M365 Productivity & Collaboration Engineer (MS InTune, SCCM)

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

The engineer thrives on solving complex business and technical problems, owns outcomes end-to-end, and balances operational excellence with project delivery.

• Design and deliver scalable and secure, Microsoft 365 and collaboration solutions aligned with the enterprise technology and end-user computing roadmap.
• Act as a subject matter expert for Windows, M365 productivity, collaboration, identity, and endpoint platforms, owning engineering standards, roadmaps, service improvements, and feature enhancements.
• Serve as technical lead on initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
• Develop and maintain design specifications, and engineering artifacts that meet technical, functional, non-functional, security, and regulatory requirements.

• Engineer and operate Microsoft 365 services including Teams, Entra ID (Azure AD), Conditional Access, MFA, Intune, and Graph API integrations.
• Participate in identity security, assessment, and hardening initiatives across Entra ID, Conditional Access, and privileged access controls.
• Coordinate with business and application teams on SSO, identity lifecycle, and application integrations.
• Support audits and regulatory requirements (e.g., ISO, OSFI/OFSI, CDCP) by providing defensible engineering evidence and documentation.

• Design, engineer, and maintain standardized Windows 10/11 endpoint platforms, including imaging, deployment, and in-place upgrades.
• Participate in Group Policy to Intune policy migrations and manage hybrid/comanaged environments using SCCM and Microsoft Intune.
• Develop, implement, and remediate endpoint security baselines, compliance policies, and desktop hardening standards.
• Support Windows servicing strategies including deployment rings, phased rollouts, and update orchestration using Windows Update for Business, SCCM, and Intune.

• Collaborate with operations and support teams to analyze incident, problem, and trend data for continuous improvement and capacity planning.
• Implement solutions to improve stability, performance, security, patching, and overall end-user experience.
• Develop and maintain PowerShell automation for configuration, reporting, and operational efficiency.
• Identify when additional delivery capacity is required and coordinate internal, contract, or partner resources as needed.

• Partner closely with networking, server, storage, security, service desk, and frontline support teams to ensure solutions are supportable and aligned.
• Communicate technical concepts clearly to both technical and non-technical stakeholders.

• 7+ years of experience in the IT industry, with strong focus on Microsoft 365, identity, collaboration, and/or endpoint engineering.
• Strong written and verbal communication skills with excellent interpersonal skills.
• Proven troubleshooting, analytical, and problem-solving abilities in complex enterprise environments.
• Ability to manage competing priorities and balance operational responsibilities with project delivery.
• University degree or college diploma in a related discipline, or equivalent practical experience.

• Deep understanding of Microsoft 365, collaboration, and security concepts.
• Advanced hands-on experience with:
  • Microsoft Intune (device configuration, compliance, endpoint security)
  • Group Policy (security and configuration)
  • Windows 10/11 imaging, deployment, and upgrade strategies
  • Entra ID / Azure AD, MFA, Conditional Access, and P2 capabilities
• Strong experience with endpoint security baselines, hardening, and compliance scanning.
• Advanced PowerShell scripting and automation skills.
• Experience with InTune, comanagement, and hybrid endpoint environments.
• Knowledge of identity management, SSO, LDAP/LDAPS, and certificate services / PKI.
• Experience supporting audits and regulatory requirements.
• Working knowledge of endpoint security tooling (e.g., BitLocker, endpoint protection platforms).

What’s in it for you?

• We’re honored to be recognized as a 2026 Best Workplaces in Canada by Great Place to Work® Canada.
• We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®,  for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health.
• Wellness programs that support the three pillars of your health – mental, physical, and financial
• The opportunity to move along a variety of career paths with amazing networking potential.
• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office

This role requires Reliability Security Clearance. In addition to a law enforcement inquiry and a credit check, as part of your application, the Government of Canada will ask if you lived or travelled outside of Canada for 6-consecutive months during the last 5 years, and you must account for all activities during this time.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [email protected].

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

Job Category:

Posting End Date: