IT & ERP Systems Administrator

THE MANDATE

SkyCan Systems is a Canadian defence manufacturer of uncrewed aircraft systems for the Department of National Defence and allied governments. We are establishing our first production facility in Barrie, Ontario, and we operate to aerospace and defence standards, including the cyber security standards that apply to companies handling controlled information.

The IT & ERP Systems Administrator runs SkyCan's IT systems day to day: the Microsoft 365 environment, identity and access, devices, networks and the business applications the company runs on, including the ERP we are implementing in 2027. The role keeps these systems secure, available and audit-ready, so that SkyCan can protect controlled information and meet the Canadian Program for Cyber Security Certification (CPCSC).

This is a hands-on role in a growing company. The IT & ERP Systems Administrator brings day-to-day IT administration in-house, works with our external cyber security assessor and IT service partners, supports the ERP rollout, and sets up IT for the Barrie facility as it opens.

KEY RESPONSIBILITIES

Microsoft 365, Identity and Access

• Administer the Microsoft 365 tenant, including Entra ID, Exchange Online, SharePoint, OneDrive and Teams
• Run the account lifecycle: role-based access for new hires, changes when roles change, and same-day removal on departure, with a record for every change
• Manage multi-factor authentication, Conditional Access, privileged accounts and periodic access reviews
• Configure sharing, sensitivity labels and data loss prevention so that access to controlled information matches approved authorizations

Devices and Endpoint Security

• Keep one authoritative inventory of hardware, software and licences
• Enrol and manage company devices in Intune, enforce compliance and encryption policies, and control the use of personal devices
• Run patching and vulnerability management to defined timeframes, and manage endpoint protection and its alerts
• Provision, repair and securely wipe devices, and issue and recover equipment

Networks and Infrastructure

• Manage networks, firewalls, Wi-Fi, remote access and DNS for SkyCan's sites
• Stand up IT for the Barrie facility with the VP, Manufacturing, the construction team and contractors, including networks, printing, meeting rooms and the IT side of access control and CCTV
• Enable and review security logs, and escalate events under the incident response plan
• Maintain backup and recovery for company data, and support the Business Continuity Plan

Business Applications and ERP

• Administer SkyCan's business applications, including the HR, expense, CRM and e-signature systems, their integrations and single sign-on
• Act as system administrator for the ERP: users, roles and security, integrations, data loads, upgrades and first-line support, through implementation and after go-live
• Bring new software into use only after it passes SkyCan's security and data requirements

Cyber Security and CPCSC

• Implement and maintain the technical controls for CPCSC Level 1, and build toward Level 2, with our external assessor
• Write and keep current the procedures, configuration baselines and evidence that each control requires
• Keep controlled technical data inside approved systems, and support the Controlled Goods Program security plan on IT matters
• Support audits, assessments and customer security questionnaires
• Deliver security awareness and phishing training, and track policy acknowledgements

Support and Vendors

• Provide day-to-day IT support to corporate, engineering and production staff, in person and remotely
• Handle user, device and access administration for engineering and production systems, to the requirements set by the SVP, Industrialization and the VP, Manufacturing and the cyber requirements set by the Chief Administrative Officer
• Manage IT service providers, licences and renewals within the IT budget and the Delegation of Authority Policy

HOW WE WILL MEASURE SUCCESS

Year 1 targets, confirmed with the Chief Administrative Officer after the first three months.

• Cyber security: CPCSC Level 1 controls met with evidence, and the self-assessment ready to submit, within six months of starting
• Devices: 100% of company devices enrolled and compliant; no access to company data from unmanaged devices
• Access: 100% of new hires set up by their first day and leavers removed the same day, each with a record; quarterly access reviews completed
• Patching: critical security updates applied within 14 days
• ERP and applications: user and security set-up ready for each ERP go-live; application issues resolved within agreed service levels
• Support: 90% or more of support requests resolved within one business day
• Barrie: IT ready for occupancy on the facility schedule
• Cost: IT spend within the approved budget, with licences matched to headcount

THE PERSON

Required

• Diploma or degree in information technology, computer science or a related field, or equivalent experience
• At least three years administering Microsoft 365 and Entra ID in a business environment, including Intune and endpoint security
• Hands-on experience with business networks: firewalls, switching, Wi-Fi, remote access and DNS
• Experience as an administrator of business applications or an ERP system
• Working knowledge of a security control framework such as CPCSC, CMMC, NIST SP 800-171 or ISO 27001
• Able to obtain and maintain a security assessment under the Controlled Goods Program, and eligible for a Government of Canada Secret clearance

Asset

• Microsoft certifications such as Microsoft 365 Administrator, Endpoint Administrator or Identity and Access Administrator
• A security certification such as CompTIA Security+
• ERP administration in a manufacturing business
• Experience in defence, aerospace or another regulated industry, or with a CMMC or CPCSC assessment
• Experience setting up IT for a new office or plant
• Scripting and automation, such as PowerShell

How You Work

• Security-minded: does it right, writes it down and can prove it
• A practical generalist, comfortable moving from a laptop to a firewall to the ERP in the same day
• Service-oriented, and explains technology in plain language
• Discreet with sensitive and controlled information
• Organized about tickets, records and deadlines

THE DETAILS

Reports to: Chief Administrative Officer & General Counsel

Location: Hybrid, Toronto (Yonge and Bloor) until the Barrie facility opens in 2027; then primarily on site in Barrie, with time in Toronto as needed

Type: Full-time, permanent; no direct reports at start

Works with: Chief Administrative Officer; SVP, Industrialization; VP, Manufacturing; Chief Financial Officer and the finance team; Human Resources; the ERP implementation team; IT service providers and our cyber security assessor

Conditions: Regular travel between Toronto and Barrie. Some work outside business hours for maintenance windows and incidents, and part of an on-call rota once production starts

Benefits: Group health and dental, virtual care and EAP

Start: As soon as possible

This posting is for an existing vacancy. SkyCan uses AI tools to help screen and assess applications. We will follow up with every candidate we interview within 45 days of their last interview. This role requires a Controlled Goods Program security assessment; eligibility is assessed under Canadian law and Canadian work experience is not required. SkyCan welcomes applications from all qualified candidates and provides accommodation on request throughout the hiring process, in accordance with the AODA and the Ontario Human Rights Code.