The IT Systems Administrator owns the security, hardware lifecycle, and operational efficiency of our physical and cloud technology assets (~90 total endpoints across 3 locations).
Operating within a dedicated 2-week Scrum framework, you will help manage day-to-day desktop support (~5 hrs/week, mostly remote), enforce modern cybersecurity protections, oversee hardware procurement and lifecycle management, build, upgrade, and maintain systems, maintain asset tracking, audit software subscriptions, serve as secondary technical backup for internal Linux/DevOps operations, and other sundry IT-related tasks.
This is a hybrid remote position based out of our Sherwood Park office.
Travel to our other local facilities is minimal (typically once a month or less and within a 30-minute radius of our main office).
Key Responsibilities
Cybersecurity & Network Operations (Security-First): Manage and secure our footprint of ~90 endpoints across 3 locations and remote staff. Administer and harden perimeter defenses using OPNsense firewall gateways, Tailscale mesh VPN routing, and JumpCloud identity management (enforcing mandatory MFA, BitLocker disk encryption, and automated patch policies). Monitor centralized security telemetry via Wazuh SIEM to detect anomalies and ensure full compliance with cyber insurance requirements. Verify automated, immutable, ransomware-proof server backups syncing cleanly to AWS S3 (Object Lock enabled). Provide operational backup to the Lead DevOps Engineer for internal system repositories (Linux SVN on Ubuntu LTS).
Manage and secure our footprint of ~90 endpoints across 3 locations and remote staff.
Administer and harden perimeter defenses using OPNsense firewall gateways, Tailscale mesh VPN routing, and JumpCloud identity management (enforcing mandatory MFA, BitLocker disk encryption, and automated patch policies).
Monitor centralized security telemetry via Wazuh SIEM to detect anomalies and ensure full compliance with cyber insurance requirements.
Verify automated, immutable, ransomware-proof server backups syncing cleanly to AWS S3 (Object Lock enabled).
Provide operational backup to the Lead DevOps Engineer for internal system repositories (Linux SVN on Ubuntu LTS).
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
Hardware Lifecycle & Procurement Management: Manage the complete end-to-end lifecycle for company laptops, desktops, and edge devices across all divisions. Procure, deploy, and decommission computer hardware. Maintain 100% data integrity in AssetTiger for all physical hardware assets. Own IT onboarding and offboarding workflows, ensuring clean account provisionings and hardware staging on Day 1.
Manage the complete end-to-end lifecycle for company laptops, desktops, and edge devices across all divisions.
Procure, deploy, and decommission computer hardware.
Maintain 100% data integrity in AssetTiger for all physical hardware assets.
Own IT onboarding and offboarding workflows, ensuring clean account provisionings and hardware staging on Day 1.
Software Governance & User Efficiency: Audit software seats and SaaS subscriptions across all divisions to eliminate redundant licensing costs. Evaluate, test, and help divisions implement Commercial Off-The-Shelf (COTS) software tools to streamline workflows. Deliver practical cybersecurity hygiene and software efficiency training to staff.
Audit software seats and SaaS subscriptions across all divisions to eliminate redundant licensing costs.
Evaluate, test, and help divisions implement Commercial Off-The-Shelf (COTS) software tools to streamline workflows.
Deliver practical cybersecurity hygiene and software efficiency training to staff.
End-User Technical Support: Provide practical, down-to-earth L1/L2 technical support (primarily remote, occasionally on-site) for workstations (Windows 11, ChromeOS Flex), network printers, and cloud VoIP desk phones (~5 hrs/week ticket volume).
Provide practical, down-to-earth L1/L2 technical support (primarily remote, occasionally on-site) for workstations (Windows 11, ChromeOS Flex), network printers, and cloud VoIP desk phones (~5 hrs/week ticket volume).
Qualifications & Technical Requirements
Experience: 3 to 5 years of hands-on Systems Administration, IT Security, or IT Operations experience managing a multi-site network of 50–150 endpoints.
Linux & Security Competency: Strong terminal-level experience with Linux (Ubuntu LTS), file permissions, systemd, Bash/Python scripting, and fundamental security practices (firewall rulesets, log analysis, threat mitigation).
Cloud & Open-Source Stack: Familiarity with cloud identity management (Google Workspace, JumpCloud or similar), stateful firewalls (OPNsense/pfSense), mesh VPNs (Tailscale/WireGuard), and cloud storage tools (rclone/AWS S3 CLI).
Hardware Management: Proven track record managing hardware procurement, asset tracking, and vendor sourcing.
Mobility: Valid Alberta Class 5 Driver's License and access to a personal vehicle for occasional local travel between facilities (mileage reimbursed).
About Us
We are a growing, resource and environmental services group headquartered near Sherwood Park, Alberta.
Operating across forestry seedling production, land reclamation, e-commerce, carbon offsets, and professional heritage management (visit treetimeservices.ca for full divisional context), we combine deep field expertise with pragmatic operational technology.
We operate on a lean, zero-Windows-Server technology stack centered on Google Workspace, JumpCloud, Linux (Ubuntu LTS), OPNsense firewalls, and Tailscale mesh networking—valuing practical open-source tools over bloated enterprise software and markups.
Company Core Values
Take Care of Each Other: We put team, safety, dignity, and respect ahead of individual interest.
Get It Done and Do It Right: We take work seriously, delivering high-quality results on time.
Passion for the Work and the Landscape: We care deeply about our team, our environment, and the planet.
Adaptable and Flexible: We adjust quickly to changing environments to find the best practical solution.
Down to Earth: We are realistic, experienced professionals providing simple, sensible answers to complex problems.
About Tree Time Services
Forestry100 employeesFounded 2002
Provides professional reforestation, reclamation, and plant nursery services.
