IT Systems Administrator - Security & Operations

Tree Time Services•Sherwood Park, AB

3d•CA$35 - CA$41•Hybrid

About The Position

The IT Systems Administrator owns the security, hardware lifecycle, and operational efficiency of our physical and cloud technology assets (~90 total endpoints across 3 locations). Operating within a dedicated 2-week Scrum framework, you will help manage day-to-day desktop support (~5 hrs/week, mostly remote), enforce modern cybersecurity protections, oversee hardware procurement and lifecycle management, build, upgrade, and maintain systems, maintain asset tracking, audit software subscriptions, serve as secondary technical backup for internal Linux/DevOps operations, and other sundry IT-related tasks. This is a hybrid remote position based out of our Sherwood Park office. Travel to our other local facilities is minimal (typically once a month or less and within a 30-minute radius of our main office).

Requirements

3 to 5 years of hands-on Systems Administration, IT Security, or IT Operations experience managing a multi-site network of 50–150 endpoints.
Strong terminal-level experience with Linux (Ubuntu LTS), file permissions, systemd, Bash/Python scripting, and fundamental security practices (firewall rulesets, log analysis, threat mitigation).
Familiarity with cloud identity management (Google Workspace, JumpCloud or similar), stateful firewalls (OPNsense/pfSense), mesh VPNs (Tailscale/WireGuard), and cloud storage tools (rclone/AWS S3 CLI).
Proven track record managing hardware procurement, asset tracking, and vendor sourcing.
Valid Alberta Class 5 Driver's License and access to a personal vehicle for occasional local travel between facilities (mileage reimbursed).

Responsibilities

Manage and secure our footprint of ~90 endpoints across 3 locations and remote staff.
Administer and harden perimeter defenses using OPNsense firewall gateways, Tailscale mesh VPN routing, and JumpCloud identity management (enforcing mandatory MFA, BitLocker disk encryption, and automated patch policies).
Monitor centralized security telemetry via Wazuh SIEM to detect anomalies and ensure full compliance with cyber insurance requirements.
Verify automated, immutable, ransomware-proof server backups syncing cleanly to AWS S3 (Object Lock enabled).
Provide operational backup to the Lead DevOps Engineer for internal system repositories (Linux SVN on Ubuntu LTS).
Manage the complete end-to-end lifecycle for company laptops, desktops, and edge devices across all divisions.
Procure, deploy, and decommission computer hardware.
Maintain 100% data integrity in AssetTiger for all physical hardware assets.
Own IT onboarding and offboarding workflows, ensuring clean account provisionings and hardware staging on Day 1.
Audit software seats and SaaS subscriptions across all divisions to eliminate redundant licensing costs.
Evaluate, test, and help divisions implement Commercial Off-The-Shelf (COTS) software tools to streamline workflows.
Deliver practical cybersecurity hygiene and software efficiency training to staff.
Provide practical, down-to-earth L1/L2 technical support (primarily remote, occasionally on-site) for workstations (Windows 11, ChromeOS Flex), network printers, and cloud VoIP desk phones (~5 hrs/week ticket volume).