Job Title: Infrastructure Engineer
Location: Montreal ,QC (Hybrid 3 days in a week)
Contract
Role Overview
We are seeking a highly skilled and versatile Full Stack Infrastructure Engineer capable of handling a broad range of responsibilities including Proof of Concept (PoC), Request for Proposal (RFP), and Request for Enhancement (RFE) initiatives. The ideal candidate will possess deep technical expertise across infrastructure layers, strong scripting capabilities, and excellent communication and stakeholder management skills.
As a Full Stack Infrastructure Engineer, you will be responsible for the design, analysis, implementation and support of technology systems for the China offices. This will include working closely with many technology engineering teams such as Networks, SecDesign, Proxy, Risk and Windows, in order to implement systems that meet the Firms policies. This will also mean you will need to work with external vendors to ensure that their products meet these policies.
You will need to collaborate with the business stakeholders to ensure the systems meet their needs and requirements. This is very much a hands-on role, where you will be involved in the creation of PoCs and evaluations to test the systems prior to production deployment. During the testing period, it may be necessary to work with internal and external teams so that the systems are working in line with MS policies. There are several IoT systems that you will be working with, including BMS (building management system), lighting controls, occupancy and air quality.
The ideal candidate should have the skills listed below and should be driven, confident and a team player, who thinks and works strategically. When faced with a problem, the candidate should be able to ask the right questions and leverage their own skills and expertise, as well as the people around them.
As many of the technology partners are dispersed globally, it is vitally important that you have experience working in global teams and there may be times meetings are scheduled outside of core hours.
Key Responsibilities
- Lead and support infrastructure-related PoC/RFP/RFE initiatives across diverse platforms.
- Administer applications with full lifecycle ownership, ensuring seamless request flow and network integration.
- Manage and troubleshoot network and security configurations including routers, switches, load balancers, proxies, firewalls, DMZ setups, IPs, ports, subnets, MAC addresses, and authentication protocols (RBAC, Kerberos, SSO, LDAP, AD).
- Perform server administration across Windows, Linux, Mac, and vendor ecosystems (e.g., CA, BMC, IBM DataPower).
- Develop and maintain automation scripts using PowerShell, Python, Perl, or Shell to streamline operations.
- Collaborate with DevOps teams to support CI/CD pipelines and cloud infrastructure.
- Engage with stakeholders and customers to understand requirements, provide updates, and ensure satisfaction.
- Analytical, strong support and troubleshoot IoT/OT devices across multiple platforms (Android, Windows, Linux, Unix, iOS)
- Work in a globally distributed team to provide innovative and robust solutions
- Work with SecDesign teams to design and apply appropriate controls and processes for integrated solutions
- Work with technology partners, stakeholders and SMEs to implement SecDesign approved solutions
- Provide support on existing IoT systems, manage upgrades and troubleshoot problems
- Ensure production systems are compliant within Hygiene programmed
- Collaborate with vendors to future proof our systems
Required Skills & Competencies
- Application AdministrationE3 – Excellent - End-to-end request flow with network integration
- Network & SecurityE3 – Excellent - Deep understanding of network layers, configs, and authentication flows
- Server Administration E3 – Excellent -Platform-agnostic, including vendor-specific systems
- Automation ScriptingE3 – Excellent- Strong logic and scripting in PowerShell/Python/Perl/Shell
- Communication Skills E3 – Excellent - Clear, concise, and effective communication
- Customer/Stakeholder Mgmt E3 – Excellent - Strong interpersonal and stakeholder engagement skills
- CI/CD DevOpsE2 – Proficient - Familiarity with DevOps practices and tools
- Cloud TechnologyE2 – Proficient - Exposure to cloud platforms and services
- IoT/OT DevicesE3 – Excellent - Platform-agnostic troubleshooting and support
Preferred Qualifications Tools & Platforms
- Tenable, Qualys, Rapid7, Nessus
- Microsoft Defender, CrowdStrike (exposure management)
- ServiceNow (Vuln Response module)
- Tanium, BigFix, SCCM (patching)Practices
- Vulnerability scanning & assessment
- Patch management & remediation
- Risk scoring (CVSS, EPSS)
- Threat intelligence integration
- Configuration hardening (CIS benchmarks)
- Continuous monitoring & compliance Domains
- Cloud (AWS, Azure, GCP vulnerability posture)
- On-prem infrastructure (Windows/Linux)
- Network devices & appliances
- Containers & Kubernetes security
- IoT/OT vulnerability management (if applicable, strong differentiator in your profile)
- Bachelor’s or master’s degree in computer science, Information Technology, or related field.
- Certifications in network/security/cloud technologies (e.g., CCNA, AWS, Azure, etc.) are a plus.
