Senior Systems Security Administrator (Contract)

Lawson Lundell LLP; Vancouver; On-site; CAD 85,000 - 110,000; Full time

Benefits offered by this job

Health Benefits

RRSP/TFSA

Bonuses

Paid Time Off

Education Reimbursement

Gym/Wellness

Office events

Job summary

Lawson Lundell LLP is seeking a Senior Systems Security Administrator to securely manage the firm's server, infrastructure, and cloud environments. You will own vulnerability remediation, patching, and hardening, while ensuring change-controlled execution of updates and incident response.

Responsibilities span vulnerability management, infrastructure and network security, SIEM/EDR operations, and disaster recovery.

Qualifications

• Degree or diploma in Computer Science, Information Technology, Cybersecurity or related discipline, or equivalent experience.
• 7+ years of progressively responsible systems/infrastructure administration experience.
• Strong hands‑on experience with Windows Server administration, security patching, vulnerability remediation and server hardening.
• Experience with EDR, MDR, SIEM and other detective and protective technologies
• Experience with Active Directory, Group Policy and Microsoft Entra ID.
• Experience with VMware virtualization and Microsoft Azure/cloud infrastructure.
• Experience with vulnerability management and scanning technologies.
• Experience with cybersecurity, governance, compliance and risk management
• Experience with backup, recovery and disaster recovery technologies.
• Working knowledge of TCP/IP, DNS, DHCP, VLANs, VPNs, firewalls and network segmentation.
• Experience maintaining accurate infrastructure and software inventories.
• Strong troubleshooting, analytical and problem‑solving skills.
• Ability to independently manage technical issues from identification through remediation and validation.
• Strong documentation and communication skills.
• Sound judgment, discretion and confidentiality.

Responsibilities

• Vulnerability Management, Patching & Hardening: Take technical ownership of infrastructure vulnerability remediation from identification through closure.
• Vulnerability Management, Patching & Hardening: Review and prioritize vulnerabilities based on severity, exploitability, system criticality and business impact.
• Vulnerability Management, Patching & Hardening: Apply approved security patches, updates, firmware and software upgrades.
• Vulnerability Management, Patching & Hardening: Maintain patching schedules and remediate critical vulnerabilities within established timelines.
• Vulnerability Management, Patching & Hardening: Identify unsupported and end-of-life operating systems, applications and infrastructure components and develop remediation plans.
• Vulnerability Management, Patching & Hardening: Harden Windows Server, VMware, cloud and related infrastructure using recognized security standards and practices.
• Vulnerability Management, Patching & Hardening: Implement secure configurations, least privilege and appropriate administrative controls.
• Vulnerability Management, Patching & Hardening: Validate successful remediation through testing and vulnerability rescanning.
• Infrastructure Security: Ensure security and compliance of Windows Server, VMware, Microsoft Azure and related infrastructure platforms as per approved standards and best practices.
• Infrastructure Security: Identify infrastructure requiring patching, upgrades, remediation or replacement.
• Infrastructure Security: Maintain accurate technical security documentation, secure system configurations and security operational procedures.
• Infrastructure Security: Independently troubleshoot and resolve complex security-related issues.
• Infrastructure Security: Support security configuration of network infrastructure, firewalls, VPNs and network segmentation.
• Infrastructure Security: Support Cisco Meraki and related network security technologies.
• Infrastructure Security: Assist with security-related network remediation and secure connectivity between offices and cloud/DR environments.
• Network Security: Administer and maintain the EDR/MDR platform to ensure endpoint coverage, alert monitoring and timely escalation of identified security threats.
• Network Security: Ability to configure, maintain, upgrade and monitor the SIEM platform to ensure it remains operational, secure and appropriately sized.
• Network Security: Perform initial review, implement and maintain approved SIEM alerts, correlation rules, dashboards and notification configurations.
• Network Security: Perform review and validation of SIEM alerts and escalation suspected security incidents to appropriate management.
• Compliance, Risk and Security Assessment: Ensure security systems, configuration and operational practices comply with organizational policies, regulatory requirements and applicable cybersecurity standards and frameworks
• Compliance, Risk and Security Assessment: Assessment of hardware infrastructure and software platforms to ensure compliance with current security standards and projected lifecycle
• Compliance, Risk and Security Assessment: Perform security risk threat assessments on new initiatives and projects
• Compliance, Risk and Security Assessment: Develop implementation, testing, validation and rollback plans for infrastructure security changes.
• Compliance, Risk and Security Assessment: Follow established change management processes for production changes.
• Compliance, Risk and Security Assessment: Coordinate remediation activities with IT, Security, application teams and vendors.
• Compliance, Risk and Security Assessment: Provide reporting on vulnerability remediation, patching, infrastructure lifecycle and outstanding risks.
• Compliance, Risk and Security Assessment: Serve as a senior technical escalation resource and provide guidance to junior IT staff.
• Compliance, Risk and Security Assessment: Participate in after-hours maintenance and critical infrastructure support when required.
• Disaster Recovery & Cloud: Support and maintain the firm's cloud-based disaster recovery environment.
• Disaster Recovery & Cloud: Support backup, replication, restoration and recovery of critical systems.
• Disaster Recovery & Cloud: Participate in DR testing and validate system recoverability.
• Disaster Recovery & Cloud: Maintain DR documentation and technical recovery procedures.
• Disaster Recovery & Cloud: Ensure DR infrastructure is appropriately patched, hardened and secured.

Skills

Windows Server administration

Security patching

Vulnerability remediation

Server hardening

Active Directory

Group Policy

Microsoft Entra ID

VMware

Microsoft Azure

EDR/MDR

SIEM

Troubleshooting

Documentation

Communication skills

Education

Degree or diploma in Computer Science, Information Technology, Cybersecurity or related discipline

Tools

VMware virtualization

Azure Cloud

Microsoft Entra ID

Cisco Meraki

Duo

Secure Access

Job description

Position Summary

The Senior Systems Security Administrator is a senior, hands-on technical role responsible for ensuring industry best practices are utilized to secure the firm's server, infrastructure and cloud environments.The primary focus is vulnerability remediation, security patching and upgrades, server hardening, asset and software lifecycle assessment, and disaster recovery infrastructure.

The successful candidate must be able to independently assess technical issues, develop remediation and implementation plans, troubleshoot complex problems, and execute approved changes with minimal technical direction.Production updates, upgrades and significant configuration changes will follow established change management processes and require appropriate review and approval.

Standard Responsibilities:

Vulnerability Management, Patching & Hardening

• Take technical ownership of infrastructure vulnerability remediation from identification through closure.
• Review and prioritize vulnerabilities based on severity, exploitability, system criticality and business impact.
• Apply approved security patches, updates, firmware and software upgrades.
• Maintain patching schedules and remediate critical vulnerabilities within established timelines.
• Identify unsupported and end-of-life operating systems, applications and infrastructure components and develop remediation plans.
• Harden Windows Server, VMware, cloud and related infrastructure using recognized security standards and practices.
• Implement secure configurations, least privilege and appropriate administrative controls.
• Validate successful remediation through testing and vulnerability rescanning.

Infrastructure Security

• Ensure security and compliance of Windows Server, VMware, Microsoft Azure and related infrastructure platforms as per approved standards and best practices.
• Identify infrastructure requiring patching, upgrades, remediation or replacement.
• Maintain accurate technical security documentation, secure system configurations and security operational procedures.
• Independently troubleshoot and resolve complex security-related issues.
• Support security configuration of network infrastructure, firewalls, VPNs and network segmentation.
• Support Cisco Meraki and related network security technologies.
• Assist with security-related network remediation and secure connectivity between offices and cloud/DR environments.

Network Security

• Administer and maintain the EDR/MDR platform to ensure endpoint coverage, alert monitoring and timely escalation of identified security threats.
• Ability to configure, maintain, upgrade and monitor the SIEM platform to ensure it remains operational, secure and appropriately sized.
• Perform initial review, implement and maintain approved SIEM alerts, correlation rules, dashboards and notification configurations.
• Perform review and validation of SIEM alerts and escalation suspected security incidents to appropriate management.

Compliance, Risk and Security Assessment

• Ensure security systems, configuration and operational practices comply with organizational policies, regulatory requirements and applicable cybersecurity standards and frameworks
• Assessment of hardware infrastructure and software platforms to ensure compliance with current security standards and projected lifecycle
• Perform security risk threat assessments on new initiatives and projects
• Develop implementation, testing, validation and rollback plans for infrastructure security changes.
• Follow established change management processes for production changes.
• Coordinate remediation activities with IT, Security, application teams and vendors.
• Provide reporting on vulnerability remediation, patching, infrastructure lifecycle and outstanding risks.
• Serve as a senior technical escalation resource and provide guidance to junior IT staff.
• Participate in after-hours maintenance and critical infrastructure support when required.

Disaster Recovery & Cloud

• Support and maintain the firm's cloud-based disaster recovery environment.
• Support backup, replication, restoration and recovery of critical systems.
• Participate in DR testing and validate system recoverability.
• Maintain DR documentation and technical recovery procedures.
• Ensure DR infrastructure is appropriately patched, hardened and secured.

Qualifications:

• Degree or diploma in Computer Science, Information Technology, Cybersecurity or related discipline, or equivalent experience.
• 7+ years of progressively responsible systems/infrastructure administration experience.
• Strong hands‑on experience with Windows Server administration, security patching, vulnerability remediation and server hardening.

• Experience with EDR, MDR, SIEM and other detective and protective technologies

• Experience with Active Directory, Group Policy and Microsoft Entra ID.
• Experience with access and identity management
• Experience with VMware virtualization and Microsoft Azure/cloud infrastructure.
• Experience with vulnerability management and scanning technologies.
• Experience with cybersecurity, governance, compliance and risk management
• Experience with backup, recovery and disaster recovery technologies.
• Working knowledge of TCP/IP, DNS, DHCP, VLANs, VPNs, firewalls and network segmentation.
• Experience maintaining accurate infrastructure and software inventories.
• Strong troubleshooting, analytical and problem‑solving skills.
• Ability to independently manage technical issues from identification through remediation and validation.
• Strong documentation and communication skills.
• Sound judgment, discretion and confidentiality.

Preferred Qualifications:

• Experience in a law firm or professional‑services environment.
• Experience with the Cisco security platform of Meraki, Duo, Secure Access
• Microsoft Azure, Microsoft Security, VMware or equivalent certifications.
• Security+, SSCP, CISSP or similar security certification.
• Familiarity with CIS Benchmarks, NIST Cybersecurity Framework or CIS Controls.
• Experience with enterprise vulnerability management platforms.

Thetypical salary range for this position is$85,000 - $110,000 annually; the base pay offered is based on location and may vary depending on job‑related knowledge, skills, experience, internal and market equity.

In addition to a competitive salary, we offer a variety of benefits, including:

• Health Benefits:extended health and dental.
• Financial Benefits: RRSP, TFSA, year‑end bonuses and an employee referral bonus program.
• Paid Time Off: vacation time starts at 3 weeks, personal days, sick time, and a volunteer day every year.
• Education Reimbursement:we are committed to growth and development, and our educational reimbursement policy provides opportunity for our staff to expand on their skills and knowledge in the legal field.
• Lifestyle Benefit: reimbursement for purchases from a pre‑approved list, including memberships and gym equipment.
• Tenant Fitness Centre:access to the fitness centre in our office building.
• Fun Environment: annual year end party, happy hours, staff appreciation week and many other social events.
• Awards:long‑term service and bonus vacation awards.
  

Although we thank all applicants for their interest in Lawson Lundell LLP, only shortlisted candidates will be contacted.