Job Description

At SecondShop, we’re a team of Canadians who believe in doing better—for our country, your wallets, and our planet.

We started with a simple idea: why should perfectly good products go to waste or sit unsold when people like you are out there looking for smart ways to save? We have made it our mission to source the highest quality open-box, overstocked, and scratch-and-dent products from the top brands - offering them to Canadians at up to 50% off. But we are not just about savings—we’re about changing how people shop. Say goodbye to paying full price and hello to smarter spending.

We are looking for a hands-on IT Systems Administrator to own the day-to-day administration of our core IT, productivity and security systems.

This is an execution-focused role for someone who enjoys variety: configuring and deploying tools, supporting end users, managing vendors, building documentation and helping bring a newly acquired company’s IT environment into alignment with SecondShop.

Microsoft 365 is central to how we operate. You will be a key administrator of our Microsoft environment, helping ensure our users, devices, collaboration tools and security controls are well-managed, reliable and scalable as the company grows.

Working closely with the Head of Engineering and IT/security leadership, you will play a key role in strengthening how we manage identity, devices, security tooling, Microsoft 365 and IT service delivery across the business.

What You’ll Do

• Act as a primary administrator for Microsoft 365, user accounts, licences, groups, mailbox and collaboration settings, security controls and access policies.
• Support requirements gathering, evaluation and selection of a new identity and access management (IAM) platform.
• Configure, launch and administer the IAM platform, including user lifecycle management, access policies and integrations.
• Help maintain a secure, consistent Microsoft identity environment, including MFA, conditional access, role-based access and onboarding/offboarding processes.
• Administer 1Password, including vendor management, user onboarding, training and policy setup.
• Support the migration and consolidation of an acquired company’s Microsoft 365 tenant into SecondShop’s environment.
• Integrate acquired-company identities and access into the new IAM platform.
• Assist with related tenant-consolidation work, including guest access, shared channels and cross-tenant collaboration approaches.

Endpoint management and security

• Support the evaluation, rollout and administration of endpoint protection / EDR tooling.
• Manage mobile device management (MDM) and the broader managed-device fleet, including provisioning, patching, compliance policies and endpoint-security standards.
• Support the rollout of phishing-reporting, security-awareness and secure-coding training platforms; track adoption and completion.
• Support wider cybersecurity initiatives alongside internal leadership and external partners, including SIEM/SOC monitoring, network access control, data loss prevention and dark-web/domain monitoring.
• Help establish and maintain clear IT security processes, including access reviews, device compliance and incident-escalation procedures.

IT service delivery and asset management

• Support the selection and implementation of a help desk ticketing system.
• Establish ticket categories, workflows, SLAs and knowledge-base content.
• Serve as a primary point of contact for day-to-day help desk operations once live.
• Support the selection and rollout of a hardware asset-tracking system.
• Conduct and maintain a complete inventory of company equipment across the organisation.
• Build clear, practical IT processes and documentation that enable consistent support and scalable operations.

• Support Engineering’s adoption of dependency scanning, code scanning and secret-scanning tools.
• Provide administrative support across GCP, AWS and Azure environments as needed.
• Support IT-related administration of Business Central and related business systems.

Who We’re Looking For

• 3+ years’ experience in IT administration, systems administration or IT support.
• Strong hands-on experience administering Microsoft 365 in a business environment, including Entra ID/Azure AD, user and licence administration, groups, MFA and core security settings.
• Experience supporting Microsoft endpoint management, including Intune or comparable MDM tooling, device provisioning, patching and compliance policies.
• Hands-on experience administering some combination of IAM, endpoint protection/EDR, MDM and Microsoft 365.
• Experience participating in SaaS or security-tool vendor evaluations and managing vendor relationships.
• Confidence working directly with end users on training, support and rollout communications.
• Strong documentation habits and an ability to build clear processes from scratch.
• Familiarity with core security practices, including least privilege, MFA, endpoint hardening, conditional access and phishing awareness.

Nice to have

• Experience with Microsoft 365 tenant migrations, tenant consolidation or post-acquisition integration.
• Experience with Microsoft Defender, Intune, Entra ID, Purview or related Microsoft security and compliance tooling.
• Experience with Google Workspace.
• Experience supporting a business through an acquisition, merger or tenant consolidation.
• Exposure to SIEM/SOC tooling, NAC or DLP solutions.
• Administrative familiarity with AWS, Azure and/or GCP.
• Experience supporting development-security tooling or working alongside an engineering team.
• Experience with Business Central or a similar ERP platform.
• Relevant certifications, such as Microsoft 365 Certified: Administrator Expert, Microsoft Security certifications or CompTIA Security+.