Infrastructure & Systems Administration

Soho Square Solutions; Montreal (administrative region); Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Soho Square Solutions is seeking a highly skilled Full Stack Infrastructure Engineer to lead PoC/RFP/RFE initiatives and collaborate across Networks, SecDesign, Proxy, and Risk teams. You will implement and support infrastructure systems, including IoT devices and BMS, ensuring policy compliance and robust security.

The role requires strong scripting, cross-functional collaboration, and experience working with global teams, with on-site presence in Montreal and occasional outside core hours

Qualifications

• Experience designing and supporting infrastructure across multiple platforms.
• Proven ability to run PoC/RFP/RFE initiatives with stakeholders.
• Strong scripting and automation skills for operations.
• Experience with IoT/OT devices and BMS/lighting controls is a plus.
• Excellent communication and global-team collaboration.

Responsibilities

• Lead PoC/RFP/RFE initiatives across diverse platforms.
• Administer applications with full lifecycle ownership and network integration.
• Manage and troubleshoot network and security configurations (routers, switches, firewalls, proxies, RBAC, SSO, LDAP).
• Perform server administration across Windows, Linux, Mac, and vendor ecosystems.
• Develop automation scripts (PowerShell, Python, Perl, Shell).
• Collaborate with DevOps to support CI/CD pipelines and cloud infra.
• Engage with stakeholders to understand requirements and provide updates.
• Troubleshoot IoT/OT devices across Android, Windows, Linux, Unix, iOS.
• Work with SecDesign and vendors to implement secure solutions.

Skills

Infrastructure

CI/CD

PowerShell

Python

Linux/Windows

Networking

Security policies

IoT/OT

Stakeholder mgmt

Education

Bachelor's degree in CS/IT

Master's degree (preferred)

Tools

Tenable

Qualys

Rapid7

Nessus

ServiceNow

Tanium

BigFix

SCCM

Job description

Location: Montreal (Day 1 onboarding onsite/in office presence 3x/week)

Role Overview

We are seeking a highly skilled and versatile Full Stack Infrastructure Engineer capable of handling a broad range of responsibilities including Proof of Concept (PoC), Request for Proposal (RFP), and Request for Enhancement (RFE) initiatives. The ideal candidate will possess deep technical expertise across infrastructure layers, strong scripting capabilities, and excellent communication and stakeholder management skills.

As a Full Stack Infrastructure Engineer, you will be responsible for the design, analysis, implementation and support of technology systems for the China offices. This will include working closely with many technology engineering teams such as Networks, SecDesign, Proxy, Risk and Windows, in order to implement systems that meet the Firms policies. This will also mean you will need to work with external vendors to ensure that their products meet these policies.

You will need to collaborate with the business stakeholders to ensure the systems meet their needs and requirements. This is very much a hands-on role, where you will be involved in the creation of PoCs and evaluations to test the systems prior to production deployment. During the testing period, it may be necessary to work with internal and external teams so that the systems are working in line with MS policies. There are several IoT systems that you will be working with, including BMS (building management system), lighting controls, occupancy and air quality.

The ideal candidate should have the skills listed below and should be driven, confident and a team player, who thinks and works strategically. When faced with a problem, the candidate should be able to ask the right questions and leverage their own skills and expertise, as well as the people around them.

As many of the technology partners are dispersed globally, it is vitally important that you have experience working in global teams and there may be times meetings are scheduled outside of core hours.

Key Responsibilities

• Lead and support infrastructure-related PoC/RFP/RFE initiatives across diverse platforms.
• Administer applications with full lifecycle ownership, ensuring seamless request flow and network integration.
• Manage and troubleshoot network and security configurations including routers, switches, load balancers, proxies, firewalls, DMZ setups, IPs, ports, subnets, MAC addresses, and authentication protocols (RBAC, Kerberos, SSO, LDAP, AD).
• Perform server administration across Windows, Linux, Mac, and vendor ecosystems (e.g., CA, BMC, IBM DataPower).
• Develop and maintain automation scripts using PowerShell, Python, Perl, or Shell to streamline operations.
• Collaborate with DevOps teams to support CI/CD pipelines and cloud infrastructure.
• Engage with stakeholders and customers to understand requirements, provide updates, and ensure satisfaction.
• Analytical, strong support and troubleshoot IoT/OT devices across multiple platforms (Android, Windows, Linux, Unix, iOS)
• Work in a globally distributed team to provide innovative and robust solutions
• Work with SecDesign teams to design and apply appropriate controls and processes for integrated solutions
• Work with technology partners, stakeholders and SMEs to implement SecDesign approved solutions
• Provide support on existing IoT systems, manage upgrades and troubleshoot problems
• Ensure production systems are compliant within Hygiene programmed
• Collaborate with vendors to future proof our systems
• Application AdministrationE3 - Excellent - End-to-end request flow with network integration
• Network & SecurityE3 - Excellent - Deep understanding of network layers, configs, and authentication flows
• Automation ScriptingE3 - Excellent- Strong logic and scripting in PowerShell/Python/Perl/Shell
• Communication Skills E3 - Excellent - Clear, concise, and effective communication
• Customer/Stakeholder Mgmt E3 - Excellent - Strong interpersonal and stakeholder engagement skills
• CI/CD DevOpsE2 - Proficient - Familiarity with DevOps practices and tools
• Cloud TechnologyE2 - Proficient - Exposure to cloud platforms and services
• IoT/OT DevicesE3 - Excellent - Platform-agnostic troubleshooting and support

Preferred Qualifications Tools & Platforms

• Tenable, Qualys, Rapid7, Nessus
• ServiceNow (Vuln Response module)
• Tanium, BigFix, SCCM (patching)Practices
• Vulnerability scanning & assessment
• Patch management & remediation
• Continuous monitoring & compliance Domains
• Cloud (AWS, Azure, GCP vulnerability posture)
• IoT/OT vulnerability management (if applicable, strong differentiator in your profile)
• Bachelor’s or master’s degree in computer science, Information Technology, or related field.
• Certifications in network/security/cloud technologies (e.g., CCNA, AWS, Azure, etc.) are a plus.