Enterprise Services - Enterprise Technical Team Lead

F12.net; Calgary; On-site; CAD 110,000 - 160,000; Full time

Job summary

F12.net is seeking an Enterprise Technical Team Lead to steer secure Azure environments and managed services for clients. You will mentor technicians, act as escalation point, and collaborate with Security/GRC, Modern Workplace, and Infrastructure teams to ensure reliable production delivery.

You will design secure, monitorable architectures from ground up, focusing on logging, alerting, and governance. Strong leadership and client-facing communication are essential for this role.

Qualifications

• Senior, hands-on technical lead with security and cloud experience.
• Experience in managed services delivery and Azure services.
• Coaching and mentoring technicians within a security-focused team.
• Escalation point for service team and client/vendor communications.
• Collaboration with Security/GRC, Modern Workplace, and Infrastructure teams.

Responsibilities

• Operate and maintain client Azure environments, monitor and resolve security alerts with Defender/Sentinel.
• Own proactive maintenance and monthly governance reporting for assigned accounts.
• Lead incident response, escalation handling, and troubleshooting within MS cloud environments.
• Provide technical leadership, reviews, and process improvements across the team.
• Engage with clients to discuss cloud health, security posture, and improvement plans.

Skills

Azure security

Cloud security

Incident response

Leadership

Mentorship

Security operations

Tools

Microsoft Defender

Microsoft Sentinel

Azure

Job description

About F12:

F12 was built by uniting IT consulting firms across Canada with a shared vision: to reduce risk and complexity by crafting technology platforms that empower leaders to focus and thrive. We elevate IT conversations from ingredients to outcomes, delivering fully designed solutions with no bad options. If you’re looking for the fast lane into an IT career or want to supercharge your professional development, you’ve come to the right place. At F12, you’ll collaborate with a diverse team and gain exposure to technology services across countless businesses—building a resume rich with experience and accomplishments. Our mission is to elevate our employees by building and retaining an elite team of IT professionals equipped to deliver unmatched service to Canadian business leaders. We value humble service, continuous improvement, and hard work—and we’re looking for like-minded individuals to join us.

The Position:

Reporting to the Service Delivery Manager (SDM), the Enterprise Technical Team Lead is a senior, hands‑on technical lead within managed services, responsible for the day‑to‑day secure operation, support, and continuous improvement of client cloud and security environments. They will be expected to have technical expertise along with some team management or leadership experience. Working closely with the Enterprise Account Manager and SDM, this individual will be an Internal SME for managed security and Azure services, overseeing delivery quality and escalation handling. This role involves a deep understanding of Azure services, including compute, networking, storage, and, crucially, security. The focus is on the "future" — designing a secure and functional environment from the ground up. Having a background in security operations allows them to design solutions that are not only secure but also easily monitored and managed by the SecOps team. They can build in the necessary logging, alerting, and security controls from the beginning, rather than having them added as an afterthought.

You will also take on the role of coaching and mentoring technicians while providing technical support and guidance to the team in resolving complex technical issues. You will be an escalation point for our service team members and a point of contact for our clients and vendors.

The position collaborates closely with Security/GRC, Modern Workplace, and Infrastructure teams to ensure solutions are not only well‑designed but are reliable in production.

This role remains directly involved in day‑to‑day service delivery, including incident response, escalation handling, troubleshooting, and change execution, ensuring solutions perform reliably in production environments.

Responsibilities

• Cloud Security Operations & Azure Services
  • Operate and maintain client Azure environments on an ongoing basis, including monitoring, investigating, and resolving security alerts using Microsoft Sentinel and Microsoft Defender tools.
  • Implement and support secure Azure solutions, including identity hardening (Azure AD), networking configurations, and security policies, ensuring configurations remain effective and compliant over time—not only at initial deployment.
  • Take ownership of escalated security incidents through remediation and post‑incident review and identify the configuration or architectural changes needed to prevent recurrence.
  • Maintain and update runbooks, alert response procedures, and configuration documentation based on real‑world incidents, audits, and operational findings.
  • Review security posture metrics (e.g., Azure Secure Score, vulnerability findings) and apply corrective changes directly or coordinate execution with other technical teams. Communicate outcomes clearly to internal and client stakeholders.
  • Review Microsoft recommendations surfacing in client tenants, prioritize them, deploy or coordinate remediation, and drive them to closure — including regulatory compliance findings and attack path analysis in Defender for Cloud, etc.
  • Meet with clients on a recurring basis to review Azure and security posture, walking through Secure Score and Identity Secure Score breakdowns by control area and the improvement plan against them.
  • Own proactive maintenance and monthly governance reporting for assigned accounts, ensuring recurring checks are completed, and findings are actioned rather than logged.
  • Participate in MXDR and managed detection incident reviews, identifying architectural or configuration changes that reduce recurrence.
  • Scope and estimate effort for new client requests, and identify when work exceeds day‑to‑day operational delivery and should be handed to the project delivery team.
• Modern Workplace (M365) Support
  • Provide secondary support for Microsoft 365 service areas that intersect with cloud and security, including tenant‑level reporting and configuration reviews.
  • Assist with transactional CSP‑related requests and licensing or subscription questions as they arise within assigned accounts.
• Managed Service Delivery & Incident Response
  • Actively participate in incident, request, and escalation queues, ensuring complex cloud or security issues are prioritized, worked, and resolved within defined service expectations.
  • Balance proactive improvement work with reactive support responsibilities, maintaining a strong focus on direct hands‑on client work within managed service agreements.
  • Support major incident response by coordinating technical efforts, communicating status and resolution steps, and assisting service delivery leadership in restoring service quickly and effectively.
  • Identify recurring issues, operational gaps, or process breakdowns and propose practical improvements that reduce ticket volume, escalation frequency, or client impact.
• Technical Leadership, Mentorship & Process Improvement
  • Serve as an internal escalation resource and real‑time technical coach, guiding technicians during live troubleshooting, incident calls, and complex implementations.
  • Review and provide feedback on technicians’ work (tickets, configurations, remediation steps), improving quality, consistency, and adherence to best practices.
  • Contribute to the development and refinement of standard operating procedures, knowledge base articles, and deployment standards to improve repeatability and service quality.
  • Identify opportunities for automation and operational efficiency, including scripting, policy standardization, or integration between systems to reduce manual effort and error.
• Client Engagement & Trusted Advisor Responsibilities
  • Work directly with client stakeholders to explain incidents, remediation actions, and recommend improvements in clear, non‑technical language, reinforcing trust and transparency.
  • Participate in client discussions related to cloud health and security posture, grounding recommendations in observed operational realities rather than theory alone.
  • Proactively identify areas of unmet needs or risk within client environments and