Sr. IT System Administrator

Get roles like this by email

New roles in Waterloo Region, mailed the morning after they appear, and The Weekly each Monday.

Change or stop it from any email.

About Us:

Propel (TSX: PRL) is the fintech company building a new world of financial opportunity by facilitating access to credit for consumers underserved by traditional financial institutions. Through its AI-driven platform, Propel evaluates customers in a more comprehensive way than traditional credit scores can. Our revolutionary fintech platform has already helped consumers access over one million loans and lines of credit and over one billion dollars in credit.

To build a new world of opportunity we bring together the brightest talent to help us build opportunities. We are entrepreneurs and believe in measuring success through results and growing within; talent and hard work never goes unnoticed. At Propel, we are here to change the way employees, customers and shareholders succeed together.

We are a team of passionate entrepreneurs, who foster curiosity and growth in our employees. Our culture is why we have been so successful and why our employees choose Propel to build their careers. It is also why we are one of North America’s fastest growing companies and a Best Place to Work.

Join us as we change the way employees, customers and shareholders succeed together.

About You:

You thrive in a vibrant, entrepreneurial organization where your ideas are valued. You are motivated by goals, a self-starter, and enjoy wearing multiple hats in a fast-growing fintech environment.

The Senior IT System Administrator is a senior technical owner within Propel IT, responsible for maintaining reliable, secure, documented, and healthy infrastructure, cloud services, endpoint platforms, identity services, and security-support processes. This hands-on role requires strong troubleshooting, disciplined change management, and clear communication with IT, Information Security, P&C, business stakeholders, and vendors. As an L3 escalation point, this person owns assigned systems and issues end to end, drives resolution, communicates proactively, and coaches junior team members through standards and practical troubleshooting guidance.

Responsibilities

Infrastructure, Cloud, and Network Operations

• Administer, monitor, and improve Azure infrastructure, Entra ID, Azure networking, virtual machines, storage, resource health, access paths, and related cloud services

• Manage and support Windows Server, AD DS, DNS, GPO, DFS, IIS, VMware, backup/recovery dependencies, and other core infrastructure services as assigned

• Coordinate with vendors/MSPs for office network, firewall, switching, Wi-Fi, ISP, Azure, Cloudflare, and infrastructure work while retaining internal ownership of follow-up and closure

• Support Cloudflare WARP, Zero Trust tunnels, access policies, network routing dependencies, and approved remote/private access paths in coordination with Security and system owners

• Monitor system health, capacity, availability, backup posture, and configuration drift; identify issues before they become recurring support problems

Endpoint, Patch, and Device Management

• Own day-to-day administration and health of endpoint management platforms such as Microsoft Intune, Microsoft Defender for Endpoint, KACE, Jamf, and any future macOS MDM replacement such as IRU/Kandji-style tooling

• Deploy, monitor, and validate operating system patches, application updates, configuration profiles, security baselines, compliance policies, and endpoint remediation scripts

• Support Windows Autopilot, Intune enrollment, Jamf enrollment, device rebuilds, endpoint readiness checks, BitLocker/FileVault, LAPS, ScreenConnect, Cloudflare WARP, KACE, and Defender onboarding

• Investigate device issues affecting employee productivity, including hardware failures, application problems, update/reboot issues, browser and extension issues, and endpoint-policy conflicts

• Maintain accurate runbooks for device onboarding, rebuild, patching, quarantine, remediation, and return-to-service workflows

Security Operations and Incident Support

• Review, triage, and escalate security alerts from Microsoft Defender, Rapid7, KACE, Intune, Entra sign-in logs, Cloudflare, and related systems according to Propel security and compliance processes

• Work with Information Security on suspicious activity, compromised-device investigations, risky sign-ins, malware alerts, phishing-related endpoint activity, and data-loss or DLP-triggered events

• Gather and preserve evidence through approved tooling, including Defender investigation packages, Live Response where authorized, full scan results, logs, timelines, affected-device scope, and remediation evidence

• Support containment actions when approved, including device isolation, session revocation, access blocking, password/MFA recovery actions, device wipe/rebuild, and controlled return-to-service validation

• Document incident actions, approvals, evidence, and recovery steps in Jira or the approved security record without exposing unnecessary sensitive details to requester-facing comments

Microsoft 365, Identity, SSO, and Data Protection

• Administer and support Microsoft 365 services including Exchange Online, Teams, SharePoint, OneDrive, Defender, Intune, Entra ID, enterprise applications, and related user/device policies

• Understand and support SSO concepts including SAML, OIDC, enterprise apps, app assignments, claims, certificates, groups, MFA, Conditional Access, and break-glass/rollback considerations

• Understand Microsoft Purview, DLP, information protection, retention, alerting, and email/data-flow controls sufficiently to troubleshoot issues and coordinate with Security, Legal/Privacy, and business owners

• Support access lifecycle requests where delegated, while ensuring manager, system owner, Security, P&C, Legal/Privacy, CCB, or data-owner approvals are obtained where required

L3 Support, Coaching, and Escalation

• Serve as the L3 escalation resource for complex endpoint, identity, cloud, network, infrastructure, and security-support issues that cannot be …