Cloud and Security Administrator

Job description

**At Beedie, we foster talent, encourage innovation, and reward success.** We’re always looking for like-minded people to join our team and share our passion for doing the best work of our lives. Our approach is simple: we work hard, we have fun, and we make a difference. And, we’ve been recognized as a top employer provincially and nationally. Our people are the heart and soul of our organization. If you are passionate, hardworking, ambitious, and want to be part of a dynamic and growing company that will take your career forward, join us. We are seeking an experienced Cloud and Security Administrator to own the administration, security, and continuous improvement of our Microsoft cloud environment. This role is responsible for maintaining a secure, reliable, and high-performing infrastructure across Microsoft Azure, Microsoft 365, and enterprise networking while driving security best practices throughout the organization. Working closely with internal IT staff and external vendors, you will proactively manage cloud infrastructure, strengthen our cybersecurity posture, automate operational processes, and provide Tier 3 technical support for approximately 400 employees across multiple office locations and construction sites. ### Qualifications **Required:** - College diploma or university degree in Information Technology, Computer Science, or a related discipline. - Minimum 5 years of progressive systems administration experience, including at least 2 years independently administering enterprise Microsoft cloud infrastructure and security platforms. - Advanced administration experience with Microsoft 365, Entra ID, Intune, Azure, Microsoft Defender and Exchange Online. - Demonstrated experience implementing Conditional Access, MFA, device compliance, identity governance and endpoint security policies. - Strong PowerShell scripting and automation experience, including Microsoft Graph. - Experience leading or serving as the technical lead on Microsoft cloud infrastructure projects. - Experience monitoring, investigating and responding to security incidents and vulnerabilities. - Strong troubleshooting skills across cloud services, identity, networking and endpoint management. - Experience supporting a mid-sized enterprise environment (approximately 300+ users). - Strong written and verbal communication skills with excellent customer service and interpersonal abilities. - Self-motivated with the ability to work independently and collaboratively within a team. - Demonstrated attention to detail with strong organizational and prioritization skills. - Ability to adapt quickly in a fast-paced environment. - Valid BC Driver's Licence - Primarily office-based with occasional after-hours or weekend work to support maintenance windows and critical incidents. ### Technical Experience **Microsoft Cloud** - Microsoft Azure - Microsoft Entra ID - Microsoft 365 Administration - Exchange Online - SharePoint Online - Microsoft Teams - OneDrive for Business - Microsoft Intune - Windows Autopilot **Security** - Microsoft Defender XDR - Microsoft Defender for Endpoint - Microsoft Defender for Office 365 - Conditional Access - Multi-Factor Authentication - Data Loss Prevention (DLP) - Microsoft Purview - Azure Role-Based Access Control (RBAC) - Privileged Identity Management (PIM) (preferred) - Azure Monitor and Log Analytics - Vulnerability management and remediation - Working with Managed Detection and Response (MDR/XDR) providers **Infrastructure** - Windows Server administration - Active Directory - Group Policy - DNS - DHCP - Certificate Services - Enterprise networking including firewalls, routing, switching, VPNs, and wireless infrastructure - Cloud backup and disaster recovery solutions **Automation** - PowerShell scripting - Azure CLI - Experience automating administrative tasks and operational processes **Data & Analytics (nice to have)** - Familiarity with Microsoft Fabric administration. - Familiarity supporting data warehouses, data lakes, or enterprise reporting platforms. ### Responsibilities **Cloud Administration** - Administer and maintain Microsoft Azure and Microsoft 365 environments. - Deploy, configure, and manage Azure resources including Virtual Machines, Virtual Networks, Storage Accounts, Firewalls, Load Balancers, and networking components. - Administer Microsoft Entra ID including users, groups, licensing, authentication, naming standards, and identity governance. - Manage Exchange Online, SharePoint Online, Teams, OneDrive for Business, and related Microsoft 365 services. - Configure and maintain enterprise cloud integrations including Single Sign-On (SSO), Conditional Access, and identity federation. - Monitor Microsoft service health and resolve infrastructure and cloud service incidents. - Ensure Azure and Microsoft 365 environments remain organized, secure, and aligned with established standards. **Security** - Lead ongoing improvements to the organization's Microsoft cloud security posture. - Develop, implement, and maintain cloud security standards, baselines, and best practices. - Ensure cloud services comply with organizational security policies and regulatory requirements. - Administer Conditional Access policies, security controls, Microsoft Defender, Microsoft Purview, and Data Loss Prevention policies. - Coordinate incident response activities with external MDR/XDR partners. - Conduct security reviews, risk assessments, and vulnerability remediation. - Participate in internal and external security audits. - Perform security hardening across cloud infrastructure and Microsoft 365 services. - Monitor security alerts, investigate threats, and coordinate remediation activities. - Ensure firewalls and security appliances remain current with firmware updates and security patches. **Infrastructure & Operations** - Administer cloud backup, disaster recovery, and business continuity solutions. - Monitor system performance, capacity, and availability to ensure optimal operation. - Develop PowerShell and Azure CLI automation to improve operational efficiency. - Working knowledge of enterprise networking including firewalls, switching, routing, VPNs, and wireless infrastructure. - Maintain accurate technical documentation, procedures, standards, and diagrams. - Coordinate with technology vendors to resolve complex technical issues. - Participate in change management processes to ensure infrastructure changes are implemented safely and consistently. **Support** - Provide Tier 3 technical support for Windows 11 laptops, mobile devices, Microsoft 365 services, and cloud infrastructure. - Act as the escalation point for complex infrastructure and cloud-related issues. - Collaborate with the other IT team members to resolve technical issues. - Support infrastructure and technology deployments across all office locations and construction sites. **Reporting** - Prepare monthly operational and security reports summarizing infrastructure health, security posture, incidents, vulnerabilities, project progress, and key performance metrics. - Provide recommendations for continuous improvement, risk reduction, and technology modernization.