Fully remote, distributed across Canada, the United States, and Europe, with optional office access in Calgary and Toronto.
Opportunity to establish IT processes from the ground up while supporting a growing, technically sophisticated organization.
Responsibilities
Design, build, configure, and maintain the Microsoft 365 tenant architecture and corporate technology environment.
Administer Entra ID, including Conditional Access, MFA enforcement, privileged access controls, group-based entitlements, licensing structures, application registrations, and SSO integrations.
Own the full macOS and Windows endpoint lifecycle, including procurement, imaging, MDM enrollment, configuration baselines, patch compliance, encryption enforcement, remediation, refresh cycles, warranties, and secure disposal.
Design and automate joiner, mover, and leaver processes covering account provisioning, hardware logistics, employee setup, and same-day access deprovisioning.
Build automated workflows that generate appropriate records and reduce reliance on manual documentation.
Automate recurring administrative activities using PowerShell and Microsoft Graph, maintaining scripts in version control with clear documentation.
Manage the SaaS application inventory, optimize licensing, oversee renewals, and identify unsanctioned applications.
Provide day-to-day technical support to employees while developing runbooks and documentation.
Contribute technical recommendations, identify opportunities for improvement, and assess and quantify technical debt.
Requirements
Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.
6–10+ years of experience in corporate IT, systems administration, or systems engineering.
Demonstrated experience building or rebuilding Microsoft 365 environments.
Strong hands-on expertise across the Microsoft ecosystem, including Entra ID, Microsoft Intune, Exchange Online, SharePoint, and Teams.
Practical experience with Entra ID Conditional Access, MFA policies, group and licensing structures, application registrations, and SSO integrations.
Experience with Intune device enrollment, configuration profiles, application deployment, patch compliance, and encryption enforcement.
Experience managing mixed macOS and Windows endpoint fleets.
Strong automation capabilities using PowerShell and the Microsoft Graph API.
Experience serving as the primary or sole IT function within an organization of approximately 30–150 employees.
Experience in an ISO 27001 or SOC 2 environment is an asset.
Experience with Microsoft Defender and Microsoft Purview is an asset.
Candidates must be located in Canada and authorized to work through Canadian citizenship, permanent residency, or an open work permit.
Conditions
Fully remote work across Canada, with the option to work from offices in Calgary or Toronto.
Flexible working hours, with core hours from 10:00 AM to 3:00 PM in your local time zone.
Broad autonomy and ownership across the organization’s IT environment.
Opportunities for advancement and cross-disciplinary exposure.
Competitive base salary plus performance incentives.