IT Systems and Infrastructure Admin - In office

1. Position Overview
The IT Systems & Infrastructure Administrator is responsible for managing, maintaining,
securing, and supporting the organization’s internal IT infrastructure and technology
environment.
This individual will serve as the primary technical resource responsible for the
administration of network infrastructure, firewalls, wireless connectivity, Microsoft 365
services, endpoint management, identity and access management, and overall IT
operations.
The successful candidate will ensure the reliability, security, availability, and performance of
the company’s IT environment while providing responsive technical support to employees.
This role requires a hands-on IT professional with experience managing Cisco networking
technologies, Cisco Meraki solutions, Microsoft 365, endpoint devices, cybersecurity
controls, and IT administration in a small or medium-sized business environment.

Advantages
5. Desired Competencies
The successful candidate should demonstrate:

 Ownership: Ability to independently manage the organization’s IT environment.
 Problem-solving: Strong troubleshooting and root-cause analysis capabilities.
 Security mindset: Understanding of cybersecurity risks and preventative controls.
 Communication: Ability to explain technical issues to non-technical employees.
 Organization: Strong documentation and IT asset management practices.
 Adaptability: Comfortable working in a small IT team where responsibilities span
multiple technology domains.
 Assist with Managed Services business when needed
 Vendor management: Ability to coordinate with external service providers and
technology vendors.

Responsibilities
Key Responsibilities
A. Network Infrastructure & Security
 Manage and maintain the organization’s network infrastructure, including Cisco
switches, routers, and network appliances.
 Configure, administer, and maintain Cisco firewalls, including firewall rules, VPN
connectivity, security policies, and access controls.
 Manage Cisco Meraki infrastructure, including:
o Meraki MX security appliances and firewalls.
o Meraki MS switches.
o Meraki MR wireless access points.
 Monitor network availability, performance, bandwidth utilization, and connectivity.
 Manage VLANs, IP addressing, DHCP, DNS, routing, and network segmentation.
 Configure and maintain site-to-site and remote-access VPN connectivity.

 Troubleshoot network connectivity, wireless performance, and security incidents.
 Maintain network diagrams, configuration backups, and infrastructure
documentation.
 Implement network security best practices and ensure firmware and software are
maintained.
B. Microsoft 365 Administration
 Administer and maintain the Microsoft 365 environment.
 Manage Microsoft Exchange Online, Outlook, SharePoint Online, OneDrive, and
Microsoft Teams.
 Create, modify, and disable user accounts and manage Microsoft 365 licensing.
 Manage distribution lists, shared mailboxes, permissions, and collaboration settings.
 Administer Microsoft Entra ID (formerly Azure Active Directory).
 Configure and maintain Conditional Access policies and Multi-Factor Authentication
(MFA).
 Manage Microsoft Intune policies and device enrollment, where applicable.
 Monitor Microsoft 365 service health and troubleshoot user issues.
 Manage email security, spam filtering, phishing protection, and email authentication
(SPF, DKIM, DMARC).
 Support Microsoft 365 security and compliance configurations.
C. Endpoint & Device Management
 Manage the organization’s desktop computers, laptops, mobile devices, and
peripherals.
 Administer endpoint management through Microsoft Intune and other endpoint
management platforms.
 Configure device enrollment, provisioning, configuration profiles, and security
policies.
 Implement and maintain endpoint security standards, including:
o Antivirus and Endpoint Detection and Response (EDR).
o BitLocker and device encryption.
o Patch management and operating system updates.
o Application deployment and software updates.
o Local administrator restrictions.
o Device compliance policies.
 Manage device lifecycle activities, including procurement, deployment, replacement,
and retirement.
 Maintain accurate hardware and software inventory.
 Ensure devices meet corporate security and configuration standards.
D. Identity & Access Management
 Manage employee onboarding, offboarding, and role changes from an IT access
perspective.
 Provision and deprovision of user accounts across Microsoft 365 and other business
applications.

 Manage security groups, distribution groups, role-based access, and permissions.
 Implement least privilege access principles.
 Administer MFA and Conditional Access policies.
 Manage privileged accounts and administrative access.
 Conduct periodic user access reviews.
 Ensure timely removal of access for departing employees.
 Maintain access to management procedures and documentation.
E. IT Operations & End-User Support
 Provide Level 1 and Level 2 technical support to employees.
 Troubleshoot hardware, software, network, email, printing, and connectivity issues.
 Manage IT incidents and service requests through a ticketing system.
 Prioritize and resolve incidents based on business impact and urgency.
 Support remote employees and remote connectivity.
 Maintain IT documentation, standard operating procedures, and knowledge articles.
 Coordinate with external IT vendors, service providers, and technology partners.
 Provide technical guidance and training to employees.
F. Cybersecurity & IT Governance
 Implement and maintain baseline cybersecurity controls.
 Monitor endpoint security, firewall events, and suspicious activities.
 Manage vulnerability remediation and security patching.
 Maintain backup and recovery processes.
 Support disaster recovery and business continuity planning.
 Ensure appropriate protection of company data and systems.
 Conduct periodic security reviews and configuration assessments.
 Support security awareness and phishing prevention initiatives.
 Escalate security incidents and coordinate remediation activities.
G. IT Asset & Vendor Management
 Maintain inventory of IT hardware, software, licenses, and subscriptions.
 Manage IT procurement and coordinate equipment deployment.
 Track software licensing and renewals.
 Manage vendor relationships and support escalations.
 Monitor IT costs and identify opportunities to optimize licensing and infrastructure
spending.
 Maintain vendor contracts, warranties, and support agreements.

Qualifications
3. Technical Skills & Qualifications
The ideal candidate should have practical experience in the following technologies:
Technology Expected knowledge

Cisco Networking Switches, routers, VLANs, routing, DHCP, DNS
Cisco Firewalls Firewall policies, VPN, NAT, security rules
Cisco Meraki MX, MS, MR, Dashboard administration
Microsoft 365 Exchange, Teams, SharePoint, OneDrive
Microsoft Entra ID Identity, MFA, Conditional Access
Microsoft Intune Endpoint configuration and compliance
Windows.OS Windows 10/11 administration, Mac OS, Webex
Endpoint Security Defender, EDR, antivirus, BitLocker
Access Management User provisioning, RBAC, privileged access
Backup & Recovery Backup monitoring and restoration
IT Support Incident management and troubleshooting
4. Education & Experience
 Diploma or bachelor’s degree in information technology, Computer Science, Network
Administration, or a related discipline.
 3–5 years of experience in IT administration, infrastructure support, or systems
administration.
 Hands-on experience managing Cisco networking and firewall technologies.
 Experience administering Cisco Meraki environments.
 Strong working knowledge of Microsoft 365 administration.
 Experience with Microsoft Entra ID and Intune.
 Understanding cybersecurity fundamentals and IT best practices.
 Experience supporting users in a small or medium-sized business environment.
Preferred certifications:
 Cisco CCNA.
 Cisco Meraki certifications or equivalent training.
 Microsoft 365 Certified: Administrator.
 Microsoft Certified: Endpoint Administrator Associate.
 CompTIA Security+.

Summary
5. Desired Competencies
The successful candidate should demonstrate:

 Ownership: Ability to independently manage the organization’s IT environment.
 Problem-solving: Strong troubleshooting and root-cause analysis capabilities.
 Security mindset: Understanding of cybersecurity risks and preventative controls.
 Communication: Ability to explain technical issues to non-technical employees.
 Organization: Strong documentation and IT asset management practices.
 Adaptability: Comfortable working in a small IT team where responsibilities span
multiple technology domains.
 Assist with Managed Services business when needed
 Vendor management: Ability to coordinate with external service providers and
technology vendors.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.