Senior Infrastructure, Cloud & Platform Engineer

Hercules Group of Companies is seeking an experienced Senior Infrastructure, Cloud & Platform Engineer to serve as the technical owner of the organization's core IT infrastructure and platform ecosystem.

This senior hands‑on role is responsible for designing, maintaining, securing, and evolving the technology foundation that supports our operations across Canada. The successful candidate will own the infrastructure, connectivity, cloud, cybersecurity, identity, backup, and integration layers that enable our business systems to operate securely and reliably.

This role is not focused on business application administration. Application Administrators will continue to own system configuration, workflows, and business processes within platforms such as Prophet 21, UKG, Hub Spot, Shopify, and other enterprise applications. Instead, this position owns the underlying infrastructure, security, networking, and platform architecture that allows those systems to communicate and operate effectively.

• Competitive salary ranging from $100,000 to $125,000 (depending on experience)
• Generous RRSP matching program 5% (after one year)
• Full health and dental benefits (shared costs)
• Great schedule—Monday to Friday 8-5
• Personal & Professional Development Opportunities
• Fun & engaging working environment.
• Free parking

• Administer and optimize AWS infrastructure, networking, storage, security, and connectivity.
• Manage Windows Server environments, Active Directory, DNS, DHCP, Group Policy, and hybrid identity solutions.
• Administer Microsoft 365 and Entra .
• Design and maintain scalable, secure infrastructure standards across all locations.
• Develop and execute infrastructure roadmaps and modernization initiatives.

• Manage Forti Gate firewalls, VPNs, routing, switching, and branch connectivity.
• Maintain secure communication between branches, cloud environments, vendors, and business systems.
• Support network segmentation, performance optimization, and secure remote access.

• Implement and maintain security controls, monitoring, patch management, and endpoint standards.
• Manage identity and access management, MFA, conditional access, and privileged access controls.
• Support vulnerability management, incident response, and cybersecurity improvement initiatives.
• Strengthen the organization's overall cybersecurity posture through proactive planning and governance.

• Maintain enterprise backup solutions and disaster recovery capabilities.
• Define and test recovery objectives, failover procedures, and business continuity plans.
• Ensure critical infrastructure is recoverable, documented, and regularly validated.

• Manage secure system-to-system integrations and communication pathways.
• Support SFTP, API, middleware, and vendor connectivity requirements.
• Ensure business systems can reliably authenticate, synchronize, exchange data, and communicate securely.

• Develop future‑state infrastructure architecture and technology roadmaps.
• Create and maintain infrastructure documentation, standards, and operational procedures.
• Serve as the senior technical escalation point for infrastructure‑related issues.
• Support acquisitions, branch integrations, infrastructure refreshes, and strategic projects.

• 7+ years of progressive infrastructure, networking, cloud, or systems engineering experience.
• Advanced experience with:
• AWS (EC2, VPC, IAM, Route 53, S3, networking and security services)
• Windows Server and Active Directory
• Microsoft 365 and Entra
• Fortinet Forti Gate Firewalls and VPN technologies
• DNS, DHCP, Group Policy, and enterprise networking
• Endpoint management and security platforms
• Backup and disaster recovery solutions
• Infrastructure monitoring and performance management

• Infrastructure‑as‑Code (Terraform, Cloud Formation, or similar)
• Power Shell scripting and automation
• Enterprise cybersecurity frameworks and controls
• API, SFTP, and integration architecture
• Acquisition and multi‑site infrastructure integration experience
• SQL‑based ERP environments (Prophet 21 experience considered an asset)

• AWS Certifications
• Microsoft Certifications
• Fortinet NSE Certifications
• CompTIA Security+
• CISSP, CCNP, or equivalent certifications

• Reduced infrastructure‑related escalations.
• Improved system reliability and uptime.
• Stronger cybersecurity controls and governance.
• Documented and standardized infrastructure environment.
• Reliable connectivity between systems, branches, vendors, and cloud platforms.
• Clear technology roadmap supporting future growth and acquisitions.

Successful candidates will be required to pass a criminal background check; drivers abstract and reference checks as a condition of employment.