Desktop Engineer

SALARY: Payband L, starting rate $50.93 per hour

SCHEDULE: Monday to Friday, 8:30 am to 5:00 pm

HOURS PER WEEK: 40

WORK MODALITY: Hybrid (minimum 2 days on-site)

STATUS: Full-Time Support

VACANCY: Replacement

EFFECTIVE DATE: Immediately

Land Acknowledgement:

George Brown Polytechnic is located on the traditional territory of the Mississaugas of the Credit First Nation and other Indigenous peoples who have lived here over time. We are grateful to share this land as treaty people who learn, work, and live in the community with each other.

Equity Statement:

George Brown Polytechnic is committed to creating and sustaining an equitable and inclusive learning and working environment. We encourage and actively seek applications from Indigenous, Black, racialized people, visible minorities, 2SLGBTQIA+ persons, all genders, and persons with disabilities.

GBP Vision:

To be a polytechnic renowned for its inclusion, excellence, relevance, impact, and leadership.

Position Summary

The Desktop Engineer serves as the subject matter expert for George Brown’s Endpoint Management Ecosystem supporting Windows, Apple (MacOS, IOS), and Android-based user-facing endpoint. This role is responsible for the end-to-end implementation, ongoing support, and optimization of endpoint infrastructure. It focuses on managing desktops, laptops, smart phones, and tablets using MDM tools such as Intune, with responsibility for enrollment, configuration, patching, compliance, endpoint security, and supports comprehensive asset management.

Key Responsibilities

• Design and implement endpoint management solutions that optimize end-user experience across corporate and classroom environments, ensuring performance, usability, and minimal disruption while maintaining required security and compliance standards.
• Support and administer the end-to-end mobile device management process using cloud tools like Intune and JAMF, ensuring secure configurations, compliance with Cyber Security frameworks (CIS, ISO, NIST), and alignment with organizational IT and cloud security standards.
• Support and oversee the full endpoint lifecycle, including device configuration, onboarding, reassignment, and offboarding, ensuring each phase is executed efficiently and in alignment with operational goals.
• Provide Level-3 support for incidents, ensuring effective troubleshooting, timely resolution, and accountability throughout the process.
• Manage and optimize the Azure Virtual Desktop (AVD) environment by overseeing configuration changes, continuously monitoring performance, and fine-tuning the environment to align with George Brown’s evolving user needs and operational requirements.
• Provide support for macOS devices, troubleshooting enrollment, configuration, and application deployment issues in collaboration with support teams and vendors.
• Support device configurations, security baselines, and Intune application deployments ensuring all setups, security controls, and updates meet organizational standards.
• Handle escalations, outages, configuration changes, and provide advanced support, assisting support staff with technical questions.
• Other duties as assigned.

Educational and Experience Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or other related program from a recognized post-secondary institute.
• Must have at least one or more of the following certifications or a combination of education and experience in related areas:
• CompTIA A+
• Apple Certified Support Professional (ACSP)
• Microsoft 365 Certified: Administrator Expert
• Minimum of eight (8) years of hands-on experience in the following: supporting MDM (e.g., Intune, JAMF, etc.) in a large enterprise environment. Hands-on experience in supporting user identity (Active directory/Entra ID).
• Extensive experience managing and supporting MDM solutions such as Intune and JAMF, ensuring secure configurations, policy enforcement, and compliance with CIS, ISO, and NIST frameworks.
• Strong experience in OS management includes zero-touch deployments via Autopilot and managing OS upgrades. Strong experience in supporting macOS devices.
• Extensive experience in managing patch deployment, including Windows updates, security patches, driver updates, and application updates, ensuring controlled deployment with minimal downtime.
• Strong application packaging experience using tools like Intune Win32, MSI, or App-V to create, test, deploy, and maintain software packages and virtualized applications.
• Hands-on experience in compliance management, including deploying security base