System Administrator – IT Operations

Malleum • Ottawa, ON

3d • Hybrid

About The Position

Malleum is seeking a client-facing System Administrator to deliver hands-on administration, maintenance, and operational support across client endpoints, servers, and Microsoft 365 environments, and to play a supporting role in active incident response (IR) engagements. In this role you’ll work remotely and at times on-site, within client environments including sovereign, regulated, and cleared settings, providing the technical expertise, reliability, and professionalism that define the Malleum delivery experience. This is a hands-on, intermediate-level role for a practitioner who pairs strong systems and endpoint skills with solid client presence, and who can step up when crises demand long, focused hours alongside our IR team.

Requirements

• Solid progressive experience in IT systems administration and endpoint management, ideally in a consulting, MSP, MSSP, or IR setting
• Demonstrated, hands-on Microsoft Intune implementation experience - packaging, policies, and deployment, not just awareness
• Strong Microsoft 365 and Entra ID administration
• Real backup and recovery experience: configuring, monitoring, and proving restores
• Comfortable owning support tickets end to end, with strong communication and professionalism
• Proficiency with Windows Server, Active Directory, and Group Policy
• Scripting for automation and rapid response (PowerShell; Bash or Python an asset)
• Calm, methodical, and effective under pressure; willing to work odd hours and weekends when supporting active IR matters
• Comfort working across multiple client environments, tooling stacks, and change-management processes simultaneously
• Familiarity with virtualization (VMware, Hyper-V) and Azure; networking fundamentals (TCP/IP, DNS, DHCP, VLANs) an asset
• Familiarity with ConnectWise or a similar PSA/RMM platform an asset
• Exposure to CIS hardening and regulated frameworks (NIST 800-171, ITSG-33, CMMC) an asset
• Certifications such as CompTIA A+, Network+, Security+, MD-102, MS-102, AZ-104, or ITIL strongly preferred
• Eligibility for Government of Canada security clearance (Secret or higher); existing clearance highly valued
• Bilingualism (English/French) considered a strong asset

Nice To Haves

• Bash or Python scripting
• Familiarity with virtualization (VMware, Hyper-V) and Azure
• Networking fundamentals (TCP/IP, DNS, DHCP, VLANs)
• Familiarity with ConnectWise or a similar PSA/RMM platform
• Exposure to CIS hardening and regulated frameworks (NIST 800-171, ITSG-33, CMMC)
• Certifications such as CompTIA A+, Network+, Security+, MD-102, MS-102, AZ-104, or ITIL
• Existing Government of Canada security clearance (Secret or higher)
• Bilingualism (English/French)

Responsibilities

• Administer, monitor, and maintain client endpoints, servers, and Microsoft 365 / Entra ID environments
• Implement and operate Microsoft Intune, including enrollment, compliance policies, configuration profiles, Win32 and Store app packaging and deployment, Autopilot, and endpoint hardening
• Configure, monitor, and test client backup, disaster recovery, and business continuity systems, proving restores on a regular schedule
• Lead patch management, software deployment, and configuration management across client servers and endpoints
• Provide multi-client support through the PSA/RMM (ConnectWise): triage, resolve, and escalate tickets cleanly while meeting SLAs
• Administer Active Directory, Group Policy, file and print services, and virtualization (VMware, Hyper-V)
• Implement and enforce hardening standards aligned with CIS Benchmarks and client frameworks such as NIST 800-171 and ITSG-33
• Standardize provisioning, onboarding/offboarding, and access-control workflows within client environments
• Support active incident response engagements — reimaging and rebuilding systems, restoring from backup, deploying and tuning endpoint tooling, and assisting with containment, eradication, and recovery
• Work odd hours, evenings, and weekends during active IR engagements, including rapid mobilization with little notice when clients are under attack
• Produce high-quality client deliverables: configuration documentation, runbooks, SOPs, and status reports
• Serve as a trusted technical point of contact, communicating clearly with client stakeholders ranging from end users to leadership
• Participate in an on-call rotation supporting critical client infrastructure

Benefits

• Competitive compensation
• on-call and IR premiums
• performance incentives
• comprehensive benefits
• Continuous learning budget
• certification sponsorship
• clear paths into senior engineering, IR, architecture, or security specializations

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed