The Opportunity We are seeking a highly motivated and proactive Endpoint Performance Specialist to join our Digital IT team. In this rapid-paced role, you will be responsible for designing, implementing, and optimizing endpoint management, automation, and performance engineering solutions that enhance the digital employee experience across a global organization. Working closely with Infrastructure, Security, and Operations teams, you will drive initiatives focused on endpoint reliability, compliance, security, and operational efficiency through modern device management and automation.

The Endpoint Performance Specialist provides technical expertise, strategic guidance, and operational support as a key member of the Digital IT team. In partnership with internal stakeholders, you will develop scalable automation solutions, optimize Windows endpoint performance, manage Intune and security policies, and leverage digital experience insights to deliver a seamless and productive user experience. The ideal candidate will possess strong problem-solving and analytical skills, excellent communication and collaboration abilities, and a passion for automation, continuous improvement, and delivering exceptional technology experiences.

Essential Duties and Responsibilities Endpoint Management and Automation

Design, develop, and maintain enterprise-scale automation solutions for endpoint provisioning, configuration, remediation, security enforcement, and lifecycle management

Develop advanced PowerShell and Python automation frameworks to reduce manual operational effort and improve service reliability

Build proactive remediation and self-healing solutions using Microsoft Intune, Endpoint Analytics, DEX platforms, and Windows native capabilities





Automate endpoint health checks, compliance validation, software deployment, performance optimization, and security policy enforcement

Integrate automation with Microsoft Graph API, Azure Automation, Power Automate, and other enterprise management platforms

Establish automation standards, governance, code reviews, testing methodologies, and documentation best practices

Identify opportunities to eliminate repetitive operational tasks and drive continuous improvement through automation

Performance Engineering & Troubleshooting

Perform advanced diagnostics for boot/login delays, application slowness, memory/CPU bottlenecks, and storage I/O issues

Utilize tools such as Windows Performance Analyzer (WPA), Windows Performance Recorder (WPR), Sysinternals Suite, PerfMon, ProcMon, and ETW tracing

Define and maintain endpoint performance baselines and implement proactive monitoring strategies

Conduct root cause analysis of recurring endpoint performance issues and recommend long-term solutions

Endpoint Imaging & Deployment Automation

Design, maintain, and optimize Windows 11 golden images for large-scale enterprise deployment

Automate OS and application deployments using Intune (Autopilot) and Azure AD

Develop and maintain PowerShell scripts for image updates, driver integration, and application packaging





Implement zero-touch provisioning and streamline device onboarding processes

Intune & Security Policy Management

Configure and manage Intune endpoint policies, compliance rules, and Autopilot deployments

Implement and maintain Windows Defender Application Control (WDAC) policies to enforce application security and compliance without compromising performance

Align endpoint configurations with enterprise security baselines (BitLocker, Microsoft Defender, CIS, and MDM policies)

Collaborate with Security teams to ensure balance between performance, optimization, automation, and compliance

Digital Employee Experience (DEX) Monitoring

Use DEX tools (e.g., Aternity, Nexthink, or equivalent) to monitor user experience, identify performance gaps, and improve endpoint reliability

Analyze telemetry and feedback to drive continuous improvement in end-user productivity and satisfaction

Integrate DEX insights with automation to create proactive remediation and self-healing solutions

Minimum Qualifications

4–6 years of experience in Windows endpoint engineering, automation, imaging, and performance optimization

Strong expertise in Windows 11 internals (boot process, registry, kernel processes, OS servicing)

Hands‑on experience with Microsoft Intune (Autopilot, Endpoint Security, Compliance, Analytics)

Proven experience implementing and managing Windows Defender Application Control (WDAC)

Strong automation engineering experience with PowerShell scripting, Microsoft Graph API, Intune automation, proactive remediations, and endpoint self‑healing solutions

Ability to design scalable automation framewo

📌 Endpoint Performance Specialist (Winnipeg)
🏢 Egon Zehnder
📍 Winnipeg