IT Infrastructure & Security Engineer

Reports to: Head of IT

Level: Mid-level

Location: Vancouver/Toronto

Salary: 85,000 - 110,000 + bonus

About the role

This is a mid-level, hands-on infrastructure role focused on technical delivery. It is not a strategy or people-leadership position.

JD Sports Canada is growing quickly. We operate 55 stores today and are on track to reach 90 by 2029, supporting roughly 2,500 employees across the country. That growth is putting real pressure on our infrastructure and security posture, and we’re looking for an engineer to help build, improve, and maintain the platforms that support it.

Sitting within our wider IT function, you’ll work alongside our support, DevOps, and new-store-opening teams. You’ll take ownership of delivering network, endpoint, and security improvements across the estate - including Meraki in every store, Intune and Entra ID across our devices, and a significant expansion of our security-monitoring capabilities.

You’ll report directly to the Head of IT and contribute to the designs and standards you’ll be responsible for implementing. Support and escalation will be available, and you won’t be expected to solve everything alone. However, you will be trusted to own delivery and make a visible, measurable improvement to our technology estate.

This role offers broad exposure, modern tooling, direct access to the person making the decisions, and a team small enough that your work will be noticed. It’s a strong opportunity for an established engineer who is ready to take greater ownership while continuing to develop their technical depth.

What you'll be working on in year one

• Expanding our centralised logging and security monitoring coverage across the store estate, cloud, and SaaS platforms
• Standardising and hardening Cisco Meraki firewall, SD-WAN, and wireless configuration across all sites
• Deploying and tuning modern email and endpoint security platforms
• Maturing Intune compliance policies, application deployment, and patching across our device fleet
• Automating the manual operational work our team is still doing by hand
• Supporting network build and turn-up for new store openings

Responsibilities

Security platform delivery

• Onboard and maintain log sources into our security monitoring platform, including agent, syslog, and API-based collection
• Deploy, configure, and tune email and endpoint security tooling
• Implement remediation for audit and vulnerability findings against agreed timelines
• Support evidence collection for PCI DSS and internal audit activity

Network engineering

• Implement and standardise Meraki MX, MS, and MR configuration across the store estate
• Build and turn up network infrastructure for new store openings
• Troubleshoot escalated connectivity, performance, and WAN resilience issues
• Maintain network documentation and configuration baselines

Endpoint & identity

• Own day-to-day Intune configuration: compliance policies, app deployment, OS patching
• Implement Entra ID and conditional access configuration to defined standards
• Maintain device lifecycle and asset management tooling

Automation & documentation

• Automate recurring operational tasks using PowerShell, Graph API, and platform APIs
• Produce runbooks and as-built documentation for everything you deploy
• Keep configuration standards current as the estate grows

All work is delivered against designs and standards set with the Head of IT.

What we're looking for

Essential

• 3–5 years in a hands-on infrastructure, systems, or security engineering role
• Solid working experience with Cisco Meraki in a multi-site environment (MX, MS, MR)
• Solid working experience with Microsoft Intune and Entra ID: compliance policies, conditional access, app deployment
• Working knowledge of the Microsoft 365 security stack, including Defender
• Scripting for automation — PowerShell primarily, Python useful
• Experience delivering rollouts across multiple sites with structured change management

Desirable

• Exposure to SIEM or centralised logging platforms — Splunk, Sentinel, or similar
• Email security platform experience
• Retail, hospitality, or another distributed multi-site environment
• PCI DSS exposure
• Graph API, Terraform, or CI/CD familiarity
• Certifications such as Meraki CMNA, MS-102, SC-300, or Security+

You won't have all of this. If you're strong on Meraki and Intune and you learn fast, we'll back you on the rest.

How you work (we care about this as much as the technical list):

• You finish what you start and document it without being chased
• You test before you roll out, and you have a rollback plan
• You escalate early when you're blocked rather than quietly burning a week
• You work well alongside our support, DevOps, and store opening teams — most of what you build touches all three

Why this role

• Real scope. A growing estate, a security roadmap with budget behind it, and platforms most engineers at this level don't get their hands on.
• Visible work. Small team, direct line to the Head of IT, no layers between you and the decisions.
• Growth. As the estate scales toward 90 stores, this function grows with it. We'd rather promote the person who built it than hire above them.

JD Sports Canada is an equal opportunity employer. We welcome applications from all qualified candidates and will provide accommodation on request throughout the recruitment process.