Infrastructure Analyst

Trotter & Morton Group of Companies is a diverse group of building trades experts offering unique and integrated construction solutions, from earthworks and demolition services to commercial, institutional, and industrial construction, as well as facility services and building maintenance.

Since 1927, our skilled workforce has brought high-quality workmanship, experience, and passion to a diverse project portfolio that includes some of Alberta and British Columbia's most iconic structures.

At Trotter & Morton, we know we're only as good as our employees. We are looking for hardworking and committed individuals who will contribute to our experienced team by bringing a willingness to learn, a collaborative mindset, and an entrepreneurial spirit to every project. The ideal candidate will have at least five to seven years of advanced IT experience managing enterprise infrastructure, servers, networks, firewalls, cloud services, endpoint management, cybersecurity, and business applications. The successful candidate will demonstrate strong technical expertise, a proactive approach to problem-solving, and a commitment to continuous improvement, automation, and innovation.

Roles and Responsibilities

• Manage and maintain core IT infrastructure, including Active Directory, DNS, DHCP, Hyper-V clusters, virtual machines, storage systems, switches, firewalls, and networking and communication equipment.
• Implement and manage Microsoft Intune, including device enrollment, configuration profiles, compliance policies, application deployment, endpoint security policies, and device lifecycle management.
• Implement and maintain Windows Autopilot for automated provisioning, deployment, configuration, and standardization of Windows devices.
• Administer and manage Microsoft Defender for Endpoint, including endpoint detection and response (EDR), antivirus protection, attack surface reduction, vulnerability management, security monitoring, and threat remediation.
• Manage Microsoft Entra ID, including identity and access management, Conditional Access, Multi-Factor Authentication (MFA), enterprise applications, and hybrid identity integration.
• Implement and maintain endpoint security baselines, device compliance standards, and patch management processes using Intune, Microsoft Defender, and Windows Update for Business.
• Manage data protection, backup, disaster recovery, and retention policies for on-premises and cloud-based systems.
• Work with IT Management to design, implement, operate, and maintain secure, reliable, scalable, and cost-effective IT infrastructure.
• Support the migration and modernization of systems and services from on-premises infrastructure to cloud and hybrid environments.
• Proactively monitor, troubleshoot, and optimize IT infrastructure, endpoint security, and cloud services to ensure availability, performance, and reliability.
• Administer and manage Microsoft 365 services, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, email archiving, eDiscovery, and secure email gateways.
• Manage network infrastructure, including firewalls, switches, wireless networks, VPNs, routing, and connectivity across corporate offices and project sites.
• Develop and maintain PowerShell scripts, Microsoft Graph integrations, and automation workflows to streamline IT operations, improve efficiency, and reduce repetitive administrative tasks.
• Support cybersecurity initiatives, including vulnerability assessments, security hardening, incident investigation, remediation, and implementation of security best practices.
• Evaluate and support the responsible adoption of AI technologies and automation solutions to improve IT service delivery, operational efficiency, and business productivity.
• Perform infrastructure capacity planning, technology lifecycle management, hardware and software asset management, and technology standardization.
• Collaborate with IT Management, team members, vendors, and business stakeholders to identify technology requirements, evaluate solutions, and establish implementation timelines.
• Effectively communicate IT-related information, technical recommendations, project updates, and risks to IT Management and business stakeholders while maintaining confidentiality and professionalism.
• Take ownership of escalated technical issues and provide Tier 3 support through investigation, resolution, and root cause analysis.
• Research, evaluate, and recommend practical technology solutions that align with organizational objectives, security requirements, and business priorities.
• Challenge legacy practices and continuously identify opportunities for modernization, innovation, automation, operational efficiency, and cost optimization.
• Maintain accurate and up-to-date infrastructure documentation, network diagrams, system configurations, operational procedures, and disaster recovery documentation.
• Support infrastructure and security projects, including system upgrades, migrations, technology deployments, and continuous improvement initiatives.
• Follow all company policies and procedures, including Trotter & Morton's Health and Safety program.
• Perform other related duties and projects as assigned.

Required Skills and Experience

• Minimum five years of progressive IT experience in infrastructure administration, systems engineering, networking, endpoint management, or a similar technical role.
• A punctual, reliable, and collaborative team player with a people-first approach who demonstrates honesty, ethics, integrity, accountability, and professionalism.
• Strong understanding of enterprise IT environments, including the challenges of supporting geographically dispersed offices, construction sites, and remote employees.
• Hands-on experience with Microsoft Intune, including device management, application packaging and deployment, configuration profiles, compliance policies, endpoint security baselines, and mobile device management (MDM).
• Experience implementing and managing Windows Autopilot, including device enrollment, provisioning, deployment profiles, and troubleshooting.
• Strong knowledge of Microsoft Defender for Endpoint, including endpoint detection and response (EDR), threat investigation, antivirus policies, attack surface reduction rules, vulnerability management, and remediation.
• Experience administering Microsoft Entra ID, including hybrid identity, Conditional Access, MFA, role-based access controls, and enterprise application management.
• Strong networking knowledge, including TCP/IP, DNS, DHCP, PXE, VLANs, routing, VPNs, access control lists, and network troubleshooting.
• Experience managing Palo Alto or Fortinet firewalls, HPE/Aruba switching, wireless networking, VPLS, and enterprise network connectivity.
• Experience administering Microsoft Windows Server 2022 or newer, Hyper-V, virtual machines, Remote Desktop Services, and enterprise applications.
• Working knowledge of Linux administration, troubleshooting, Docker, and containerization technologies, including container deployment, management, and maintenance.
• Experience with SAN and enterprise storage technologies, including Fibre Channel, iSCSI, storage provisioning, and performance management.
• Strong knowledge of Active Directory, Group Policy, DNS, DHCP, DFS, replication, PowerShell, and Windows Server administration.
• Experience managing Microsoft 365, Exchange Online, hybrid Exchange environments, email archiving, eDiscovery, and email security solutions.
• Experience administering collaboration and communication platforms, including SharePoint, OneDrive, Microsoft Teams, and Teams Phone.
• Experience managing Windows 11 endpoints, operating system deployment, application packaging, software distribution, and patch management.
• Experience with mobile device management, including iOS devices, mobile application management, and device compliance.
• Knowledge of Microsoft Defender XDR, Microsoft Defender for Office 365, Microsoft Purview.
• Experience implementing endpoint security, vulnerability remediation, security baselines, and cybersecurity best practices.
• Experience with enterprise backup, recovery, and business continuity solutions, such as Veeam or equivalent technologies.
• Experience supporting cloud migrations, hybrid infrastructure, and Microsoft Azure services.
• Proficiency in PowerShell scripting and IT automation, with experience using Microsoft Graph API, Power Automate, or similar tools considered an asset.
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to independently investigate and resolve complex technical issues.
• Ability to manage competing priorities, work independently, and collaborate effectively within a team-oriented environment.
• Strong verbal and written communication skills, with the ability to explain technical concepts to both technical and non-technical stakeholders.
• Experience evaluating or implementing Artificial Intelligence (AI), AI-assisted IT operations, and automation technologies in a corporate environment is considered an asset.

Additional Requirements

• Valid driver's license and access to reliable personal transportation.
• Availability for occasional after-hours work, including scheduled maintenance, system upgrades, and critical incident response.
• Willingness to travel locally, nationally, and internationally when required.
• Ability to work collaboratively with IT team members, business stakeholders, and external vendors.
• Commitment to continuous learning, professional development, and keeping current with emerging technologies and cybersecurity practices.