IT System Administrator

Join Swish as an IT System Administrator

About Swish:

Swish is a proudly Canadian, family-owned company that has been operating since 1956. From coast to coast, we help communities feel confident that the spaces where they work and live are clean, safe, and hygienic. We are Canada’s source for high-quality cleaning supplies and equipment, offering professional-grade, environmentally responsible solutions tailored to our customers’ needs. Our product and service categories include: Hand Hygiene, Surface Disinfecting, Kitchen, Laundry & Warewash, Floor Care & Matting, Cleaning Tools & Powered Equipment, Safety, PPE, and more. At Swish, our people are at the heart of everything we do.

About the Role:

The IT Systems Administrator is responsible for the maintenance, configuration, security, and reliable operation of the organization's IT systems and infrastructure across 13 locations. This role oversees a hybrid Microsoft 365 and Google Workspace environment, including identity and access management, servers, endpoints, network infrastructure, virtualization, backups, and disaster recovery.

The position plays a key role in ensuring system availability, network connectivity, data integrity, and cybersecurity readiness. Responsibilities include proactively identifying and resolving technical issues, automating administrative processes, supporting infrastructure improvements, and ensuring consistent IT operations across all locations.

The IT Systems Administrator works closely with internal staff, management, vendors, and service providers to maintain a secure, efficient, and reliable technology environment while contributing to infrastructure planning, operational efficiency, and continuous improvement.

Key Responsibilities:

Identity and access

• Administer Active Directory, Entra ID and Google Workspace, including directory sync (Entra Connect / Cloud Sync, GCDS) and resolving sync conflicts.

• Manage SSO (SAML/OIDC), conditional access and least-privilege access, including Windows LAPS, privileged access tiers and service accounts.

• Automate onboarding, offboarding and bulk changes with PowerShell, Microsoft Graph and GAM / Apps Script.

Endpoints

• Provision devices zero-touch with Syncro RMM software or similar, manage compliance policies, configuration profiles, Win32 app packaging and update cycles.

• Manage Group Policies ensure they are working cleanly.

Network

• Maintain firewalls, SD-WAN and site-to-site VPNs across 13 locations, including routing, 802.1X/RADIUS and Wi-Fi.

• Troubleshoot connectivity down to the packet level and escalate effectively to ISPs and carriers.

Servers, backup and recovery

• Run our virtualization platform and Windows Server roles (DNS, DHCP, file and print, certificate services), plus some Linux systems.

• Own backups for on-premises systems and SaaS (M365 and Workspace) following the 3-2-1 rule, with immutable or offsite copies and regular, documented restore tests.

• Configure UPS units for graceful shutdown.

Security

• Manage EDR, vulnerability scanning and remediation.

• Maintain email authentication (SPF, DKIM, DMARC) on both platforms, and retention and eDiscovery in Google Vault.

Operations

• Monitor systems through our RMM/monitoring tools and respond to alerts.

• Keep documentation and network diagrams current.

• Follow change management practices so updates at 13 sites don't cause surprise outages.

• Communicate clearly with staff and management during incidents and outages.

• Travel between sites as needed for projects and hands-on support.

What You Bring:

Required Qualifications:

• Degree in Computer Science, Information Technology, Systems Administration, or a related field, or equivalent combination of education and experience

• 5+ years in systems administration, ideally in a multi-site organization.

• Strong Microsoft 365 administration: Entra ID, Intune, Exchange Online and Active Directory.

• Working knowledge of Google Workspace administration.

• PowerShell scripting for administration and reporting.

• Hands-on experience with at least one business firewall/SD-WAN platform (e.g., Fortinet, Meraki, Palo Alto, SonicWall, Ubiquiti), plus routing and VPN fundamentals.

• Experience with a hypervisor (Hyper-V, VMware or Proxmox) and core Windows Server roles.

• Experience running a backup product (e.g., Veeam, Datto, Acronis) and performing restores.

• Calm, clear communication with non-technical staff, including talking someone through a fix remotely.

• A valid driver's license and willingness to travel between sites.

Additional Qualifications & Assets:

• SSO design in a hybrid Microsoft/Google environment, and directory sync troubleshooting.

• OSPF or BGP over VPN, 802.1X/NPS, Wi-Fi site surveys and Wireshark or similar.

• Experience migrating off VMware.

• Basic Linux administration.

• EDR (Defender for Endpoint, SentinelOne or CrowdStrike) and vulnerability scanning (Tenable, Rapid7 or Defender Vulnerability Management).

• Google Vault and SaaS backup tools.

• RMM/monitoring tools (PRTG, Zabbix, Datto RMM, N-able, NinjaOne) and documentation platforms (IT Glue, Hudu, Confluence, Visio, draw.io).

• ITIL-style change management.

• Certifications such as MS-102, MD-102, SC-300, AZ-104, Google Workspace Administrator, CompTIA Network+/Security+ or CCNA.

• AI and AIOps: using AI assistants (e.g., Copilot, ChatGPT, Claude) responsibly for scripting and troubleshooting; working with AIOps features such as anomaly detection and alert correlation in monitoring and security tools; managing Gemini rollouts; and building AI-driven automations like ticket triage or log summarization.

Job Details & What We Offer

A people-first company

• Membership in the Swish family - we treat our employees with integrity and have since 1956

 The role

• Location: On-Site - Peterborough, Ontario

• Salary: $70,000-$90,000, based on skills and experience

• Variable compensation: Annual performance bonus eligibility

• Vacation: Starting at 3 weeks

 Benefits from Day 1

• Company-paid Extended Health & Dental Care

• Company contributions to a Registered Retirement Savings Plan (RRSP)

• Employee & Family Assistance Program (EFAP)

Extras that matter

• Rewards & Recognition program that celebrates great work and meaningful contributions

• Access to hundreds of employee discounts across home, wellness, travel, fashion, and more

• Unlimited training and development with an industry-leading brand to help you grow your career

Role Information:

Newly created role that evolved from an existing vacancy

Equal Opportunity
Swish is an equal opportunity employer offering a competitive compensation and benefits package, along with excellent opportunities for professional development and advancement within a growing Canadian organization.

Accessibility & Accommodation
Swish is committed to providing an inclusive and accessible recruitment and workplace experience in accordance with applicable human rights and accessibility legislation across Canada. Accommodation is available upon request throughout the recruitment and selection process. Applicants requiring accommodation may contact Human Resources at any stage.

Pre-Employment Screening
Swish is committed to maintaining a safe and secure work environment. As a condition of employment, candidates will be required to complete background screening, including criminal record checks where permitted by law and where relevant to the position, or where required by client sites. For roles involving the operation of a company motor vehicle, a valid driver’s license and a satisfactory driver’s abstract will also be required.

AI Disclosure
Swish uses artificial intelligence technology to assist in the initial screening and assessment of applications. AI is used only as a support tool; no hiring decisions are made solely by automated systems. All final hiring decisions are made by a human. We are committed to a hiring process that maintains the highest integrity and prioritizes a fair, positive experience for every candidate.