System Administrator, DevOps and Infrastructure

Department:
Information Technology.

Reports to:

IT Manager.

Location:

Ottawa office.

The System Administrator, Dev Ops and Infrastructure performs day-to-day administration of SGL’s infrastructure through maintaining, upgrading, managing and troubleshooting our software, hardware and networks.

• Analyze, assess, and document on-premises physical server infrastructure requirements, oversee hardware and software installations, system monitoring, and preventive maintenance to ensure continuous availability of organizational systems;
• Design and implement log management and observability pipelines using tools such as Rsyslog, Loki, Vector, and Grafana;
• Develop information systems policies and procedures related to IT operations, including backup workflows, disk utilization assessments, and network share management across Windows and Linux environments;
• Assess and monitor infrastructure health metrics by developing system monitoring agents, integrating with directory services;
• Evaluate, deploy, and manage containerized services using Docker, and develop and maintain CI/CD pipelines in Git Lab;
• Analyze requirements and design bare-metal Kubernetes clusters, including distributed storage (Ceph), networking, and load balancing solutions to support scalable and highly available systems;
• Assess existing workloads and provide recommendations for migration and consolidation onto container orchestration platforms, implementing monitoring, auto-scaling, and failover mechanisms to meet high-availability and business continuity requirements;
• Author infrastructure-as-code using Terraform/Open Tofu and Talos Linux for provisioning and managing Kubernetes cluster nodes in a reproducible, declarative manner;
• Develop and maintain identity and access management integrations;
• Build centralized IT management platforms/internal tooling (e.g., inventory, archiving, and media management systems) as containerized microservices deployed on Kubernetes;
• Design and operate access control reconciliation loops that enforce ACL state across systems based on authoritative directory sources;
• Develop automation for employee on-boarding and off-boarding workflows;
• Manage virtualization platforms including VMware vSphere and Proxmox VE for workload virtualization, VM provisioning and resource allocation across the data center;
• Create custom container images for enterprise mail and groupware platforms, integrating CalDAV/CardDAV, LDAP authentication and mail server monitoring;
• Maintain good records and documentation;
• Provide project status reports as required;
• Understand, comply with, and promote all company safety precautions and policies, including reporting hazards and incidents encountered during daily operations;
• Attend and complete training courses and/or company examinations, as required;
• Maintain a high level of technical and operational knowledge through direct engagement with colleagues, supervisors and personal development;
• Maintain project schedules and design goals; and
• Perform and complete other duties as assigned.

• Postsecondary Degree or Diploma in computer science, related field or combined education and experience;
• Experience with Linux system administration and on-premises infrastructure management;
• Proficiency with containerization and orchestration technologies such as Docker and Kubernetes;
• Familiarity with CI/CD tooling, version control systems, Git Ops workflows and Dev Ops practices;
• Experience with infrastructure-as-code tools such as Terraform/Open Tofu;
• Experience with observability and monitoring tools (Prometheus, Grafana, Loki, Vector);
• Knowledge of networking concepts, directory services (LDAP, Active Directory, OIDC/SAML), database systems (MySQL/Maria
  
  DB, Postgre
  
  SQL) and distributed storage (Ceph);
• Experience with virtualization platforms such as VMware vSphere and Proxmox VE;
• Proficiency in Go, with additional experience in Python, Type Script and shell scripting;
• Experience building and maintaining custom container images and CI/CD pipeline templates;
• Experience with identity and access management, including OAuth2/OIDC, LDAP proxying and SSO integrations;
• Knowledge of secrets management…