IT Systems Engineer

Accountabilities: • Design, build, configure, and maintain the Microsoft 365 tenant architecture and corporate technology environment.

• Administer Entra ID, including Conditional Access, MFA enforcement, privileged access controls, group-based entitlements, licensing structures, application registrations, and SSO integrations.

• Own the full macOS and Windows endpoint lifecycle, including procurement, imaging, MDM enrollment, configuration baselines, patch compliance, encryption enforcement, remediation, refresh cycles, warranties, and secure disposal.

• Design and automate joiner, mover, and leaver processes covering account provisioning, hardware logistics, employee setup, and same-day access deprovisioning.

• Build automated workflows that generate appropriate records and reduce reliance on manual documentation.

• Automate recurring administrative activities using PowerShell and Microsoft Graph, maintaining scripts in version control with clear documentation.

• Manage the SaaS application inventory, optimize licensing, oversee renewals, and identify unsanctioned applications.

• Provide day-to-day technical support to employees while developing runbooks and documentation that enable others to maintain the environment effectively.

• Contribute technical recommendations, identify opportunities for improvement, and assess and quantify technical debt across the corporate environment.

• Apply sound judgment when sequencing changes in a live production environment, balancing technical improvements with business continuity.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.

• 6–10+ years of experience in corporate IT, systems administration, or systems engineering in a professional environment.

• Demonstrated experience building or rebuilding Microsoft 365 environments rather than simply maintaining an inherited, established environment.

• Strong hands-on expertise across the Microsoft ecosystem, including Entra ID, Microsoft Intune, Exchange Online, SharePoint, and Teams.

• Practical experience with Entra ID Conditional Access, MFA policies, group and licensing structures, application registrations, and SSO integrations.

• Experience with Intune device enrollment, configuration profiles, application deployment, patch compliance, and encryption enforcement.

• Experience managing mixed macOS and Windows endpoint fleets.

• Strong automation capabilities using PowerShell and the Microsoft Graph API.

• Experience serving as the primary or sole IT function within an organization of approximately 30–150 employees.

• Strong judgment and prioritization skills, particularly when implementing changes in live production environments.

• Ability to work independently while collaborating effectively with technical and non-technical stakeholders.

• Self-starter mindset, with the flexibility to take ownership of a broad range of responsibilities and work through complex systems.

• Experience in an ISO 27001 or SOC 2 environment and familiarity with generating IT-related audit evidence is an asset.

• Experience with Microsoft Defender and Microsoft Purview is an asset.

• Experience supporting software engineers or other technically sophisticated users is a plus.

• Exposure to common cloud services and an understanding of how corporate identity integrates with cloud workloads is also beneficial.

• Candidates must be located in Canada and authorized to work through Canadian citizenship, permanent residency, or an open work permit.

Benefits

• Fully remote work across Canada, with the option to work from offices in Calgary or Toronto.

• Flexible working hours, with core hours from 10:00 AM to 3:00 PM in your local time zone.

• Broad autonomy and ownership across the organization’s IT environment.

• Opportunities for advancement and cross-disciplinary exposure.

• Competitive base salary plus performance incentives.

• Stock options providing the opportunity to participate in the value created through your work.

• 10 paid sick days per year.

• Comprehensive health and dental benefits.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1