Senior Business Technology Specialist

Helcim; Calgary; Hybrid; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Stock Options

Hybrid work model

In-office Mon/Wed/Fri

Remote Tue/Thu

Family support

Training budget $500

Health benefits + HSA

Company break in December

Paid vacation

Job summary

Helcim Inc. in Calgary is seeking a highly experienced IT Infrastructure senior IC to lead automation, access control, and internal tooling. You’ll be the senior contributor on a small team, shaping how we provision, secure, and connect our systems for every employee.

Your work spans Google Workspace provisioning, SSO/SAML/SCIM, Intune and Jamf management, and building with LLM-based tooling. You’ll document decisions and mentor others while driving practical security outcomes.

Qualifications

• 5+ years in IT, systems administration, or a closely related role with depth in scripting and automation.
• Experience deploying Google Workspace, SSO, SAML, and SCIM across an organization.
• Managing Windows and macOS endpoints with Intune/Jamf and implementing policy baselines.

Responsibilities

• Automation and provisioning across onboarding, offboarding, and licensing reconciliation.
• Move access toward same-day or self-serve while keeping security boundaries intact.
• Roll out security tooling and identity provider configurations across internal tech.
• Provide day-to-day support, provisioning, and onboarding for the team.
• Own network, endpoint, and monitoring responsibilities with proactive alerting.
• Create runbooks and contribute to the knowledge base for team-wide enablement.

Skills

Shell

Python

Go

REST APIs

Webhooks

Google Workspace provisioning

SSO

SAML

SCIM

Intune

Jamf

Networking

LLM tooling

Documentation

Tools

Intune

Jamf

Job description

Helcim runs on two kinds of technology: the payments platform we sell, and the network, laptops, internal systems, and automation we run on. The second is Business Technology. We want getting access, automating a workflow, or building something with AI to be fast and safe for everyone here, and this role spends most of its time getting us there. You'd be the most senior individual contributor on a small team, reporting to Marcos, our Head of IT Infrastructure, with real say in what this function becomes.

What's hard about it

As the most senior IC on a small team, you'll be expected to bring proposals and disagreements instead of waiting for direction. Nobody on the team has a lane they stay in. Everyone covers support, provisioning, and onboarding, so the automation you want to build competes with the ticket in front of you. Cybersecurity decides which tools and policies we adopt, and you make them work for every employee, including the ones who'd rather they didn’t.

What you need

• 5+ years in IT, systems administration, or a closely related role, with real depth in Shell, Python, or Go. REST APIs and webhooks are your first instinct, and your scripts live in a repository with a README, not on a laptop.
• You've run access administration at fleet scale, including Google Workspace provisioning and deprovisioning, and rolled out SSO, SAML, and SCIM company wide on the deployment side.
• You've managed Windows and macOS endpoints with Intune and Jamf (or close equivalents), including policy and compliance baselines.
• You know networking well enough to own a corporate environment: firewalls, VLANs, wireless, DNS.
• You've built with LLM-based tooling: integrations and agents, and you can judge whether the output can be trusted. Prompt writing alone doesn't count.
• You can break an unfamiliar, underspecified problem into parts, and you write documentation other people act on.

• 5+ years in IT, systems administration, or a closely related role, with real depth in Shell, Python, or Go. REST APIs and webhooks are your first instinct, and your scripts live in a repository with a README, not on a laptop.
• You've run access administration at fleet scale, including Google Workspace provisioning and deprovisioning, and rolled out SSO, SAML, and SCIM company wide on the deployment side.
• You've managed Windows and macOS endpoints with Intune and Jamf (or close equivalents), including policy and compliance baselines.
• You know networking well enough to own a corporate environment: firewalls, VLANs, wireless, DNS.
• You've built with LLM-based tooling: integrations and agents, and you can judge whether the output can be trusted. Prompt writing alone doesn't count.
• You can break an unfamiliar, underspecified problem into parts, and you write documentation other people act on.

What you don't need

• A compliance background or audit experience. It helps, and you can learn what audit evidence looks like here.
• Go. Shell or Python is enough.
• Our exact tooling. Intune and Jamf or their equivalents are what matter, so the product names matter less.
• A history on a small team where you defined the role. If you've done it, great. If not, you'll learn fast.

What your week actually looks like

• Integration and automation: Configuring the connectors, MCP servers, and approved scripting patterns that let people who aren't engineers program our internal systems. You'll automate our recurring work (onboarding and offboarding, provisioning, license reconciliation, access reviews, asset records) and administer the sanctioned AI toolkit as it changes.
• Access and provisioning: Moving access to non-critical systems toward same-day or self-serve, scoped narrowly enough that granting it is routine. That covers Workspace, Jira, Confluence, and our AI tooling.
• Security tooling rollout: Deploying what Cybersecurity picks across internal technology, including the identity provider.
• Day-to-day coverage: Support, provisioning, and onboarding, shared across the whole team.
• Network, endpoints, and monitoring: Shared ownership of the network, the endpoint fleet, and internal systems, with monitoring and alerting that surface problems before anyone reports them.
• Documentation and teaching: Runbooks someone else can extend, contributions to the company knowledge base and the team's how-to communications, and pairing and reviewing so the team's capability grows beyond your own output.

Job benefits & the rest of the deal

• Ownership: Every single team member gets Stock Options. You own a piece of what you build!
• Flexibility: Hybrid life. In-office Mon/Wed/Fri, remote Tue/Thu.
• Family Support: Top-ups for maternity leave and "bonding breaks."
• Growth: $500 annual training budget to keep your skills sharp.

• Ownership: Every single team member gets Stock Options. You own a piece of what you build!
• Health First: Comprehensive benefits + a Health Spending Account (HSA) starting Day 1.
• Flexibility: Hybrid life. In-office Mon/Wed/Fri, remote Tue/Thu.
• Family Support: Top-ups for maternity leave and "bonding breaks."
• Rest & Recharge: Paid vacation + a full company break in December.
• Growth: $500 annual training budget to keep your skills sharp.

How hiring works

Three conversations, start to finish.

• Recruiter screen. A call with Caileigh, our Recruiter about your experience and what you're looking for. We cover comp in full here, and it's a good time to ask us anything.
• First interview with Marcos, our Head of IT Infrastructure and the person this role reports to. This is a conversation about how you think about IT and how you like to work.
• Final check in conversation with Brett, our CTO.

How We Work @ Helcim

Four things we hold each other to: we build rather than wait, we take the harder path when it's the right one, we earn trust every day, and we get more done together than apart. The long version is our culture book,The Way of the Helcim.

Candidates must be eligible to work in Canada and be located in Calgary.