IT Systems and Security Specialist

DMCL LLP; Vancouver; On-site; CAD 90,000 - 100,000; Full time

Benefits offered by this job

Health benefits

Learning & development

Wellness programs

Team events

Impactful work

Job summary

DMCL LLP is seeking an experienced IT Security and Systems Administrator to join our Vancouver-area firm. The role focuses on keeping our technology environment secure, reliable, and continuously improving across identity, endpoints, infrastructure, networks, and cloud services.

You will contribute to security operations, automation, documentation, and modernization initiatives, working on Active Directory, Entra ID, and Windows Server environments, while coordinating with teams to deliver

Qualifications

• Degree or diploma in computer science, information technology, cybersecurity, or a related field, or equivalent practical experience.
• At least three years of experience in systems administration, security administration, infrastructure operations, or a similar role.
• Hands-on experience administering IT systems such as Microsoft Entra ID, Intune, Microsoft 365, and Windows Server.
• Experience with security operations and controls such as security monitoring, incident response, vulnerability management and remediation, secure configuration, and email security, plus familiarity with security frameworks such as CIS Controls or NIST CSF.
• Experience with security tools such as EDR/MDR (e.g., CrowdStrike Falcon), firewalls, VPNs, and secure remote access.
• Experience using PowerShell or similar tools to automate administration, reporting, or operational tasks.

Responsibilities

• Administer and strengthen identity and access controls across AD, Entra ID, Conditional Access, MFA, privileged access, user lifecycle, and password tools.
• Define and review security baselines for Windows endpoints and servers across Intune, CrowdStrike, patching, and remediation.
• Support network security and hybrid connectivity, including Fortinet policies, VPN and remote access security, and segmentation.
• Govern business applications and SaaS platforms by reviewing access models, roles, controls, logging, integrations, and lifecycle risks.
• Conduct access reviews and vendor security assessments, coordinate remediation, review SOC 2 reports and maintain audit evidence.
• Monitor, investigate, and respond to security incidents with our MDR provider; perform root-cause analysis and post-incident reviews.
• Partner with IT and business teams to translate requirements into secure solutions and contribute to infrastructure and modernization projects.
• Use PowerShell, Microsoft Graph, or Power Automate to automate administration, security operations, reporting, and recurring requests.

Skills

Active Directory

Entra ID

MFA & access controls

PowerShell

Windows Server

Security operations

Incident response

Vulnerability management

Security monitoring

VPN & remote access

Education

Degree in CS/IT/Cybersecurity

Tools

CrowdStrike Falcon

Fortinet

Intune

Microsoft 365

Microsoft Graph

Power Automate

Job description

• Pay or shift range: $90,000 CAD to $100,000 CAD We’re committed to fair and transparent pay. The salary for this role is based on a 35-hour work week, which is standard at DMCL. This work week is up to 14% shorter than some comparable positions with other organizations. Ask us more about working extra hours if you are interested in enhancing your compensation. The salary we offer will reflect your experience, skills, and overall fit for the role, while also referencing internal equity to ensure fairness across the firm.

Description

About the role

Join DMCL in an experienced, hands-on technical role focused on keeping our technology environment secure, reliable, and continuously improving. You will work across identity, endpoints, infrastructure, networks, cloud services, and business applications while contributing to security operations, automation, documentation, and modernization initiatives This is a full-time, on-site position.

How you'll make a difference

• Administer and strengthen identity and access controls across Active Directory, Entra ID, Conditional Access, MFA, privileged access, user access lifecycle (joiners, movers, leavers), and password management tools.
• Define and review security baselines for Windows endpoints and servers across Intune, CrowdStrike, patching, compliance policies, and vulnerability remediation.
• Support network security and hybrid connectivity, including Fortinet firewall policies, VPN and remote access security, and network segmentation.
• Help govern business applications (e.g., CaseWare) and SaaS platforms by reviewing access models, administrative roles, configuration controls, audit logging, integrations, and lifecycle risks.
• Conduct access reviews and vendor security assessments, coordinate remediation, review assurance materials such as SOC 2 reports, and maintain evidence for audit and internal-control purposes.
• Monitor, investigate, and respond to systems and security incidents in coordination with our managed detection and response provider; perform root-cause analysis, support post-incident reviews, and help reduce repeat issues.
• Partner with IT colleagues and business teams to translate requirements into secure, practical solutions and contribute to infrastructure, cloud, security, and modernization projects.
• Use PowerShell, Microsoft Graph, or Power Automate to automate administration, security operations, reporting, and recurring requests while maintaining clear procedures, standards, runbooks, and user documentation.

Who you are

• Degree or diploma in computer science, information technology, cybersecurity, or a related field, or equivalent practical experience.
• At least three years of experience in systems administration, security administration, infrastructure operations, or a similar role.
• Hands-on experience administering IT systems such as Microsoft Entra ID, Intune, Microsoft 365, and Windows Server.
• Experience with security operations and controls such as security monitoring, incident response, vulnerability management and remediation, secure configuration, and email security, plus familiarity with security frameworks such as CIS Controls or NIST CSF.
• Experience with security tools such as EDR/MDR (e.g., CrowdStrike Falcon), firewalls, VPNs, and secure remote access.
• Experience using PowerShell or similar tools to automate administration, reporting, or operational tasks.
• Familiarity with privileged access management (including password vaults), Microsoft 365 security tools, and hybrid Azure environments is considered an asset.
• Experience developing technical procedures, security runbooks, and operational documentation is considered an asset.
• Preferred to have industry certifications such as Microsoft SC-200, SC-300, MD-102, or AZ-104, or Fortinet FCP.
• Ability totravelwithin BCasrequiredfor inter-office support, site visits, and projects

What DMCL offers

• Competitive compensation and comprehensive extended health and dental benefits
• Ongoing learning, development, and career growth opportunities
• Mental and physical wellness initiatives
• Firm-sponsored social and team events
• The opportunity to make a meaningful impact on DMCL’s people, culture, and future growth

About DMCL

DMCL LLP is a full-service accounting firm dedicated to helping our clients achieve and exceed their business goals, no matter how ambitious. As a leading Canadian firm with global reach, we continue to remain agile and responsive, providing clients with personalized and strategic solutions specific to their industry.

With over 300 team members spread across Vancouver, Surrey, Tri-Cities (Port Coquitlam) and Victoria, working at DMCL means being part of a diversified team of expert advisors that view every day as a new opportunity to contribute to the success of our clients: solving costly problems, building long-lasting relationships and always striving for excellence.