Senior Endpoint Specialist in Vancouver

Location: Vancouver, BC, Canada

Employment Type: Contractor

Workplace Type: Hybrid

About our Vancouver Office: Located in the heart of downtown Vancouver, between the Pacific Ocean and the Coast Mountains, Teck's Corporate Office sits in one of Canada's most culturally diverse cities. Surrounded by world-renowned nature and globally inspired cuisine, the office brings together many of Teck's corporate functions – all working toward Teck's purpose of providing the essential resources the world relies on.

Role Overview: Reporting to the Team Lead, Endpoint Management, the Senior Endpoint Specialist is responsible for the design, administration, and continuous improvement of Teck's endpoint management environment, covering desktop, laptop, and mobile devices. Working within the Endpoint Management team, the Senior Endpoint Specialist acts as a subject matter expert for Intune, SCCM, Active Directory and Teamviewer, across a co-managed fleet of Windows, macOS, iOS, iPadOS, and Android devices, and leads project work. The role combines hands-on administration and troubleshooting with technical planning, automation, standards development, and project delivery to improve manageability, configuration hygiene, compliance, vulnerability management, and security posture. This position requires working independently on complex problems, meeting tight timelines with a focus on workstation management and security, and collaborating across teams including cyber security, cloud infrastructure, server systems, network, and site support.

Key Responsibilities:

• Endpoint Architecture and Administration: Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures. Serve as a subject matter expert for Microsoft Active Directory, Teamviewer, Intune and SCCM, providing advanced troubleshooting and escalation support for complex endpoint issues. Design, implement and maintain endpoint configuration profiles, compliance policies, security baselines, and application deployments aligned to security frameworks like CIS/NIST/ISO. Develop and maintain standards for Windows endpoint configuration, application deployment, and device lifecycle management. Establish clear management boundaries between Intune, SCCM, Group Policy and other endpoint technologies to prevent conflicts and configuration drifts. Maintain Intune and SCCM client health across the fleet.
• Project Delivery: Lead and contribute to endpoint modernization projects. Assess existing workstation configuration/policies, applications, task sequences, and Group Policy objects to determine migration strategies and identify legacy processes and infrastructure that can be retired. Plan and manage co-management workloads as Teck continues to modernize workstation management. Define project scope, success criteria and test plans, and document migration plans, implementation procedures, and rollback strategies. Identify, document, and coordinate changes through the change management process.
• Patch and Vulnerability Management: Work with the Infrastructure Security Team to analyze discovered vulnerabilities, develop, and test remediation, and plan and execute deployment through Intune, SCCM, and Qualys. Maintain a process for emergency and out-of-band security patch deployment.
• Proactive Monitoring and Remediation: Monitor Intune Advanced Analytics and other device health telemetry to identify trends affecting performance, reliability, and user experience before they become widespread incidents. Develop proactive remediations using Intune Scripts/Remediations and PowerShell/Graph. Build endpoint health and compliance dashboards and operational metrics.
• Application Management and Control: Package, deploy, update, and troubleshoot applications using Intune and SCCM including dependencies, detection rules and supersedence. Develop standardized packaging and deployment methods and reduce dependency on legacy SCCM software distribution. Work with business stakeholders, application owners, site support teams and end users to upgrade, standardize, rationalize, and decommission endpoint software, including identifying and removing unauthorized, unsupported, and redundant applications. Design and implement application control and allowlisting policies using phased audit and enforcement, manage exceptions for approved applications, and investigate and resolve blocked application issues.
• Documentation and Knowledge Sharing: Produce and maintain architecture documents, configuration standards, standard operating procedures, runbooks, support guides, and knowledge base articles. Interpret licensing terms and technical use cases to help the team make informed decisions. Provide knowledge transfer and mentoring to team members and site support teams. Stay current on trends and technology changes in endpoint management and security and recommend improvements.

Qualifications:

• 10+ years of experience in enterprise endpoint management, systems administration, or endpoint engineering.
• Expert knowledge of PowerShell scripting and automation skills are required, including Microsoft Graph API.
• Extensive hands-on experience with Microsoft Active Directory, Intune and SCCM, including co-management and hybrid Entra join environments.
• Demonstrated experience migrating Group Policy and SCCM workloads to Intune.
• Experience implementing and supporting Windows and macOS in an enterprise environment; iOS, iPadOS and Android management experience is an asset.
• Experience with device provisioning technologies including Windows Autopilot, Apple Business Manager / Automated Device Enrollment and Android Enterprise.
• Experience with enterprise patch management using Windows Autopatch, Qualys Patch Management and Vulnerability Remediation, SCCM or other third-party tools.
• Experience with Intune Advanced Analytics and using telemetry to identify and resolve issues proactively.
• Experience with application packaging and distribution (Win32, MSI, MSIX) using Intune and SCCM.
• Working knowledge of endpoint security controls including BitLocker, Cortex XDR, Qualys, CyberArk and other security baselines.
• Experience with Microsoft Entra ID and device compliance.
• Intermediate experience with ServiceNow.
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to work independently on complex technical problems.
• Ability to interact professionally with a diverse group, including users, managers, and subject matter experts.
• Effective communication, interpersonal, technical writing, and presentation skills.
• Self-motivated, with the ability to independently manage competing priorities.
• A degree or diploma in a relevant field, or equivalent experience, is preferred. Microsoft Certified: Endpoint Administrator Associate (MD-102), Microsoft Azure Administrator (AZ-104), Developing Solutions for Microsoft Azure (AZ-204) is an asset.

Pay Range: CAD $null - $null per year. The actual amount offered is determined based on the successful candidate's relevant experience, skills, and competencies and considers internal equity.

Why Teck: At Teck, your work matters to the world, to our communities and to your future. As a leading Canadian resource company, we focus on responsibly providing the metals essential for global development and the energy transition while caring for the people, communities and land that we love. We do this guided by our values that, together, form The Teck Way. At Teck, you'll find purpose-driven work, a culture of respect and inclusion, and the opportunity to grow your career while helping build a better world. We value diversity and are committed to an inclusive, barrier-free hiring process. Reasonable accommodations are available upon request.