Sr. Systems Administrator

Impact Starts at UNICEF Canada

JOIN OUR TEAM AS SENIOR SYSTEMS ADMINISTRATOR

Are you a hands-on technologist who wants to own it all, from fixing a laptop at someone's desk to hunting threats across a modern cloud security stack?

Join UNICEF Canada - one of Canada's most respected and historic charities - is looking for a Senior Systems Administrator to play a key role in managing, securing and evolving our technology environment. This is a dynamic, hands-on position where you'll take ownership of the full spectrum of IT operations, including day-to-day help desk and desk-side support, Microsoft 365, cloud services, servers, networks and cybersecurity. You'll be directly involved in supporting staff with their everyday technology needs while also tackling complex technical challenges, strengthening our cybersecurity posture and driving improvements across our IT environment. Your work will help keep our staff, volunteers and partners connected, secure and productive in support of children around the world.

Position Details

The Opportunity

This is a hands-on, end-to-end IT role. UNICEF Canada does not have a separate help desk or Tier 1 function, so the Senior Systems Administrator is responsible for all levels of technical support. The role also leads day-to-day security operations, including hardening our Microsoft 365 environment, managing endpoint protection, and responding to alerts from our managed detection and response provider.

On any given day you might:

• Get a new staff member's laptop, accounts and MFA set up and walk them through it in person
• Troubleshoot a Teams, printer or VPN issue at someone's desk or over a remote session
• Triage a security alert from our MDR provider and contain a compromised account
• Tighten a Conditional Access policy or roll out an Intune configuration
• Patch servers, check backups and plan a firewall change

Cybersecurity is the center of gravity of the role. UNICEF Canada handles donor and payment data, and we're a target for phishing, business email compromise and fraud. You'll run the day-to-day security operations that protect that trust, working closely with the Deputy Director, IT, and our security partners.

Key Accountabilities

Cybersecurity operations and compliance (35%)

• Run day-to-day security operations across our stack: Sophos endpoint protection (EDR), Field Effect Covalence managed detection and response (MDR), Barracuda email security, Microsoft Defender and Password management.
• Act as the first internal responder to alerts from Field Effect, Sophos and Defender: triage, investigate, contain and remediate, escalating to the Deputy Director, IT as needed.
• Own identity security in Microsoft Entra ID: MFA, Conditional Access, privileged access, sign-in risk policies and regular access reviews.
• Configure and maintain Microsoft security and compliance tools, including Defender for Office 365, Purview DLP, sensitivity labels, retention and audit.
• Track and improve our Microsoft Secure Score and endpoint compliance, and drive vulnerability and patch management to agreed timelines.
• Maintain incident response, ransomware and business continuity playbooks, and take part in tabletop exercises and full restore tests.
• Run our security awareness program, including KeepNet phishing simulations, targeted training and follow-up with staff.
• Support audits, external assessments and alignment with NIST CSF 2.0, privacy law (PIPEDA, Quebec Law 25), and payment security requirements (PCI DSS).
• Review new vendors, apps and AI tools for security and privacy risk before they're adopted.

End-user and desk-side support (25%)

• Provide all tiers of technical support (Tier 1 through 3) to staff and volunteers, in person, by phone, Teams and remote session.
• Own the IT ticket queue end to end: logging, prioritizing, resolving and closing requests, and spotting recurring issues to fix at the root.
• Manage the device lifecycle for laptops, mobile devices, printers and peripherals: procurement, imaging or Autopilot enrolment, deployment, repair and secure disposal.
• Run onboarding and offboarding: accounts, licenses, devices, access and secure removal of access on departure.
• Support executives and leadership with responsive, discreet, and white-glove service.
• Set up and support meeting rooms, AV and Teams Rooms for in-office and hybrid meetings.
• Write clear how-to guides and train staff on Microsoft 365 and other core tools.

Microsoft 365 and cloud administration (20%)

• Administer Microsoft 365: Exchange Online, Teams, SharePoint, OneDrive and Power Platform.
• Manage devices and apps through Microsoft Intune, including compliance policies, configuration profiles, and app deployment.
• Administer Microsoft Entra ID, including hybrid identity with on-premises Active Directory where it remains.
• Manage Azure resources and cloud services, keeping cost, security and performance in check.
• Support the integration and security of business platforms, including Salesforce Nonprofit Cloud, Raiser's Edge NXT and our fundraising and payment platforms.
• Use scripting and automation (PowerShell, Graph API, Power Automate) to cut manual work and improve consistency.
• Stay current on Microsoft 365 updates and roll out new features thoughtfully.

Infrastructure, network and backup (20%)

• Manage our network: firewalls, switches, Wi-Fi and VPN at head office and regional sites.
• Maintain remaining on-premises and virtual servers (Windows Server, Hyper-V), including patching, monitoring and capacity planning.
• Manage backup and recovery for Microsoft 365, cloud and on-premises systems, and test restores regularly.
• Manage telephony and collaboration infrastructure, including Teams Phone and VoIP.
• Document systems, configurations, network diagrams and procedures, and keep them current.
• Lead or support IT infrastructure projects and perform off-hours maintenance when needed to minimize disruption.

Qualifications

• Education: A two-year post-secondary diploma or degree in IT or a related field, or equivalent experience.
• Experience: 5+ years in IT, with at least 3 years as a systems administrator in a generalist role that included hands-on end-user support.
• Cybersecurity: Hands-on experience with EDR/XDR and responding to security incidents, plus a working knowledge of phishing, BEC, ransomware and account-compromise response.
• Microsoft 365 and Entra ID: 3+ years administering Microsoft 365, including Exchange Online, Defender, Conditional Access, MFA and Intune.
• End-user support: A strong service mindset and proven experience supporting staff at every level, including executives, in person and remotely.
• Networking: Solid knowledge of TCP/IP, DNS, DHCP, VPN, VLANs, Wi-Fi and firewall configuration.
• Servers and backup: Experience with Windows Server, Active Directory and Group Policy, Hyper-V, and backup and recovery tools.
• Scripting: Comfort with PowerShell, or the drive to build it quickly.
• Communication: The ability to explain technical and security risks in plain language to non-technical staff and leaders.
• Ownership: You work well independently, manage competing priorities, and follow through from ticket to project.
• Flexibility: Willingness to travel occasionally within Canada and do off-hours maintenance or incident response when required.

An Employer of Choice: What We Offer

UNICEF Canada is where diverse talent & passion come together to create extraordinary impact for every child. We are committed to being an employer of choice and building a culture that is inclusive, ambitious, compassionate, and high impact.

Members of the UNICEF Canada team have access to the following employee benefits:

Our Commitment to Inclusive Workplaces & Recruitment

UNICEF Canada is an inclusive workplace and is committed to championing diversity, equity, inclusion and accessibility. Requests for accommodation can be made at any stage of the recruitment process.

At UNICEF Canada, we believe strongly in personal connections and our hiring process is entirely human-driven. We do not use AI or automated systems to review applications or conduct interviews. Each candidate is evaluated by our experienced team to ensure a fair and thoughtful hiring experience.

How to Apply

Please submit your resume and cover letter as one document to [email protected] by 11:59PM EST on November 26, 2027. Please reference "Senior Systems Administrator" in the subject heading.

UNICEF Canada thanks all applicants for their interest in this opportunity, however, only those selected for an interview will be contacted. Consistent with our Child Safeguarding Policy, all successful candidates must receive clearance by a police background check (including a vulnerable sector screen).