Endpoint Specialist

Concert Properties Ltd.; Vancouver; On-site; CAD 90,000 - 130,000; Full time

Job summary

Concert Properties Ltd. is seeking an Endpoint Specialist to own the configuration, deployment, and lifecycle of end‑user devices and workplace tech in the Digital Experience (DEX) standards.

Drive provisioning automation, device lifecycle, and secure engineering practices to improve efficiency and reliability across Vancouver offices. The role focuses on managing Windows/iOS devices, app provisioning, and collaboration tools, with emphasis on security, policy compliance, and cross‑functional

Qualifications

• Minimum 5 years hands-on endpoint management experience in an enterprise Microsoft environment.
• Degree in Computer Science, Systems Engineering or equivalent experience.
• Proficiency with Active Directory and Entra ID administration.
• Strong experience with Microsoft 365 Online administration, including SharePoint, Teams and OneDrive.
• Advanced PowerShell scripting and automation skills.
• Strong written and verbal communication skills.
• Demonstrated ability to lead projects from concept through delivery.

Responsibilities

• Own the configuration, deployment, and lifecycle of corporate end‑user devices and workplace technology.
• Design and implement automated device provisioning to minimize manual setup.
• Manage device lifecycle including procurement, refresh planning, and decommissioning.
• Administer printer, meeting room AV tech, and mobile device enrollment.
• Provide Level 2/3 support and contribute to monthly DEX reporting.

Skills

Endpoint management

Project management

Stakeholder management

Customer service

Written and verbal communication

SLA adherence

Education

Bachelor's degree in Computer Science or Systems Engineering

Tools

Active Directory

Entra ID

Microsoft 365 Admin

PowerShell scripting

Job description

Position Summary

The Endpoint Specialist is a hands‑on technical role at the intersection of endpoint engineering and frontline support. This role owns the configuration, deployment, and lifecycle of corporate end‑user devices and workplace technology including desktops, laptops, mobile devices, printers, and meeting room technology within Concert's Digital Experience (DEX) standards. Success in this role means shorter provisioning times, higher device compliance, standardised configurations, fewer repeat hardware/access issues, and a growing layer of automation that makes endpoint management scalable.

Key Responsibilities

Endpoint Engineering & Device Management

• Build and maintain device configuration profiles, compliance policies, conditional access integration, and update rings for Windows and iOS devices, plus baseline security hardening so every managed device meets Concert's standards before an employee logs in.
• Package, test, and deploy end‑user applications so installs are current, compatible, and require no manual IT intervention.
• Monitor device compliance and Windows Update rings across the estate; investigate and remediate non‑compliant devices; report compliance metrics monthly to the DEX operational dashboard.

Device Provisioning, Lifecycle & Mobile Management

• Design and continuously improve automated device provisioning (deployment profiles, enrollment status pages, naming conventions) to minimise manual set‑up and reduce lead time.
• Manage the full device lifecycle — procurement coordination, configuration, refresh planning, warranty tracking, and secure decommissioning — and maintain an accurate device/peripheral inventory for audit and asset management.
• Administer mobile device enrollment, compliance, and App Protection Policies (MDM/MAM) to secure corporate data on managed devices while preserving a positive user experience.

Application, Printer & Meeting Room Technology

• Own the end‑user application catalogue, including Microsoft 365 Apps update channels and license assignment, and govern new software requests for security, compatibility and licensing.
• Administer printer and peripheral infrastructure across Concert offices, coordinating with vendors on service, firmware, and refresh cycles.
• Manage Concert's meeting room and AV technology, including Microsoft Teams Rooms — conducting proactive health checks and supporting new room installations with facilities and vendors.

Support, ITSM & Employee Lifecycle

• Provide Level 2/3 support for endpoint‑related incidents and requests, resolving within SLA and documenting fully in ServiceNow.
• Partner with the Service Desk to build knowledge articles and escalation paths that improve first‑call resolution and reduce unnecessary escalations.
• Own technical device delivery for onboarding, off‑boarding and role/location changes, and contribute endpoint metrics to monthly DEX reporting for Service Operations Review.

Please note this is a general description of the tasks and skills required. Additional responsibilities and duties may be required to successfully perform this role.

Required Knowledge & Skills

Required

• Minimum 5 years of hands‑on endpoint management experience in an enterprise Microsoft environment.
• Degree in Computer Science, Systems Engineering or equivalent experience.
• Proficiency with Active Directory and Entra ID administration.
• Strong experience with Microsoft 365 Online administration, including SharePoint, Teams and OneDrive.
• Advanced PowerShell scripting and automation skills.
• Strong written and verbal communication skills.
• Demonstrated ability to lead projects from concept through delivery, using a structured project management approach.
• Strong communication and stakeholder management skills — this role works daily with the Service Desk, security team, facilities, vendors and senior leadership.
• Customer‑service orientation, with experience supporting end users directly on hardware, application and connectivity issues.

Preferred

• ITIL Foundation certification and ServiceNow working knowledge is an asset.
• Microsoft Endpoint certifications: Endpoint Administrator Associate (MD-102), Administrator Expert (MS-102), M365 Fundamentals (MS-900), Teams Administrator Associate (MS-700)
• Working knowledge of networking design, network security and VPN technology.
• Working knowledge of Operational Technology (OT): experience with building automation, BMS or smart building integration.