IT Infrastructure and Security Manager

IT Infrastructure and Security Manager for a Canadian not-for-profit organization, remote-based.

Marberg Job Number: 2784.

Job Type: Permanent Full-Time.

Existing Vacancy: Yes.

Compensation: From $90,000 to $105,000, depending on experience.

Additional Benefits: Comprehensive employer-paid extended health, vision, and dental benefits package, including an annual Health Spending Account starting on your first day of employment. Year-end RRSP contribution.

Regular Work Hours: 7 hours per day not including a 1-hour lunch break, to be worked during regular business hours, Monday to Friday (35 work hours per week). Must be available to participate in after-hours support for different time zones across Canada, and for critical infrastructure or security incidents. After-hours support is infrequent and typically limited to a small number of incidents per year.

Work Location: 100% remote-based, with occasional travel and onsite visits according to client business need.

Position Reports To: CFO and IT Director.

Responsibilities Summary:

IT Operations

• Administer and maintain the organization's core Microsoft 365 platform, including Entra ID, Exchange Online, SharePoint, Teams, Intune, the Defender suite, and Teams Calling, ensuring configurations are current, well-governed, and aligned with security best practices.
• Manage and monitor the endpoint environment across Windows (Intune MDM) and macOS (Hexnode MDM), including device enrolment, zero-touch deployment, configuration policy management, software deployment, and compliance monitoring, ensuring consistency across all devices.
• Administer and maintain infrastructure-level tools including backup solutions, VPN, website hosting, and other core platforms, ensuring proper configuration, monitoring, and documentation.
• Plan, test, and execute infrastructure changes and improvements in a structured manner, including scoping, non-production testing, rollout sequencing, post-deployment validation, and remediation of legacy configurations and technical debt. Maintain accurate project tracking in designated tools and proactively communicate project status, risks, and blockers to the team.
• Develop and maintain current technical documentation for supported systems, including configurations, dependencies, operational procedures, and known issues.
• Support vendor evaluation, licensing optimization, and service consolidation efforts, assisting with contract review and actively managing vendor performance to ensure reliability and value.
• Actively manage the support queue to ensure tickets are progressing, properly documented, resolved within expected timeframes, and serve as the Tier 3 escalation point for complex, novel, or high-impact technical issues.
• Provide technical mentorship, hands-on knowledge transfer, and capacity support to the technical team to build team capability and improve first-contact resolution rates.
• Collaborate with the IS team to identify, design, and implement improvements to help desk operations — including Jira Service Management configuration, ticket workflows, escalation paths, SLA parameters, performance reporting, and internal knowledge base maintenance.

Security Operations

• Act as the organization's primary internal liaison to the external security MSP, maintaining strong working knowledge of Microsoft Defender for Endpoint, XDR, and Entra ID Protection to support MSP-led investigations, implement recommended remediations, and contribute meaningfully to incident response activities.
• Proactively identify and escalate potential security gaps and concerns to the IS team and MSP, including anomalies or indicators of compromise not surfaced through automated alerting.
• Administer the CIRA Beauceron security awareness training platform, including campaign configuration, user assignment, completion tracking, and reporting.

Interested in remote work opportunities in IT & Network Engineering? Discover IT & Network Engineering Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Manage the implementation and maintenance of security configurations, conditional access policies, endpoint protection settings, backup monitoring, and periodic recovery testing in collaboration with the MSP and IS team.

Qualifications:

Education: Post-secondary degree or Diploma in applicable discipline, or equivalent combination of education and work experience.

Preferred Work Experience: At least 7+ years of hands-on, progressive experience in IT infrastructure, systems administration, or a senior technical specialist role.

Preferred Sector Experience: Not-for-Profit organization experience and/or Indigenous Community experience is an asset.

Leadership Experience: Demonstrated ability to provide technical mentorship and peer guidance to junior team members, including knowledge transfer, escalation support, and collaborative problem-solving during incidents or high-impact issues.

Technical and Language Skills Requirements:

• Proven expertise in administering Microsoft 365 and Azure, including identity, access management, security configurations, and core tenant administration; you are the primary system administrator.
• Demonstrated expertise managing Windows endpoint environments using Intune MDM, including device standardization, policy enforcement, application deployment, and lifecycle management.
• Demonstrated experience managing macOS environments using Hexnode MDM (or comparable Mac MDM) including device standardization, policy enforcement, application deployment, and lifecycle management.
• Demonstrated experience with IT service delivery and support operations, including hands-on escalation management and contributing to continuous improvement of help desk processes and workflows.
• Experience with Jira Service Management an asset.
• Demonstrated experience stabilizing and standardizing complex IT environments, including remediating legacy configurations, improving technical documentation, and reducing operational risk through structured remediation work.
• Operational security experience working in partnership with a security MSP, with responsibility for implementing, maintaining, and monitoring security controls across endpoints, identity, and core systems.
• Strong ability to operate effectively in complex environments, balancing competing priorities while maintaining system stability.
• Familiarity with additional enterprise and operational tools, such as Atlassian (Jira and Confluence), NordLayer VPN, Patch My PC, AWS, WPEngine, Box, Salesforce, and other similar platforms.
• Experience supporting or contributing to disaster recovery, business continuity planning, or security incident response exercises.

Task -Based Qualifications and Additional Attributes:

• Punctual, responsible, and reliable. Demonstrated record of professional conduct and character.
• Focused and able to work effectively with minimal direction and supervision, to prioritize tasks effectively, and to manage volume targets and due dates.
• Pleasant and courteous. Demonstrated commitment to client service and professional representation of the organization.
• Proficient de-escalation skills. Ability to surmount internal and external job pressures. Excellent listening skills, and the ability to provide and receive effective feedback.

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Proven ability to professionally handle confidential information and exercise good judgment in the interpretation and application of instructions and organization policy.
• Demonstrated ability to work well both independently and collaboratively, and in an advisory capacity, and liaise effectively with a wide and diverse range of internal and external stakeholders.

Additional Requirements:

• Must be legally entitled to work in Canada, providing satisfactory documentation upon request.
• Ability to work both remotely and onsite, abiding by organization health and safety policies, abiding by organization health and safety policies.
• Ability to travel within Canada as required.
• Ability to promptly provide reasonably recent, qualified employment references at point of client interview who are available to speak with either Marberg or Marberg's client.
• Ability to declare personal Non-Conflict of Interest in position responsibilities.
• Satisfactory Background Checks, Technical Skills Evaluations, Interpersonal Skills Assessment, and Employment References as required.

Application Notes:

Recommended Application Date: We kindly request that you submit your resume as soon as possible. Qualified applications may be contacted same day as date of application.

We thank all applicants for their interest but wish to advise that only those selected for an interview will be contacted.

Please note that Marberg Staffing updates job posts regularly, and external job boards may not reflect these changes in a timely fashion. Please refer to https://marberg.com/career-portal for the most current information including salary range.

Please note that for this position, Marberg Staffing only accepts applications through Indeed.ca, LinkedIn and marberg.com.

Candidates are only contacted via official phone call, email, or LinkedIn message from Marberg Staffing. Please disregard any initial contact through other mediums such as text message.

No AI tools are used to screen, assess or select employment applications. All candidate selection processes are performed by qualified recruiters.

Marberg is committed to supporting workplace diversity and inclusivity, to reflect the demographic profile of all Ontarians. Applications are encouraged from equity seeking groups including people of colour, Indigenous people, individuals with disabilities, and people from the LGBTQ2S community.