IT Systems Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Systems Engineer based in Canada . As the organization’s first dedicated IT hire, you will take ownership of the design, implementation, and day-to-day operation of its corporate technology environment. You will play a central role in shaping a scalable and secure IT foundation across Microsoft 365, Entra ID, endpoints, and identity and access management. This senior individual contributor position combines hands-on technical delivery with meaningful autonomy and broad organizational impact. You will work closely with the Head of Platform, translating technical direction into robust systems and practical solutions. The environment is fully remote, distributed across Canada, the United States, and Europe, with optional office access in Calgary and Toronto. This is an opportunity to establish IT processes from the ground up while supporting a growing, technically sophisticated organization.

Design, build, configure, and maintain the Microsoft 365 tenant architecture and corporate technology environment. Administer Entra ID, including Conditional Access, MFA enforcement, privileged access controls, group-based entitlements, licensing structures, application registrations, and SSO integrations. Own the full macOS and Windows endpoint lifecycle, including procurement, imaging, MDM enrollment, configuration baselines, patch compliance, encryption enforcement, remediation, refresh cycles, warranties, and secure disposal. Design and automate joiner, mover, and leaver processes covering account provisioning, hardware logistics, employee setup, and same-day access deprovisioning. Build automated workflows that generate appropriate records and reduce reliance on manual documentation. Automate recurring administrative activities using PowerShell and Microsoft Graph, maintaining scripts in version control with clear documentation. Manage the SaaS application inventory, optimize licensing, oversee renewals, and identify unsanctioned applications. Provide day-to-day technical support to employees while developing runbooks and documentation that enable others to maintain the environment effectively. Contribute technical recommendations, identify opportunities for improvement, and assess and quantify technical debt across the corporate environment. Apply sound judgment when sequencing changes in a live production environment, balancing technical improvements with business continuity. Requirements Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. 6–10+ years of experience in corporate IT, systems administration, or systems engineering in a professional environment. Demonstrated experience building or rebuilding Microsoft 365 environments rather than simply maintaining an inherited, established environment. Strong hands-on expertise across the Microsoft ecosystem, including Entra ID, Microsoft Intune, Exchange Online, SharePoint, and Teams. Practical experience with Entra ID Conditional Access, MFA policies, group and licensing structures, application registrations, and SSO integrations. Experience with Intune device enrollment, configuration profiles, application deployment, patch compliance, and encryption enforcement. Experience managing mixed macOS and Windows endpoint fleets. Strong automation capabilities using PowerShell and the Microsoft Graph API. Experience serving as the primary or sole IT function within an organization of approximately 30–150 employees. Strong judgment and prioritization skills, particularly when implementing changes in live production environments. Ability to work independently while collaborating effectively with technical and non-technical stakeholders. Self-starter mindset, with the flexibility to take ownership of a broad range of responsibilities and work through complex systems. Experience in an ISO 27001 or SOC 2 environment and familiarity with generating IT-related audit evidence is an asset. Experience with Microsoft Defender and Microsoft Purview is an asset. Experience supporting software engineers or other technically sophisticated users is a plus. Exposure to common cloud services and an understanding of how corporate identity integrates with cloud workloads is also beneficial. Candidates must be located in Canada and authorized to work through Canadian citizenship, permanent residency, or an open work permit. Benefits Fully remote work across Canada, with the option to work from offices in Calgary or Toronto. Flexible working hours, with core hours from 10:00 AM to 3:00 PM in your local time zone. Broad autonomy and ownership across the organization’s IT environment. Opportunities for advancement and cross-disciplinary exposure. Competitive base salary plus performance incentives. Stock options providing the opportunity to participate in the value created through your work. 10 paid sick days per year. Comprehensive health and dental benefits.

laptop-ats-crawler v3