IT Systems Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, develop, and sustain the architecture and configuration of the Microsoft 365 tenant.

• Oversee Entra ID as the organization's identity management solution.

• Create and uphold conditional access policies, enforce MFA, and manage privileged access controls.

• Ensure scalable group-based entitlement and licensing frameworks are maintained.

• Collaborate with Development and DevOps teams to support SSO integrations in client environments.

• Take ownership of the macOS and Windows endpoint fleet, including procurement, imaging, MDM enrollment, and configuration standards.

• Manage compliance with patches, enforce disk encryption, and remediate non-compliant devices.

• Supervise warranties, refresh cycles, and secure disposal processes.

• Design and automate processes for joiners, movers, and leavers, covering account provisioning, hardware logistics, shipping, and first-day setup.

• Deprovision accounts and access on the same day as employee exit.

• Ensure that automated processes produce their own records.

• Automate repetitive administrative tasks using PowerShell and Microsoft Graph; keep documented scripts in version control.

• Maintain an inventory of SaaS applications, optimize licensing, manage renewals, and identify unauthorized applications.

• Provide daily technical support to staff.

• Create runbooks and documentation to ensure maintainability.

• Offer suggestions for technical solutions and quantify technical debt.

• Report directly to the Head of Platform as the organization's first dedicated IT hire.

⛳️ Requirements

• A minimum of a Bachelor's Degree in Information Technology, Computer Science, or equivalent practical experience.

• 6-10+ years of experience in corporate IT, systems administration, or systems engineering within a professional setting.

• Proven experience in building or restructuring a Microsoft 365 environment.

• Experience managing Entra ID, including conditional access, MFA policies, group and licensing structures, application registrations, and SSO integrations.

• Familiarity with Microsoft Intune, encompassing device enrollment, configuration profiles, application deployment, patch compliance, and encryption enforcement.

• Experience in administering and governing Exchange Online, SharePoint, and Teams.

• Background in managing a mixed fleet of macOS and Windows endpoints.

• Capability in automation using PowerShell and the Microsoft Graph API.

• Experience serving as the primary or sole IT function within an organization of approximately 30-150 individuals.

• Strong judgment in managing changes within a live production environment.

• Ability to work independently as well as collaboratively; a self-starter comfortable with complex systems and wide-ranging responsibilities.

• Candidates must reside in Canada with valid work authorization (Citizenship, PR, or Open Work Permit).

• Preferred: experience with ISO 27001 or SOC 2 and knowledge of audit evidence.

• Preferred: experience with Microsoft Defender and Microsoft Purview.

• Preferred: experience in supporting software engineers.

• Preferred: familiarity with common cloud services and corporate identity integration with cloud workloads.

🏝️ Benefits

• Fully remote work, with the option to work from one of our offices in Calgary or Toronto.

• Flexible work hours (Core working hours from 10:00 AM to 3:00 PM in your local time zone).

• Autonomy with diverse responsibilities, opportunities for advancement, and interdisciplinary exposure.

• Competitive base salary along with performance incentives.

• Stock options.

• 10 paid sick days annually.

• Comprehensive health and dental benefits.