Purpose
Ensure the efficient, secure, and compliant administration of digital identities and corporate devices using Microsoft Intune and Entra ID. In particular, the specialist is expected to have deep expertise in Microsoft Intune for comprehensive lifecycle management of devices, including enrollment, configuration, security policy enforcement, application deployment, compliance monitoring, and ongoing support. The objective is to ensure appropriate access to organizational resources, protect information, and facilitate smooth and secure user experience.
Accountabilities
- Administer and support the mobile device management (MDM) and mobile application management (MAM) platform using Microsoft Intune.
- Configure and maintain security, compliance, and conditional access policies in Microsoft Entra ID.
- Manage the lifecycle of digital identities, including provisioning, deactivation, permission delegation, and role-based access control (RBAC).
- Implement and maintain multi-factor authentication (MFA), single sign-on (SSO), and identity protection solutions.
- Design and implement data protection policies, device encryption, and update management.
- Automate administrative tasks using PowerShell and other scripting tools.
- Monitor compliance with security policies and generate audit and compliance reports.
- Participate in the definition of identity and enterprise mobility architectures.
- Coordinate testing of new features, updates, and platform changes.
- Manage device enrollment (Windows, iOS, Android) and integration with Microsoft Defender for Endpoint.
- Provide second and third level support for incidents related to identity, access, and devices.
- Collaborate with infrastructure, security, technical support, and development teams to ensure integrated operations.
- Stay up to date on new features, best practices, and trends in identity and device management.
- Document operational procedures, technical configurations, and user manuals.
Education
- Bachelor’s degree in Systems Engineering, Information Technology, or a related field.
- Desirable certifications:
- Microsoft Certified: Endpoint Administrator Associate
- Microsoft Certified: Identity and Access Administrator Associate
- Bi-lingual (Spanish - English)
Required Experience
- Minimum of 3 years of experience in managing device and/or identity management platforms.
- Proven experience in implementing and supporting Microsoft Intune and Entra ID.
- Knowledge of security policies, regulatory compliance, and access management.
- Desirable experience in automation with PowerShell and use of monitoring tools.
- Proficiency in Microsoft Intune for device management, security policies, and application deployment.
- Advanced knowledge of Microsoft Entra ID (Azure Active Directory), including conditional access, MFA, SSO, and RBAC.
- Familiarity with security tools such as Microsoft Defender for Endpoint, Microsoft Purview, and Microsoft Compliance Manager.
- Experience integrating cloud services (Microsoft 365, Azure) with identity and security solutions.
- Ability to generate technical reports and compliance/security dashboards.
At Scotiabank, we value the unique skills and experiences each person brings to the bank, and we are committed to creating and maintaining an inclusive and accessible environment for everyone. All employees must comply with the bank’s policies, standards, codes, and guidelines related to non-discrimination and workplace accommodations.
If you require any accessibility accommodations during the process, please let our Talent Attraction team know.
Under no circumstances should pregnancy or HIV tests be requested.