Tier 3 Security and Microsoft 365 Specialist | Hybrid

Advantages

Nearly 30 years of stability paired with a genuine, forward-moving security practice — not just routine ticket work. Broad exposure across industries and technologies, real ownership over client security outcomes, competitive compensation with support toward certifications, and a flexible hybrid setup.

• Architect, configure, and maintain Microsoft 365 environments at a senior level — covering Exchange Online, Teams, SharePoint, Intune, Defender, and Purview.
• Conduct in-depth security assessments, harden client tenants, evaluate compliance posture, and design Conditional Access and identity governance strategies.
• Take the lead on security incidents from start to finish — triage, containment, digging through Defender/Purview logs for root cause, remediation, and clear client communication throughout, looping in legal or cyber insurance contacts when the situation calls for it.
• Manage and fine-tune the broader security toolset across all client tenants — MDR/EDR alert response, running phishing simulation and security-awareness campaigns, and enforcing MFA and zero-trust access policies.
• Support shared and multi-tenant environments, including delegated administration and cross-tenant collaboration setups.
• Keep thorough documentation of findings, remediation steps, and ongoing security posture inside the company's PSA system, and ensure RMM configurations stay aligned with hardening standards.
• Serve as the senior technical and security escalation point for the Level 1 and Level 2 support team.
• Turn security frameworks like NIST CSF 2.0 and CIS Controls, plus client-specific compliance obligations, into real, auditable technical controls.
• Deliver training and plain-language communication to clients across a range of industries, including reporting to executives or boards on security posture when needed.
• Help shape internal standards, tenant build templates, and documentation practices company-wide.

• Genuine comfort operating in a client-facing role — able to sit with a worried business owner mid-incident, explain what's happening without jargon, and leave them feeling more in control, not less. This is weighted just as heavily as technical ability.
• 5+ years of experience in a senior/Level 3 technical role; MSP background strongly preferred.
• 5+ years of deep, hands-on Microsoft 365 backend experience, plus the ability to guide and train end users on M365 tools.
• A track record in security specifically — not just security-flavored admin work. This means real ownership of incident response, tenant hardening, or a security operations function somewhere in your background.
• At least one relevant certification:
  Security+, SC-300 (Identity and Access Administrator), SC-400 (Information Protection Administrator), SC-200 (Security Operations Analyst), or MS-102 (M365 Administrator). Actively pursuing one also works.
• Advanced knowledge of Entra  (Azure AD), Exchange Online, Teams & Teams Phone, SharePoint Online, Intune, and both the Defender and Purview security suites.
• Hands-on experience with an MDR/EDR platform, security awareness/phishing simulation tools, and MFA/zero-trust access solutions (equivalent platform experience accepted).
• Working knowledge of a recognized security framework (NIST CSF or CIS Controls), with the ability to connect technical controls back to specific compliance requirements.
• Solid Power Shell scripting ability for automation and tenant-wide configuration work.
• Comfortable operating inside a PSA/RMM toolchain for documentation, ticketing, and monitoring.
• Strong communicator — able to break down technical concepts for non-technical audiences, present findings to leadership, and manage the relationship, not just resolve the ticket.
• Able to juggle multiple client environments while staying responsive and professional across all of them.

Our client is an established, Winnipeg-based IT Managed Services provider that's spent nearly three decades acting as the technology backbone for businesses across healthcare, finance, legal, and other compliance-heavy sectors. They're looking to add a Tier 3 Security & Microsoft 365 Specialist to their team — someone who…