Modern Endpoint Management Engineer

Requisition ID: 263369

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

We are seeking an experienced Senior Engineer Third-Party Application Patch Management to Lead an enterprise-scale third-party application patch management across complex endpoint environments, ensuring applications are securely updated, compliant with SLAs, and aligned to risk-based vulnerability management. Focuses on proactive patching, automation, and operational resilience to reduce cybersecurity risk.

Is this role right for you? In this role, you will:

• Own end-to-end patch lifecycle: identify, prioritize, test, deploy, verify, and monitor third-party application updates.
• Execute large-scale, phased (pilot/ring-based) deployments to minimize disruption.
• Manage and optimize patching platforms (Intune, MECM/SCCM, Patch My PC).
• Prioritize and remediate vulnerabilities using risk-based and SLA-driven approaches, including emergency patching and mitigations
• Automate patching workflows and improve efficiency through scripting and standardization.
• Maintain accurate application inventory and documentation to support decision-making and audits.
• Produce operational metrics and reporting to track performance and reduce risk exposure.
• Monitor compliance, troubleshoot failures, and drive remediation of non-compliant devices
• Partner with Security teams to address critical vulnerabilities within required SLA windows
• Maintain detailed documentation of configurations, SOPs, and compliance reports.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• Bachelor’s degree in computer science, Information Technology, or a related field (or equivalent work experience).
• 5+ years of experience in endpoint engineering, patch management, or desktop engineering
• Strong knowledge of endpoint operating systems Windows, macOS, iOS, Android.
• Strong experience with Intune, MECM/SCCM, Patch My PC, and Windows enterprise environments
• Understanding of network protocols, authentication methods, and enterprise security frameworks.
• Experience supporting patch management in large enterprise organizations, ideally 100,000+ endpoints
• Familiarity with scripting and automation (e.g., PowerShell, Bash, Python) for endpoint management tasks.
• Strong troubleshooting, reporting, automation, and stakeholder management skills
• Excellent communication and collaboration skills, with the ability to work across technical and non-technical teams.
• Relevant certifications (e.g., Microsoft Certified: Modern Desktop Administrator, CompTIA Security+, CISSP) are a plus.

Value added certifications:

• Microsoft 365 Certified: Fundamentals (MS-900)
• MD-102: Endpoint Administrator (Intune & Windows management)
• SC-900: Security, Compliance, and Identity Fundamentals
• SC-300: Identity and Access Administrator (Entra ID)
• Demonstrated expertise and a minimum of five years' experience in: Microsoft Endpoint Manager (MCM,Intune), PowerShell scripting

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.