Tier 3 Security and Microsoft 365 Specialist | Hybrid

Our client is an established, Winnipeg-based IT Managed Services provider that's spent nearly three decades acting as the technology backbone for businesses across healthcare, finance, legal, and other compliance-heavy sectors. They're looking to add a Tier 3 Security & Microsoft 365 Specialist to their team — someone who treats security as their primary craft, with Microsoft 365 as the environment they operate inside, not just a system they administer.

This role isn't about ticket-driven M365 support. The ideal person can walk into an unfamiliar client tenant, diagnose what's broken or exposed, fix it properly, and then explain the "why" to a business owner who isn't technical. They're also the person clients count on when something goes seriously wrong — the calm, capable presence during an active security event.

Technical skill opens the door here, but relationship skill is what makes someone succeed long-term. This person will regularly be the one talking a stressed client through a live incident, so staying composed and communicating clearly under pressure isn't optional — it's core to the job.

If you're interested, please send your resume to

Advantages
Nearly 30 years of stability paired with a genuine, forward-moving security practice — not just routine ticket work. Broad exposure across industries and technologies, real ownership over client security outcomes, competitive compensation with support toward certifications, and a flexible hybrid setup.

Responsibilities
Architect, configure, and maintain Microsoft 365 environments at a senior level — covering Exchange Online, Teams, SharePoint, Intune, Defender, and Purview.

Conduct in-depth security assessments, harden client tenants, evaluate compliance posture, and design Conditional Access and identity governance strategies.

Take the lead on security incidents from start to finish — triage, containment, digging through Defender/Purview logs for root cause, remediation, and clear client communication throughout, looping in legal or cyber insurance contacts when the situation calls for it.

Manage and fine-tune the broader security toolset across all client tenants — MDR/EDR alert response, running phishing simulation and security-awareness campaigns, and enforcing MFA and zero-trust access policies.

Support shared and multi-tenant environments, including delegated administration and cross-tenant collaboration setups.

Keep thorough documentation of findings, remediation steps, and ongoing security posture inside the company's PSA system, and ensure RMM configurations stay aligned with hardening standards.

Serve as the senior technical and security escalation point for the Level 1 and Level 2 support team.

Turn security frameworks like NIST CSF 2.0 and CIS Controls, plus client-specific compliance obligations, into real, auditable technical controls.

Deliver training and plain-language communication to clients across a range of industries, including reporting to executives or boards on security posture when needed.

Help shape internal standards, tenant build templates, and documentation practices company-wide.

Qualifications
Genuine comfort operating in a client-facing role — able to sit with a worried business owner mid-incident, explain what's happening without jargon, and leave them feeling more in control, not less. This is weighted just as heavily as technical ability.

5+ years of experience in a senior/Level 3 technical role; MSP background strongly preferred.

5+ years of deep, hands-on Microsoft 365 backend experience, plus the ability to guide and train end users on M365 tools.

A track record in security specifically — not just security-flavored admin work. This means real ownership of incident response, tenant hardening, or a security operations function somewhere in your background.

At least one relevant certification:
Security+, SC-300 (Identity and Access Administrator), SC-400 (Information Protection Administrator), SC-200 (Security Operations Analyst), or MS-102 (M365 Administrator). Actively pursuing one also works.

Advanced knowledge of Entra  (Azure AD), Exchange Online, Teams & Teams Phone, SharePoint Online, Intune, and both the Defender…