Malleum is at the forefront of next-generation cyber defense, partnering with marquee clients across government, defense, financial services, and critical infrastructure. We’re experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security, allied intelligence cooperation, and enterprise resilience. Our consultants embed directly with clients to design, secure, and operate the networks and systems behind cutting-edge defensive technologies and programs with national and allied security impact.
If you take pride in being the trusted technical hands clients rely on to keep mission-critical environments running and to help them recover when things go wrong, Malleum is where your craft meets purpose.
We’re seeking a client-facing System Administrator to deliver hands-on administration, maintenance, and operational support across client endpoints, servers, and Microsoft 365 environments, and to play a supporting role in active incident response (IR) engagements. In this role you’ll work remotely and at times on-site, within client environments including sovereign, regulated, and cleared settings, providing the technical expertise, reliability, and professionalism that define the Malleum delivery experience.
This is a hands-on, intermediate-level role for a practitioner who pairs strong systems and endpoint skills with solid client presence, and who can step up when crises demand long, focused hours alongside our IR team.
-
Administer, monitor, and maintain client endpoints, servers, and Microsoft 365 / Entra ID environments
-
Implement and operate Microsoft Intune, including enrollment, compliance policies, configuration profiles, Win32 and Store app packaging and deployment, Autopilot, and endpoint hardening
-
Configure, monitor, and test client backup, disaster recovery, and business continuity systems, proving restores on a regular schedule
-
Lead patch management, software deployment, and configuration management across client servers and endpoints
-
Provide multi-client support through the PSA/RMM (ConnectWise): triage, resolve, and escalate tickets cleanly while meeting SLAs
-
Administer Active Directory, Group Policy, file and print services, and virtualization (VMware, Hyper-V)
-
Implement and enforce hardening standards aligned with CIS Benchmarks and client frameworks such as NIST 800-171 and ITSG-33
-
Standardize provisioning, onboarding/offboarding, and access-control workflows within client environments
-
Support active incident response engagements — reimaging and rebuilding systems, restoring from backup, deploying and tuning endpoint tooling, and assisting with containment, eradication, and recovery
-
Work odd hours, evenings, and weekends during active IR engagements, including rapid mobilization with little notice when clients are under attack
-
Produce high-quality client deliverables: configuration documentation, runbooks, SOPs, and status reports
-
Serve as a trusted technical point of contact, communicating clearly with client stakeholders ranging from end users to leadership
-
Participate in an on-call rotation supporting critical client infrastructure
-
Solid progressive experience in IT systems administration and endpoint management, ideally in a consulting, MSP, MSSP, or IR setting
-
Demonstrated, hands-on Microsoft Intune implementation experience - packaging, policies, and deployment, not just awareness
-
Strong Microsoft 365 and Entra ID administration
-
Real backup and recovery experience: configuring, monitoring, and proving restores
-
Comfortable owning support tickets end to end, with strong communication and professionalism
-
Proficiency with Windows Server, Active Directory, and Group Policy
-
Scripting for automation and rapid response (PowerShell; Bash or Python an asset)
-
Calm, methodical, and effective under pressure; willing to work odd hours and weekends when supporting active IR matters
-
Comfort working across multiple client environments, tooling stacks, and change-management processes simultaneously
-
Familiarity with virtualization (VMware, Hyper-V) and Azure; networking fundamentals (TCP/IP, DNS, DHCP, VLANs) an asset
-
Familiarity with ConnectWise or a similar PSA/RMM platform an asset
-
Exposure to CIS hardening and regulated frameworks (NIST 800-171, ITSG-33, CMMC) an asset
-
Certifications such as CompTIA A+, Network+, Security+, MD-102, MS-102, AZ-104, or ITIL strongly preferred
-
Eligibility for Government of Canada security clearance (Secret or higher); existing clearance highly valued
-
Bilingualism (English/French) considered a strong asset
-
Work shoulder-to-shoulder with marquee clients on programs and incidents with genuine national and allied security impact
-
Join a rapidly scaling firm with a flat, high-trust culture and direct access to senior IR and technical leaders
-
Exposure to a wide variety of advanced security tooling, sectors, and cleared environments
-
Competitive compensation, on-call and IR premiums, performance incentives, and comprehensive benefits
-
Continuous learning budget, certification sponsorship, and clear paths into senior engineering, IR, architecture, or security specializations
Malleum is an equal opportunity employer. We welcome applications from all qualified candidates and are committed to building a team that reflects the communities and missions we serve.
We are committed to providing accommodations for individuals with disabilities throughout the recruitment process. Please let us know if you require accommodation at any stage.
eHF5u6y4ka
