System Administrator (Network and Cybersecurity) - Client Delivery

Malleum • Ottawa, ON

4d • Hybrid

About The Position

Malleum is seeking a client-facing System Administrator (Network and Cybersecurity) to deliver hands-on administration, hardening, and operational support across client network and security infrastructure, and to play a critical supporting role in active incident response (IR) engagements. You'll work directly within client environments including sovereign, regulated, and cleared settings providing the technical expertise, composure, and professionalism that define the Malleum delivery experience. This is a hands-on consulting role for a practitioner who blends deep technical skill with strong client presence, and who can step up when crises demand long, focused hours alongside our IR team.

Requirements

• 4+ years of experience as a System Administrator with a blend of network and cybersecurity responsibilities, ideally in a consulting, MSP, MSSP, or IR setting
• Demonstrated ability to perform under pressure during incidents - calm, methodical, and effective during long, high-intensity engagements
• Willingness and availability to work odd hours, weekends, and extended shifts when supporting active IR matters
• Demonstrated success working directly with clients - strong communication, professionalism, and stakeholder management skills
• Strong working knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS, DHCP, and segmentation
• Solid understanding of Zero Trust Network Access (ZTNA) fundamentals - identity-centric access, least privilege, micro-segmentation, device posture, and continuous verification
• Hands-on experience with Cloudflare services such as Cloudflare One / Zero Trust, Access, Tunnel, Gateway, WARP, and DNS / WAF / CDN configuration
• Hands-on experience with firewalls (Fortinet, Palo Alto, or Cisco), wireless controllers, and NAC solutions
• Proficiency with Windows Server, Active Directory, Group Policy, and Microsoft 365 / Azure administration
• Familiarity with Linux administration and scripting (PowerShell, Bash, or Python) for automation and rapid response tasks
• Experience with SIEM/EDR platforms (e.g., Microsoft Sentinel, Defender, CrowdStrike, Splunk) including rapid deployment in IR scenarios
• Solid grasp of cybersecurity fundamentals: identity, encryption, logging, hardening, and zero-trust principles
• Comfort working across multiple client environments, tooling stacks, and change management processes simultaneously
• Eligibility for Government of Canada security clearance (Secret or higher); existing clearance highly valued

Nice To Haves

• Familiarity with adjacent ZTNA and SASE platforms (e.g., Zscaler, Netskope, Palo Alto Prisma Access) considered an asset
• Exposure to incident response frameworks such as NIST SP 800-61 and SANS PICERL is a strong asset
• Certifications such as CompTIA Security+, Network+, CCNA, MS-102, AZ-104, or equivalent strongly preferred; CISSP Associate, SSCP, GCIH, or GCFA an asset
• Bilingualism (English/French) considered a strong asset

Responsibilities

• Administer, monitor, and maintain client network infrastructure including routers, switches, firewalls, VPNs, and wireless systems
• Operate and tune client security tooling such as EDR/XDR, SIEM, email security, vulnerability scanners, and identity platforms (Entra ID, Okta)
• Design, deploy, and operate Zero Trust Network Access (ZTNA) solutions, including Cloudflare edge, access, and tunnel services, to enable secure remote access, identity-aware policies, and modern perimeter strategies
• Support Microsoft 365, Azure, AWS, and hybrid environments within each client's security baseline and compliance posture
• Implement and enforce hardening standards aligned with CIS Benchmarks, NIST 800-53/171, ITSG-33, and client-specific frameworks
• Lead patch management, vulnerability remediation, and configuration management across client servers, endpoints, and network devices
• Support active incident response engagements — deploying and tuning tooling, isolating systems, preserving evidence, rebuilding infrastructure, and assisting with containment, eradication, and recovery activities
• Work odd hours, evenings, weekends, and extended shifts during active IR engagements, including rapid mobilization with little notice when clients are under attack
• Partner with Malleum's IR consultants, forensic analysts, and threat hunters to execute response playbooks under pressure
• Maintain client backup, disaster recovery, and business continuity systems with regular testing
• Produce high-quality client deliverables: network diagrams, configuration documentation, runbooks, SOPs, IR action logs, and status reports
• Standardize provisioning, onboarding/offboarding, and access control workflows within client environments
• Serve as a trusted technical point of contact, communicating clearly with client stakeholders ranging from end users to executive leadership during both steady-state and crisis operations
• Contribute to scoping, estimation, and continuous improvement of Malleum's managed, project-based, and IR service offerings
• Participate in an on-call rotation supporting critical client infrastructure and security events

Benefits

• Competitive compensation
• on-call and IR premiums
• performance incentives
• comprehensive benefits
• Continuous learning budget
• certification sponsorship
• clear paths into senior engineering, IR, architecture, or security specializations

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed