Senior Systems Security Administrator (Contract)

Lawson Lundell LLP is a leading regional Canadian business law firm with offices in Vancouver, Kelowna, Calgary and Yellowknife. The firm is recognized and respected by its peers in legal and business publications and was named one of BC’s Top Employers for 2026. The firm has been recognized as the largest law firm in Vancouver by Lexpert. Our lawyers have received national and international recognition in numerous legal directories and publications. Our clients are leaders in the jurisdictions where we are located and around the world.

We are currently recruiting for the temporary position of Senior Systems Security Administrator. This position is based in our Vancouver office and the contract term is 12-18 months. Join a team of IT professionals that enjoy technology and support each other in the delivery of exceptional IT services to the firm.

Position Summary

The Senior Systems Security Administrator is a senior, hands-on technical role responsible for ensuring industry best practices are utilized to secure the firm's server, infrastructure and cloud environments. The primary focus is vulnerability remediation, security patching and upgrades, server hardening, asset and software lifecycle assessment, and disaster recovery infrastructure.

The successful candidate must be able to independently assess technical issues, develop remediation and implementation plans, troubleshoot complex problems, and execute approved changes with minimal technical direction. Production updates, upgrades and significant configuration changes will follow established change management processes and require appropriate review and approval.

Standard Responsibilities:

Vulnerability Management, Patching & Hardening

• Take technical ownership of infrastructure vulnerability remediation from identification through closure.
• Review and prioritize vulnerabilities based on severity, exploitability, system criticality and business impact.
• Apply approved security patches, updates, firmware and software upgrades.
• Maintain patching schedules and remediate critical vulnerabilities within established timelines.
• Identify unsupported and end-of-life operating systems, applications and infrastructure components and develop remediation plans.
• Harden Windows Server, VMware, cloud and related infrastructure using recognized security standards and practices.
• Implement secure configurations, least privilege and appropriate administrative controls.
• Validate successful remediation through testing and vulnerability rescanning.

Infrastructure Security

• Ensure security and compliance of Windows Server, VMware, Microsoft Azure and related infrastructure platforms as per approved standards and best practices.
• Identify infrastructure requiring patching, upgrades, remediation or replacement.
• Maintain accurate technical security documentation, secure system configurations and security operational procedures.
• Independently troubleshoot and resolve complex security-related issues.
• Support security configuration of network infrastructure, firewalls, VPNs and network segmentation.
• Support Cisco Meraki and related network security technologies.
• Assist with security-related network remediation and secure connectivity between offices and cloud/DR environments.

Network Security

• Administer and maintain the EDR/MDR platform to ensure endpoint coverage, alert monitoring and timely escalation of identified security threats.
• Ability to configure, maintain, upgrade and monitor the SIEM platform to ensure it remains operational, secure and appropriately sized.
• Perform initial review, implement and maintain approved SIEM alerts, correlation rules, dashboards and notification configurations.
• Perform review and validation of SIEM alerts and escalate suspected security incidents to appropriate management.

Compliance, Risk and Security Assessment

• Ensure security systems, configuration and operational practices comply with organizational policies, regulatory requirements and applicable cybersecurity standards and frameworks
• Assessment of hardware infrastructure and software platforms to ensure compliance with current security standards and projected lifecycle
• Perform security risk threat assessments on new initiatives and projects
• Develop implementation, testing, validation and rollback plans for infrastructure security changes.
• Follow established change management processes for production changes.
• Coordinate remediation activities with IT, Security, application teams and vendors.
• Provide reporting on vulnerability remediation, patching, infrastructure lifecycle and outstanding risks.
• Serve as a senior technical escalation resource and provide guidance to junior IT staff.
• Participate in after-hours maintenance and critical infrastructure support when required.

Disaster Recovery & Cloud

• Support and maintain the firm's cloud-based disaster recovery environment.
• Support backup, replication, restoration and recovery of critical systems.
• Participate in DR testing and validate system recoverability.
• Maintain DR documentation and technical recovery procedures.
• Ensure DR infrastructure is appropriately patched, hardened and secured.

Qualifications:

• Degree or diploma in Computer Science, Information Technology, Cybersecurity or related discipline, or equivalent experience.
• 7+ years of progressively responsible systems/infrastructure administration experience.
• Strong hands-on experience with Windows Server administration, security patching, vulnerability remediation and server hardening.

• Experience with EDR, MDR, SIEM and other detective and protective technologies

• Experience with Active Directory, Group Policy and Microsoft Entra ID.
• Experience with access and identity management
• Experience with VMware virtualization and Microsoft Azure/cloud infrastructure.
• Experience with vulnerability management and scanning technologies.
• Experience with cybersecurity, governance, compliance and risk management
• Experience with backup, recovery and disaster recovery technologies.
• Working knowledge of TCP/IP, DNS, DHCP, VLANs, VPNs, firewalls and network segmentation.
• Experience maintaining accurate infrastructure and software inventories.
• Strong troubleshooting, analytical and problem-solving skills.
• Ability to independently manage technical issues from identification through remediation and validation.
• Strong documentation and communication skills.
• Sound judgment, discretion and confidentiality.

Preferred Qualifications:

• Experience in a law firm or professional-services environment.
• Experience with the Cisco security platform of Meraki, Duo, Secure Access
• Microsoft Azure, Microsoft Security, VMware or equivalent certifications.
• Security+, SSCP, CISSP or similar security certification.
• Familiarity with CIS Benchmarks, NIST Cybersecurity Framework or CIS Controls.
• Experience with enterprise vulnerability management platforms.

The typical salary range for this position is $85,000 - $110,000 annually; the base pay offered is based on location and may vary depending on job-related knowledge, skills, experience, internal and market equity.

In addition to a competitive salary, we offer a variety of benefits, including:

• Health Benefits: extended health and dental.
• Financial Benefits: RRSP, TFSA, year-end bonuses and an employee referral bonus program.
• Paid Time Off: vacation time starts at 3 weeks, personal days, sick time, and a volunteer day every year.
• Education Reimbursement: we are committed to growth and development, and our educational reimbursement policy provides opportunity for our staff to expand on their skills and knowledge in the legal field.
• Lifestyle Benefit: reimbursement for purchases from a pre-approved list, including memberships and gym equipment.
• Tenant Fitness Centre: access to the fitness centre in our office building.
• Fun Environment: annual year end party, happy hours, staff appreciation week and many other social events.
• Awards: long-term service and bonus vacation awards.
  

If you are interested in becoming part of our dynamic environment and would like to apply for this position, please submit your resume with a covering letter to the attention of Kevin Bahng, Chief Information Officer (kbahng@lawsonlundell.com).

Although we thank all applicants for their interest in Lawson Lundell LLP, only shortlisted candidates will be contacted.