Technical Specialist Advisory

Purpose Ensure the efficient, secure, and compliant administration of digital identities and corporate devices using Microsoft Intune and Entra ID. In particular, the specialist is expected to have deep expertise in Microsoft Intune for comprehensive lifecycle management of devices, including enrollment, configuration, security policy enforcement, application deployment, compliance monitoring, and ongoing support. The objective is to ensure appropriate access to organizational resources, protect information, and facilitate smooth and secure user experience. Accountabilities Champions a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge. Administer and support the mobile device management (MDM) and mobile application management (MAM) platform using Microsoft Intune. Configure and maintain security, compliance, and conditional access policies in Microsoft Entra ID. Manage the lifecycle of digital identities, including provisioning, deactivation, permission delegation, and role-based access control (RBAC). Implement and maintain multi-factor authentication (MFA), single sign-on (SSO), and identity protection solutions. Design and implement data protection policies, device encryption, and update management. Automate administrative tasks using PowerShell and other scripting tools. Monitor compliance with security policies and generate audit and compliance reports. Participate in the definition of identity and enterprise mobility architectures. Coordinate testing of new features, updates, and platform changes. Manage device enrollment (Windows, iOS, Android) and integration with Microsoft Defender for Endpoint. Provide second and third level support for incidents related to identity, access, and devices. Collaborate with infrastructure, security, technical support, and development teams to ensure integrated operations. Stay up to date on new features, best practices, and trends in identity and device management. Document operational procedures, technical configurations, and user manuals. Understand how the Bank’s risk appetite and risk culture should be incorporated into day-to-day activities and decisions. Champions a high-performance environment and contributes to an inclusive work environment. Dimensions Users Served: More than 100,000 users and devices. Interaction: Collaboration with IT, Information Security, and external vendors. Key Tools: Microsoft Intune, Entra ID, Microsoft 365, PowerShell, Defender for Endpoint. Education Minimum of 3 years of experience in managing device and/or identity management platforms. Proven experience in implementing and supporting Microsoft Intune and Entra ID. Knowledge of security policies, regulatory compliance, and access management. Desirable experience in automation with PowerShell and use of monitoring tools. Proficiency in Microsoft Intune for device management, security policies, and application deployment. Advanced knowledge of Microsoft Entra ID (Azure Active Directory), including conditional access, MFA, SSO, and RBAC. Familiarity with security tools such as Microsoft Defender for Endpoint, Microsoft Purview, and Microsoft Compliance Manager. Experience integrating cloud services (Microsoft 365, Azure) with identity and security solutions. Ability to generate technical reports and compliance/security dashboards. Bilingual English/Spanish language skills (B1+ English level) Working Conditions When required, non-standard office working hours for scheduled implementations or while on rotational 24x7 on-call support. Location(s): Bogotá or Home-Office ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits. At ScotiaTech, we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at ScotiaTech; however, only those candidates who are selected for an interview will be contacted. Note: All postings in will remain live for a minimum of 5 days. #J-18808-Ljbffr