Endpoint Management Analyst

Teck Resources; Vancouver; On-site; CAD 95,000 - 118,000; Full time

Benefits offered by this job

Hybrid work model

Professional development

Job summary

Teck Resources in Vancouver, BC, is seeking an Endpoint Management Analyst to administer and optimize enterprise endpoints using Microsoft Intune, MECM, Qualys, and Cortex XDR. You will automate tasks with PowerShell and Bash, implement security configurations, and collaborate with IT teams to maintain a robust endpoint security posture.

The role emphasizes end-user focused reliability, cross-team coordination, and staying current with evolving endpoint technologies.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field, or equivalent work experience.
• 10+ years of experience in IT with at least 3 years focused on endpoint management.
• Deep technical expertise with Microsoft Intune (Endpoint Manager) including device enrollment and policy management.
• MECM (Microsoft Endpoint Configuration Manager) experience with packaging, OSD, software updates, and reporting.
• Intermediate knowledge of Azure / Entra ID (conditional access, device registration, hybrid join, RBAC).
• Advanced PowerShell scripting for automation and administration.
• Working knowledge of macOS endpoint management and packaging.

Responsibilities

• Be a safety-conscious leader by adhering to standards.
• Serve as a SME for Intune, MECM, and Qualys with ongoing endpoint management.
• Provide Tier 3 support for Windows and macOS devices and ensure security and performance.
• Develop, test, and deploy patches for Windows and macOS.
• Maintain device compliance and configuration policies in Intune and MECM.
• Automate endpoint tasks using PowerShell and Bash scripting.

Skills

Analytical

Collaboration

Documentation

Problem solving

Communication

Self-starter

Education

Bachelor's degree in IT or related

Tools

Microsoft Intune

MECM

Qualys

Cortex XDR

PowerShell

Bash scripting

Active Directory

Entra ID

Azure

Windows 11

macOS

Job description

Location: Vancouver, BC, Canada

Employment Type: Regular Full Time

Workplace Type: Hybrid

About our Vancouver Office

Located in the heart of downtown Vancouver, between the Pacific Ocean and the Coast Mountains, Teck's Corporate Office sits in one of Canada's most culturally diverse cities.

Surrounded by world-renowned nature and globally inspired cuisine, the office brings together many of Teck's corporate functions - all working toward Teck's purpose of providing the essential resources the world relies on.

Role Overview

Reporting to the Lead, Endpoint Management, he Endpoint Management Analyst is responsible for the administration, configuration, and optimization of enterprise endpoints and related solutions to ensure a secure, efficient, and reliable workstation environment.

This role focuses on managing endpoints through tools such as Microsoft Intune, MECM (Microsoft Endpoint Configuration Manager), Qualys and in some cases Cortex XDR, packaging & deploying applications and security patches, implementing security configuration and security standards, and automating endpoint tasks through PowerShell, Bash scripting or other related technologies.

This individual is a Subject Matter Expert (SME) for endpoint management within the organization, collaborating with other IT teams to deliver a seamless end-user centric experience and robust endpoint security posture.

Key Responsibilities

• Be a courageous safety leader by adhering to and promoting safety, environmental, and operational standards
• Serve as an SME for Microsoft Intune, MECM, and Qualys, providing ongoing management of endpoint management infrastructure.
• Provide Tier 3 support of Windows and macOS devices across the enterprise and ensure consistent configuration, security, and performance.
• Develop, test, and deploy application and security patches for both Windows and macOS platforms.
• Maintain and enhance device compliance and configuration policies in Intune and MECM.
• Automate endpoint management and deployment tasks using mainly PowerShell and Bash scripting (and/or other scripting languages as needed).
• Integrate endpoint management solutions with a mixture of Active Directory, Entra, Intune, MECM and other cloud management tools.
• Work with security teams to align endpoint configurations with CIS Benchmarks or other industry best practices.
• Participate in patch management, OS lifecycle management, and hardware refresh planning.
• Provide technical expertise in troubleshooting endpoint-related issues, including application deployments, device registration, and compliance enforcement.
• Collaborate with Service Management teams to maintain and improve ServiceNow workflows and integrations related to endpoint management (asset tracking, software catalog, etc.).
• Utilize APIs and other integration technologies to enhance automation, reporting, and system interoperability.
• Produce and maintain detailed technical documentation, procedures, and standards.
• Stay current with evolving endpoint technologies, Microsoft ecosystem changes, and best practices in modern device management.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field, or equivalent work experience.
• 10+ years of experience in IT with at least 3 years focused on endpoint management.
• Deep technical expertise with:
• Microsoft Intune (Endpoint Manager) - device enrollment, configuration profiles, compliance policies, app management, Autopilot, and Windows 365.
• Microsoft MECM (Microsoft Endpoint Configuration Manager) - application packaging, OSD, software updates, and reporting.
• Intermediate knowledge of Azure / Entra ID (conditional access, device registration, hybrid join, role-based access).
• Advanced PowerShell scripting skills for automation and system administration.
• Working knowledge of macOS endpoint management and macOS application packaging.
• Familiarity with Windows 11 and macOS operating systems, group policies, configuration profiles, restrictions and modern management principles.

Preferred / Nice to Have

• Experience implementing or maintaining CIS Benchmarks or similar workstation security standards.
• Familiarity with ServiceNow ITSM.
• Experience working with APIs for automation or system integration.
• Experience with reporting and analytics tools (e.g., Power BI, MECM reports, Intune reporting).
• Understanding of modern endpoint security concepts.
• Relevant Microsoft certifications (e.g., MD-102, MS-102, SC-900, SC-300, AZ-104, etc.) preferred.
• Spanish speaking.

Soft Skills and Attributes

• Strong analytical and problem-solving abilities.
• Collaborative mindset with a focus on cross-team coordination.
• Excellent communication and documentation skills.
• Self-starter with the ability to manage multiple priorities in a fast-paced environment.
• Commitment to continuous improvement and learning new technologies.

Pay Range: CAD $95,000 - $118,000 per year

The actual amount offered is determined based on the successful candidate's relevant experience, skills, and competencies and considers internal equity.

Why Teck

At Teck, your work matters-to the world, to our communities and to your future.

As a leading Canadian resource company, we focus on responsibly providing the metals essential for global development and the energy transition while caring for the people, communities and land that we love. We do this guided by our values that, together, form The Teck Way .

At Teck, you'll find purpose-driven work, a culture of respect and inclusion, and the opportunity to grow your career while helping build a better world.

We value diversity and are committed to an inclusive, barrier-free hiring process. Reasonable accommodations are available upon request.