IT Infrastructure & Security Engineer

This is a mid-level, hands-on infrastructure role focused on technical delivery. It is not a strategy or people-leadership position.
JD Sports Canada is growing quickly. We operate 55 stores today and are on track to reach 90 by 2029, supporting roughly 2,500 employees across the country. That growth is putting real pressure on our infrastructure and security posture, and we’re looking for an engineer to help build, improve, and maintain the platforms that support it.
Sitting within our wider IT function, you’ll work alongside our support, Dev Ops, and new-store-opening teams. You’ll take ownership of delivering network, endpoint, and security improvements across the estate - including Meraki in every store, Intune and Entra s our devices, and a significant expansion of our security-monitoring capabilities.
You’ll report directly to the Head of IT and contribute to the designs and standards you’ll be responsible for implementing. Support and escalation will be available, and you won’t be expected to solve everything alone. However, you will be trusted to own delivery and make a visible, measurable improvement to our technology estate.

This role offers broad exposure, modern tooling, direct access to the person making the decisions, and a team small enough that your work will be noticed. It’s a strong opportunity for an established engineer who is ready to take greater ownership while continuing to develop their technical depth.
What you’ll be working on in year one     Expanding our centralised logging and security monitoring coverage across the store estate, cloud, and SaaS platforms
Standardising and hardening  Cisco Meraki  firewall, SD-WAN, and wireless configuration across all sites
Deploying and tuning modern email and endpoint security platforms
Maturing  Intune  compliance policies, application deployment, and patching across our device fleet
Automating the manual operational work our team is still doing by hand
Supporting network build and turn-up for new store openings
Responsibilities   Security platform delivery     Onboard and maintain log sources into our security monitoring platform, including agent, syslog, and API-based collection
Deploy, configure, and tune email and endpoint security tooling
Implement remediation for audit and vulnerability findings against agreed timelines
Support evidence collection for PCI DSS and internal audit activity
Implement and standardise Meraki MX, MS, and MR configuration across the store estate
Build and turn up network infrastructure for new store openings
Troubleshoot escalated connectivity, performance, and WAN resilience issues
Maintain network documentation and configuration baselines
Own day-to-day Intune configuration: compliance policies, app deployment, OS patching
Implement  Entra   and conditional access configuration to defined standards
Maintain device lifecycle and asset management tooling
Automation & documentation     Automate recurring operational tasks using Power Shell, Graph API, and platform APIs
Produce runbooks and as-built documentation for everything you deploy
Keep configuration standards current as the estate grows
All work is delivered against designs and standards set with the Head of IT.
What we’re looking for     3-5 years in a hands-on infrastructure, systems, or security engineering role
Solid working experience with  Cisco Meraki  in a multi-site environment (MX, MS, MR)
Solid working experience with  Microsoft Intune  and  Entra  : compliance policies, conditional access, app deployment
Working knowledge of the  Microsoft 365 security stack , including Defender
Scripting for automation - Power Shell primarily, Python useful
Experience delivering rollouts across multiple sites with structured change management
Exposure to SIEM or centralised logging platforms - Splunk, Sentinel, or similar
Email security platform experience
Retail, hospitality, or another distributed multi-site environment
PCI DSS exposure
Graph API, Terraform, or CI/CD familiarity
Certifications such as Meraki CMNA, MS-102, SC-300, or Security+
You won't have all of this. If you're strong on Meraki and Intune and you learn fast, we'll back you on the rest.
How you work (we care about this as much as the technical list):
You finish what you start and document it without being chased
You test before you roll out, and you have a rollback plan
You escal

(eps omitted to keep answer short)