Senior Systems Administrator

Photonic Inc.; Vancouver; On-site; CAD 104,000 - 130,000; Full time

Benefits offered by this job

Stock options

Relocation assistance

Comprehensive benefits

Job summary

Photonic Inc. in Canada seeks a Senior Systems Administrator to maintain, secure, and improve our hybrid infrastructure across Azure, Windows, identity, networking, and PKI services.

You will administer Azure, Entra ID, Intune, Active Directory, and on-premises servers, while ensuring reliable connectivity, strong security, and efficient service delivery. This hands-on role emphasizes documentation, automation, and collaboration with the IT team.

Qualifications

• Extensive experience administering Azure and Entra ID, AD, Intune in an enterprise environment.
• Strong Windows Server, AD, DNS/DHCP, GPO administration and troubleshooting.
• Experience with PKI/SSL management, MFA, conditional access, and security controls.

Responsibilities

• Administer Azure Cloud infrastructure and identity services including RBAC, MFA, and monitoring.
• Manage Windows Server and on-premises AD, DNS, DHCP, GPO, and domain services.
• Support core network services, VPN, firewall rules, and segmentation.
• Manage Intune device enrollment, policies, and compliance settings.
• Oversee PKI/SSL certificate lifecycle including issuance, renewal, and revocation.
• Provision and manage Azure and on-premises VMs, backups, patching, and DR activities.
• Support Linux systems across cloud and on-prem environments.
• Assist colocation data centre operations and hybrid cloud design.
• Provide end-user support and maintain technical documentation.

Skills

Azure Cloud

Azure AD/Microsoft Entra ID

Identity administration

Windows Server

Active Directory

Intune

Networking

PKI/SSL management

Linux

Security controls

Documentation

Automation

Tools

Azure Cloud Tools

Microsoft Entra ID

Intune

Active Directory

Job description

As a Senior Systems Administrator at Photonic you will maintain, secure, and improve Photonics’ hybrid infrastructure across Azure, Windows, identity, networking, and PKI services.

This role administers Microsoft Azure, Windows Server, Linux, Mac and endpoint environments, on-premises Active Directory, Microsoft Entra ID, Microsoft Intune, core network services, VPN connectivity, firewall and segmentation controls, and PKI/SSL certificate management.

As the successful candidate you will help ensure reliable connectivity, secure access, resilient configuration, and efficient service delivery while contributing to documentation, automation, troubleshooting, and knowledge sharing across the IT team.

In this role, you will support critical systems, strengthen our security posture, and help deliver a reliable technology experience for employees across the organization.

You are a hands-on systems administrator who can balance reliable operations, strong security practices, and responsive customer support in a fast-moving technical environment.

WHAT WE NEED YOU TO DO

• Azure Cloud, Azure AD, and identity administration: Administer Microsoft Azure Cloud infrastructure and identity services, including virtual machines, networking, storage, Azure AD/Microsoft Entra ID, VPN, RBAC, MFA, conditional access, monitoring, and security controls.
• Windows and on-premises Active Directory administration: Administer Windows Server and Windows endpoint environments, including on-premises Active Directory, Group Policy, DNS, DHCP, domain services, account administration, access permissions, and related troubleshooting.
• Networking and connectivity: Support core network services, including switching, routing, VLANs, DNS, DHCP, VPN access, firewall rules, network segmentation, connectivity troubleshooting, and coordination with vendors or facilities teams for cabling and infrastructure changes.
• Device management: Manage Microsoft Intune device enrolment, MDM and MAM policies, compliance settings, application deployment, and troubleshooting.
• PKI and SSL certificate management: Manage PKI and SSL/TLS certificate lifecycle activities, including certificate requests, issuance, renewal, revocation, inventory tracking, expiry monitoring, and certificate-related troubleshooting.
• Virtualization and systems operations: Manage Azure and on-premises virtual machines, including provisioning, patching, backups, migrations, monitoring, and disaster recovery activities.
• Linux administration: Support Linux systems across on-premises and cloud environments, including configuration, maintenance, and operational troubleshooting.
• Colocation and data centre operations: Support rack management, hardware provisioning, asset coordination, cabling, capacity planning, and resilience activities in colocation environments.
• Hybrid infrastructure: Help design, maintain, and support hybrid cloud environments that connect cloud, on-premises, and colocation systems.
• Security and compliance: Support endpoint protection, vulnerability remediation, security incident response, access controls, and compliance-related activities.
• End-user and service desk support: Provide day-to-day support for desktops, laptops, mobile devices, software installations, access issues, and general troubleshooting to ensure a positive user experience.
• Documentation and team enablement: Maintain clear technical documentation, prepare reports as needed, mentor junior administrators, and contribute to IT planning and continuous improvement.

WHAT YOU BRING TO OUR TEAM

• 5-10+ years experience administering Microsoft Azure Cloud infrastructure, Azure AD/Microsoft Entra ID, on-premises Active Directory, Microsoft Intune, Windows Server, and Windows endpoints in an enterprise environment.
• Working knowledge of virtualization, cloud infrastructure, Linux systems, backups, monitoring, disaster recovery, and core networking concepts, including routing, switching, VLANs, firewall rules, VPN connectivity, DNS, DHCP, and troubleshooting.
• Practical experience with Windows administration and directory services, including Windows Server, Group Policy, DNS, DHCP, domain controller health, user and group management, permissions, and hybrid identity troubleshooting.
• A security-first mindset, with experience supporting endpoint protection, access controls, MFA, vulnerability remediation, and incident response processes.
• Practical experience with PKI and SSL/TLS certificate management, including certificate authorities, certificate signing requests, renewals, revocation, trust chains, certificate stores, and expiry monitoring.
• Ability to troubleshoot complex issues across cloud, network, server, and endpoint environments while communicating clearly with technical and non-technical users.
• Experience creating and maintaining clear technical documentation, standard operating procedures, and operational reports.
• A collaborative approach, with the ability to mentor junior team members, share knowledge, and contribute to continuous improvement across IT operations.
• will also bring experience with colocation operations, Azure automation, infrastructure automation, PKI governance, SSL certificate lifecycle tooling, Windows Server hardening, Active Directory health and recovery, Azure AD/Microsoft Entra ID governance, network segmentation, firewall and VPN administration, secure network architecture, security compliance frameworks, identity governance, and hybrid cloud architecture.

WHY YOU SHOULD WORK WITH US

• Work alongside leading innovators in quantum technologies and help support the systems behind breakthrough computing.
• Join a fast-paced, collaborative environment where you can try new approaches and solve meaningful technical challenges every day.
• Be part of an inclusive culture that values curiosity, teamwork, and diverse perspectives.
• Connect with colleagues through regular social events and activities across our global team.
• Receive a competitive compensation package that includes base salary, stock options, and relocation assistance for global talent.
• Access comprehensive benefits, including extended health, dental, life insurance, long-term disability, an employee assistance program, parental leave top-ups, and a flexible spending account.

The base annual salary range for this full-time role is between $104,300 and $130,400. This range reflects the minimum and maximum target range for new hire base salary across all Canadian locations. Actual compensation may vary outside of this range and is dependent on various factors including but not limited to a candidate's qualifications including relevant education and training, competencies, experience, geographic location, and business needs. Base pay is only one part of the total compensation package. Full time roles are eligible for equity and benefits. Base pay is subject to change and may be modified in the future.

At Photonic, we recognize that every person’s career and life journey is different. If your experience is close to what we have described, but you do not meet every requirement, we still encourage you to apply. All roles listed are current vacancies. While artificial intelligence (AI) tools may assist in reviewing applicant profiles, they do not determine hiring outcomes. Our hiring decisions are made by people, not algorithms. We are committed to fostering, cultivating, and preserving a culture of equity, diversity, and inclusion. We value the differences that inspire innovation and help build stronger teams. If you require accommodation at any stage of the hiring process, please let us know.