Endpoint Administrator

Why FirstOntario?

• Competitive compensation packages
• Top-tier health and wellness benefits, including comprehensive benefits packages, a yearly health spending account and personal spending account
• Enhanced mental health benefits through SunLife and TELUS Health
• Exclusive banking benefits
• Up to $1000 per year towards professional development
• Pension Plan
• Flex-work environment
• Company-wide Employee Volunteer program (Blue Wave Program)
• Employee and Family Assistance Program

Job Overview

The Endpoint Administrator will manage and support the organization's endpoint computing environment. This role is responsible for the administration, security, deployment, and lifecycle management of Windows, macOS, iOS, and Android devices across branch, corporate, and remote locations. The Endpoint Administrator will play a key role in delivering a secure and modern digital workplace through technologies such as Microsoft Intune, Autopilot, Microsoft Entra ID, Active Directory, Group Policy, mobile device management (MDM), endpoint security, automation, and application deployment. The successful candidate will work closely with Infrastructure, IT Security, Service Support Desk, and business stakeholders to ensure endpoint services meet operational, security, and regulatory requirements.

Role

Endpoint Management

• Administer and support enterprise Windows 11 and macOS devices.
• Manage and maintain corporate iPhone, iPad, and Android devices.
• Oversee the full endpoint lifecycle, including procurement, provisioning, deployment, upgrades, refreshes, and decommissioning.
• Develop and maintain standard operating system images and endpoint configuration standards.

Microsoft Endpoint Ecosystem

• Administer Microsoft Intune for device management, application deployment, compliance, and configuration management.
• Design and maintain Windows Autopilot processes for zero-touch device deployment.
• Manage Microsoft Entra ID device registration and compliance integration.
• Implement and support Conditional Access and device-based security controls.

Application Deployment & Automation

• Package, test, deploy, and support enterprise applications using Intune and related management platforms.
• Develop and maintain PowerShell and scripting solutions to automate operational tasks and improve service delivery.
• Maintain software inventories and ensure application currency across the enterprise.
• Troubleshoot application deployment and compatibility issues.

Active Directory & Policy Management

• Create, manage, and troubleshoot Group Policy Objects (GPOs).
• Support Active Directory administration related to endpoints and user computing.
• Implement endpoint configuration standards and security baselines.

Security & Compliance

• Maintain endpoint security controls including Microsoft Defender, BitLocker, FileVault, antivirus, and device compliance policies.
• Support regulatory, audit, and cybersecurity initiatives including ISO 27001 and financial industry security requirements.
• Investigate and remediate endpoint security vulnerabilities and compliance issues.
• Participate in security incident response activities involving endpoint devices.

Operational Support

• Act as a senior escalation point for endpoint-related incidents and service requests.
• Monitor endpoint health, patch compliance, and service performance metrics.
• Collaborate with Infrastructure, IT Security, and Service Support Desk teams on projects and operational initiatives.
• Create and maintain technical documentation, standards, procedures, and knowledge articles.

Required Skills

• College diploma or university degree in Information Technology, Computer Science, or a related discipline.
• Minimum of five (5+) years of experience supporting enterprise endpoint environments.
• Microsoft Certified: Endpoint Administrator Associate is considered an asset
• Strong hands-on experience with: ◦ Microsoft Intune ◦ Windows Autopilot ◦ Microsoft Entra ID ◦ Active Directory ◦ Group Policy Administration ◦ PowerShell Scripting ◦ Windows 11 Administration ◦ macOS Administration ◦ iOS and Android Device Management
• Experience with Microsoft Defender for Endpoint.
• Experience with Privileged Identity Management (PIM) and Conditional Access is considered an asset.
• Familiarity with ITIL-based service delivery processes is considered an asset.
• Experience supporting financial services, regulated industries, or cybersecurity frameworks is preferred.
• Experience integrating endpoint platforms with ServiceNow or similar ITSM solutions is preferred.
• Experience with enterprise application packaging and deployment.
• Strong troubleshooting and problem-solving skills.
• Excellent communication and customer service skills.

This role is hybrid in Stoney Creek, ON.

This posting is for an existing vacancy.

Salary Range: $69,931 to $96,155 annually.

Compensation for this role reflects a combination of skills, experience, and internal equity. Those whose experience more closely aligns the role's requirements may be placed higher within the salary range. You will learn more about FirstOntario Credit Union's total rewards package during the interview process.

Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know.