IT Systems Administrator - Security & Operations

Tree Time Services Inc.; Sherwood Park; Hybrid; CAD 80,000 - 110,000; Full time

Job summary

Tree Time Services Inc. is seeking an IT Systems Administrator to own the security, hardware lifecycle, and operational efficiency of our technology assets across three Alberta locations, including remote staff.

The role is hybrid remote, based out of our Sherwood Park office, with minimal travel to nearby facilities. Responsibilities include enforcing cybersecurity protections, hardware procurement, asset tracking, system build/maintainance, and L1/L2 end-user support (Windows 11, ChromeOS

Qualifications

• 3–5 years of hands-on Systems Administration or IT Operations experience.
• Experience managing multi-site networks (50–150 endpoints).
• Strong Linux (Ubuntu LTS) skills and basic scripting (Bash/Python).
• Experience with cloud identity mgmt and mesh VPNs.
• Hardware procurement and asset tracking experience.

Responsibilities

• Cybersecurity & network operations across 90 endpoints and 3 locations.
• Manage MFA, BitLocker, automated patch policies and VPN routing.
• Monitor Wazuh SIEM for anomalies and cyber insurance compliance.
• Verify immutable backups to AWS S3 with Object Lock.
• Provide backup to Lead DevOps for internal Linux SVN repos.
• Hardware lifecycle management and procurement across divisions.
• Onboarding/offboarding workflows and hardware staging Day 1.
• Audit software seats and SaaS subscriptions to reduce costs.
• Support end users remotely and on-site for Windows 11/ChromeOS.
• Travel up to monthly within 30-minute radius.

Skills

Systems Administration

IT Security

Cloud & Open-Source

Networking & Firewall

Scripting (Bash/Python)

L1/L2 Support

Tools

JumpCloud

OPNsense

pfSense

Wazuh

AWS S3

rclone

Google Workspace

Ubuntu LTS

Job description

The IT Systems Administrator owns the security, hardware lifecycle, and operational efficiency of our physical and cloud technology assets (~90 total endpoints across 3 locations).
Operating within a dedicated 2-week Scrum framework, you will help manage day-to-day desktop support (~5 hrs/week, mostly remote), enforce modern cybersecurity protections, oversee hardware procurement and lifecycle management, build, upgrade, and maintain systems, maintain asset tracking, audit software subscriptions, serve as secondary technical backup for internal Linux/DevOps operations, and other sundry IT-related tasks.

This is a hybrid remote position based out of our Sherwood Park office. Travel to our other local facilities is minimal (typically once a month or less and within a 30-minute radius of our main office).

Key Responsibilities

• Cybersecurity & Network Operations (Security-First):
  • Manage and secure our footprint of ~90 endpoints across 3 locations and remote staff.
  • Administer and harden perimeter defenses using OPNsense firewall gateways, Tailscale mesh VPN routing, and JumpCloud identity management (enforcing mandatory MFA, BitLocker disk encryption, and automated patch policies).
  • Monitor centralized security telemetry via Wazuh SIEM to detect anomalies and ensure full compliance with cyber insurance requirements.
  • Verify automated, immutable, ransomware-proof server backups syncing cleanly to AWS S3 (Object Lock enabled).
  • Provide operational backup to the Lead DevOps Engineer for internal system repositories (Linux SVN on Ubuntu LTS).
• Hardware Lifecycle & Procurement Management:
  • Manage the complete end-to-end lifecycle for company laptops, desktops, and edge devices across all divisions.
  • Procure, deploy, and decommission computer hardware.
  • Maintain 100% data integrity in AssetTiger for all physical hardware assets.
  • Own IT onboarding and offboarding workflows, ensuring clean account provisionings and hardware staging on Day 1.
• Software Governance & User Efficiency:
  • Audit software seats and SaaS subscriptions across all divisions to eliminate redundant licensing costs.
  • Evaluate, test, and help divisions implement Commercial Off-The-Shelf (COTS) software tools to streamline workflows.
  • Deliver practical cybersecurity hygiene and software efficiency training to staff.
• End-User Technical Support:
  • Provide practical, down-to-earth L1/L2 technical support (primarily remote, occasionally on-site) for workstations (Windows 11, ChromeOS Flex), network printers, and cloud VoIP desk phones (~5 hrs/week ticket volume).

Qualifications & Technical Requirements

• Experience: 3 to 5 years of hands-on Systems Administration, IT Security, or IT Operations experience managing a multi-site network of 50-150 endpoints.
• Linux & Security Competency: Strong terminal-level experience with Linux (Ubuntu LTS), file permissions, systemd, Bash/Python scripting, and fundamental security practices (firewall rulesets, log analysis, threat mitigation).
• Cloud & Open-Source Stack: Familiarity with cloud identity management (Google Workspace, JumpCloud or similar), stateful firewalls (OPNsense/pfSense), mesh VPNs (Tailscale/WireGuard), and cloud storage tools (rclone/AWS S3 CLI).
• Hardware Management: Proven track record managing hardware procurement, asset tracking, and vendor sourcing.
• Mobility: Valid Alberta Class 5 Driver's License and access to a personal vehicle for occasional local travel between facilities (mileage reimbursed).

About Us

We are a growing, resource and environmental services group headquartered near Sherwood Park, Alberta. Operating across forestry seedling production, land reclamation, e-commerce, carbon offsets, and professional heritage management (visit treetimeservices.ca for full divisional context), we combine deep field expertise with pragmatic operational technology.

We operate on a lean, zero-Windows-Server technology stack centered on Google Workspace, JumpCloud, Linux (Ubuntu LTS), OPNsense firewalls, and Tailscale mesh networking- valuing practical open-source tools over bloated enterprise software and markups.

Company Core Values

• Take Care of Each Other: We put team, safety, dignity, and respect ahead of individual interest.
• Get It Done and Do It Right: We take work seriously, delivering high-quality results on time.
• Passion for the Work and the Landscape: We care deeply about our team, our environment, and the planet.
• Adaptable and Flexible: We adjust quickly to changing environments to find the best practical solution.
• Down to Earth: We are realistic, experienced professionals providing simple, sensible answers to complex problems.