Job Description

Qualifications

Required:

College diploma or university degree in Information Technology, Computer Science, or a related discipline.

Minimum 5 years of progressive systems administration experience, including at least 2 years independently administering enterprise Microsoft cloud infrastructure and security platforms.

Advanced administration experience with Microsoft 365, Entra ID, Intune, Azure, Microsoft Defender and Exchange Online.

Demonstrated experience implementing Conditional Access, MFA, device compliance, identity governance and endpoint security policies.

Strong PowerShell scripting and automation experience, including Microsoft Graph.

Experience leading or serving as the technical lead on Microsoft cloud infrastructure projects.

Experience monitoring, investigating and responding to security incidents and vulnerabilities.

Strong troubleshooting skills across cloud services, identity, networking and endpoint management.

Experience supporting a mid-sized enterprise environment (approximately 300+ users).

Strong written and verbal communication skills with excellent customer service and interpersonal abilities.

Self-motivated with the ability to work independently and collaboratively within a team.

Demonstrated attention to detail with strong organizational and prioritization skills.

Ability to adapt quickly in a fast-paced environment.

Valid BC Driver's Licence

Primarily office-based with occasional after-hours or weekend work to support maintenance windows and critical incidents.

Technical Experience

Microsoft Cloud

Microsoft Azure

Microsoft Entra ID

Microsoft 365 Administration

Exchange Online

SharePoint Online

Microsoft Teams

OneDrive for Business

Microsoft Intune

Windows Autopilot

Security

Microsoft Defender XDR

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Conditional Access

Multi-Factor Authentication

Data Loss Prevention (DLP)

Microsoft Purview

Azure Role-Based Access Control (RBAC)

Privileged Identity Management (PIM) (preferred)

Azure Monitor and Log Analytics

Vulnerability management and remediation

Working with Managed Detection and Response (MDR/XDR) providers

Infrastructure

Windows Server administration

Active Directory

Group Policy

DNS

DHCP

Certificate Services

Enterprise networking including firewalls, routing, switching, VPNs, and wireless infrastructure

Cloud backup and disaster recovery solutions

Automation

PowerShell scripting

Azure CLI

Experience automating administrative tasks and operational processes

Data & Analytics (nice to have)

Familiarity with Microsoft Fabric administration.

Familiarity supporting data warehouses, data lakes, or enterprise reporting platforms.

Responsibilities

Cloud Administration

Administer and maintain Microsoft Azure and Microsoft 365 environments.

Deploy, configure, and manage Azure resources including Virtual Machines, Virtual Networks, Storage Accounts, Firewalls, Load Balancers, and networking components.

Administer Microsoft Entra ID including users, groups, licensing, authentication, naming standards, and identity governance.

Manage Exchange Online, SharePoint Online, Teams, OneDrive for Business, and related Microsoft 365 services.

Configure and maintain enterprise cloud integrations including Single Sign-On (SSO), Conditional Access, and identity federation.

Monitor Microsoft service health and resolve infrastructure and cloud service incidents.

Ensure Azure and Microsoft 365 environments remain organized, secure, and aligned with established standards.

Security

Lead ongoing improvements to the organization's Microsoft cloud security posture.

Develop, implement, and maintain cloud security standards, baselines, and best practices.

Ensure cloud services comply with organizational security policies and regulatory requirements.

Administer Conditional Access policies, security controls, Microsoft Defender, Microsoft Purview, and Data Loss Prevention policies.

Coordinate incident response activities with external MDR/XDR partners.

Conduct security reviews, risk assessments, and vulnerability remediation.

Participate in internal and external security audits.

Perform security hardening across cloud infrastructure and Microsoft 365 services.

Monitor security alerts, investigate threats, and coordinate remediation activities.

Ensure firewalls and security appliances remain current with firmware updates and security patches.

Infrastructure & Operations

Administer cloud backup, disaster recovery, and business continuity solutions.

Monitor system performance, capacity, and availability to ensure optimal operation.

Develop PowerShell and Azure CLI automation to improve operational efficiency.

Working knowledge of enterprise networking including firewalls, switching, routing, VPNs, and wireless infrastructure.

Maintain accurate technical documentation, procedures, standards, and diagrams.

Coordinate with technology vendors to resolve complex technical issues.

Participate in change management processes to ensure infrastructure changes are implemented safely and consistently.

Support

Provide Tier 3 technical support for Windows 11 laptops, mobile devices, Microsoft 365 services, and cloud infrastructure.

Act as the escalation point for complex infrastructure and cloud-related issues.

Collaborate with the other IT team members to resolve technical issues.

Support infrastructure and technology deployments across all office locations and construction sites.

Reporting

Prepare monthly operational and security reports summarizing infrastructure health, security posture, incidents, vulnerabilities, project progress, and key performance metrics.

Provide recommendations for continuous improvement, risk reduction, and technology modernization.