Job Description: The M365 Productivity & Collaboration Engineer is a hands-on technical team member who delivers secure, scalable, and high-performing Microsoft 365 productivity, collaboration, and endpoint solutions in a large enterprise environment. This role blends deep Windows OS, Microsoft 365, identity, and collaboration expertise with modern desktop engineering practices to enable world-class end-user experiences. The engineer thrives on solving complex business and technical problems, owns outcomes end-to-end, and balances operational excellence with project delivery. Key Responsibilities Solution Design & Technical Leadership

• Design and deliver scalable and secure, Microsoft 365 and collaboration solutions aligned with the enterprise technology and end-user computing roadmap.
• Act as a subject matter expert for Windows, M365 productivity, collaboration, identity, and endpoint platforms, owning engineering standards, roadmaps, service improvements, and feature enhancements.
• Serve as technical lead on initiatives, building, validating, testing, and documenting solutions while ensuring smooth operational handover and knowledge transfer.
• Develop and maintain design specifications, and engineering artifacts that meet technical, functional, non-functional, security, and regulatory requirements.

Microsoft 365, Collaboration & Identity

• Engineer and operate Microsoft 365 services including Teams, Entra ID (Azure AD), Conditional Access, MFA, Intune, and Graph API integrations.
• Participate in identity security, assessment, and hardening initiatives across Entra ID, Conditional Access, and privileged access controls.
• Coordinate with business and application teams on SSO, identity lifecycle, and application integrations.
• Support audits and regulatory requirements (e.g., ISO, OSFI/OFSI, CDCP) by providing defensible engineering evidence and documentation.

Endpoint & Desktop Engineering

• Design, engineer, and maintain standardized Windows 10/11 endpoint platforms, including imaging, deployment, and in-place upgrades.
• Participate in Group Policy to Intune policy migrations and manage hybrid/comanaged environments using SCCM and Microsoft Intune.
• Develop, implement, and remediate endpoint security baselines, compliance policies, and desktop hardening standards.
• Support Windows servicing strategies including deployment rings, phased rollouts, and update orchestration using Windows Update for Business, SCCM, and Intune.

Operations, Automation & Continuous Improvement

• Collaborate with operations and support teams to analyze incident, problem, and trend data for continuous improvement and capacity planning.
• Implement solutions to improve stability, performance, security, patching, and overall end-user experience.
• Develop and maintain PowerShell automation for configuration, reporting, and operational efficiency.
• Identify when additional delivery capacity is required and coordinate internal, contract, or partner resources as needed.

Collaboration & Stakeholder Management

• Partner closely with networking, server, storage, security, service desk, and frontline support teams to ensure solutions are supportable and aligned.
• Communicate technical concepts clearly to both technical and non-technical stakeholders.

Required Qualifications

• 7+ years of experience in the IT industry, with strong focus on Microsoft 365, identity, collaboration, and/or endpoint engineering.
• Strong written and verbal communication skills with excellent interpersonal skills.
• Proven troubleshooting, analytical, and problem-solving abilities in complex enterprise environments.
• Ability to manage competing priorities and balance operational responsibilities with project delivery.
• University degree or college diploma in a related discipline, or equivalent practical experience.

Preferred / Advanced Skills

• Deep understanding of Microsoft 365, collaboration, and security concepts.
• Advanced hands-on experience with:
  • Microsoft Intune (device configuration, compliance, endpoint security)
  • Group Policy (security and configuration)
  • Windows 10/11 imaging, deployment, and upgrade strategies
  • Entra ID / Azure AD, MFA, Conditional Access, and P2 capabilities
• Strong experience with endpoint security baselines, hardening, and compliance scanning.
• Advanced PowerShell scripting and automation skills.
• Experience with InTune, comanagement, and hybrid endpoint environments.
• Knowledge of identity management, SSO, LDAP/LDAPS, and certificate services / PKI.
• Experience supporting audits and regulatory requirements.
• Working knowledge of endpoint security tooling (e.g., BitLocker, endpoint protection platforms).

What’s in it for you:

• Wellness programs that support the three pillars of your health – mental, physical, and financial
• The opportunity to move along a variety of career paths with amazing networking potential.
• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the

Additional Requirements

• Must be able to satisfactorily complete applicable background checks prior to the start date and during employment, in accordance with Sun Life’s policies and practices.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.  

Salary Range:

90,000/90 000 - 140,000/140 000

Job Category:

IT - Technology Services

Posting End Date:

02/06/2026