint and virtual desktop services, including VNets, NSGs, access controls, firewall rules, routing, and segmentation. ~ Experience collaborating with Security, Cloud, Network, Architecture, IAM, Service Desk, Field Services, Operations, and business stakeholders in a large enterprise environment. ~ Familiarity with Agile delivery methodologies and enterprise work-management platforms such as Jira, ServiceNow, Azure DevOps, or equivalent tools. ~ Strong analytical, troubleshooting, communication, documentation, stakeholder management, and technical leadership skills.

Preferred Assets

Microsoft certifications related to Intune, Endpoint Management, Azure, Security, Entra ID, Contemporary Workplace, or Azure Virtual Desktop.

Microsoft Certified: Azure Virtual Desktop Specialty, Microsoft Certified: Experience with Digital Employee Experience (DEX) platforms, endpoint analytics, and AI-enabled productivity technologies such as Microsoft Copilot and Copilot Studio.

Experience with Windows 365, cloud PC, AVDI modernization, enterprise automation frameworks, and large-scale cloud-first deployments. This represents base salary only and does not represent other variable compensation components of our total compensation ( i.e. annual bonus, commission etc). Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country.

We’re looking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers, communities and each other. Flexible health and dental benefits, plus a $5,000 mental health benefit to support your well‑being.

Time Off: In addition to regular vacation and personal days, we support community involvement with a volunteer day.

Financial Security: Company-matching pension plan, share ownership program and additional investment options.

Emphasis on Community: We provide a workplace where employees feel connected and supported through Employee Resource Groups (ERGs), mentorship programs, social clubs and events. All information provided will be handled in accordance with applicable laws and Canada Life policies.

📌 Endpoint Engineering Specialist (Winnipeg)
🏢 Canada Life
📍 Winnipeg