IT Specialist, Systems & Automation

Kinterra is a private equity platform dedicated to building secure supply chains for the modern economy by acquiring and developing critical minerals and related infrastructure assets. With approximately US $1.5 billion in committed capital, Kinterra invests in high-quality, development-stage mining and downstream infrastructure projects to enable the energy transition, support infrastructure expansion, and advance global manufacturing resilience.

We work alongside our portfolio companies to unlock value through active ownership, deep technical expertise, and disciplined project development. Our culture is rooted in collaboration, accountability, and excellence in execution .

Role Summary
The IT Specialist, Systems & Automation is the senior technical lead for end‑user systems, identity, and automation  role owns the design and operation of Microsoft 365, Entra , Intune, and the broader corporate productivity stack across multiple entities — and drives a deliberate shift from manual IT toil toward automated, self‑service, AI‑assisted workflows.

This is a hands‑on senior engineering role for a proven IT systems professional (6–8+ years) with depth in M365 architecture, identity and access management, modern endpoint management, and automation. The Specialist works alongside the Junior IT Analyst — who owns desktop, hardware, AV, and Tier 1 portco support — providing senior escalation, owning the systems backbone, and stepping into direct end‑user support only for executive and VIP scenarios.

The Specialist coordinates closely with the Network & Security Lead on identity, security, and infrastructure‑adjacent matters, and is expected to bring engineering discipline — version control, peer‑reviewable change, documented runbooks, and configuration‑as‑code — to the IT function.

Key Responsibilities:

Own Microsoft 365 tenant administration across corporate and portfolio company environments — Exchange Online, SharePoint, Teams, One Drive.

Design and operate Entra  / Azure AD identity policies — user and group lifecycle, role‑based access, Conditional Access, and authentication flows.

Implement and maintain MFA, Conditional Access, identity protection, and privileged identity management in coordination with the Network & Security Lead.

Own M365 Security & Compliance configuration:
Microsoft Purview, DLP, sensitivity labels, retention policies, and audit logging.

Endpoint Management & Intune

Architect and operate Microsoft Intune for device compliance, application deployment, configuration profiles, and Conditional Access integration across Windows and macOS.

Build and maintain automated provisioning pipelines — Autopilot, scripted configuration, baseline enforcement.

Define and enforce endpoint security baselines, patch management cadence, and compliance reporting.

Provide Tier 3 escalation for endpoint configuration, policy, and identity issues raised by the Junior IT Analyst.

Automation, Engineering Discipline & Cross‑Stack Troubleshooting

Identify repetitive IT operations and replace them with automated, reviewable workflows — onboarding/offboarding orchestration, provisioning scripts, license management, ticket routing, alert triage.

Develop and maintain automation in Power Shell, Python, Power Automate, and (where applicable) Logic Apps or Azure Functions.

Integrate AI‑assisted workflows (Microsoft Copilot, Claude, ChatGPT, or equivalent) into IT operations where they deliver measurable productivity gains.

Apply working knowledge of networking protocols (TCP/IP, DNS, DHCP, VPN, TLS) and security fundamentals (firewall behaviour, segmentation, Conditional Access) to troubleshoot end‑to‑end across identity, endpoint, and network layers.

Resolve cross‑stack issues at root cause — closing tickets without escalating every network‑touching M365, Intune, or identity issue to the Network & Security Lead.

Onboarding, Offboarding & Identity Lifecycle

Own the systems side of joiner / mover / leaver workflows — automated HRIS‑to‑M365 provisioning, license assignment, group membership, and timely access revocation.

Maintain standardized onboarding templates, access review cadence, and offboarding playbooks.

Coordinate with the…