Impact Starts at UNICEF Canada
JOIN OUR TEAM AS SENIOR SYSTEMS ADMINISTRATOR
Are you a hands-on technologist who wants to own it all, from fixing a laptop at someone's desk to hunting threats across a modern cloud security stack?
Join UNICEF Canada - one of Canada's most respected and historic charities - is looking for a Senior Systems Administrator to play a key role in managing, securing and evolving our technology environment. This is a dynamic, hands-on position where you'll take ownership of the full spectrum of IT operations, including day-to-day help desk and desk-side support, Microsoft 365, cloud services, servers, networks and cybersecurity. You'll be directly involved in supporting staff with their everyday technology needs while also tackling complex technical challenges, strengthening our cybersecurity posture and driving improvements across our IT environment. Your work will help keep our staff, volunteers and partners connected, secure and productive in support of children around the world.
Position Details
Position Title
Senior Systems Administrator
Employment Type:
Permanent, Full-time
Reports to:
Deputy Director, IT
Direct Reports:
0
Salary Range:
$70,500 to $85,500 per year with benefits and 3 weeks paid vacation
Work Location:
Toronto
Work Environment:
UNICEF Canada currently operates under a Fixed- Hybrid model that requires team members to attend t he office at least 2 days/week (Tuesday & Wednesday).
Why UNICEF & UNICEF Canada?
UNICEF is the world’s farthest-reaching humanitarian organization for children. Across 190 countries and territories, and in the world’s toughest places, we provide and advocate for education, health and nutrition services. We protect children from violence and abuse. Bring clean water and sanitation to those in need. Keep them safe from climate change and disease. Serve as the world’s largest provider of vaccines. Before, during and after emergencies, we’re on the ground with life-saving help and hope. The needs of children around the world continue to increase and the role of UNICEF is more important than ever.
UNICEF Canada is one of 32 National Committees located in high-income countries around the world. Our team exists to fundraise for UNICEF’s highest priorities, and to work neutrally with governments and the private sector in Canada and internationally to advance the rights and well-being of children and youth.
As UNICEF Canada launches a bold new Strategic Plan in 2026, be part of this next phase of impact!
The Opportunity
This is a hands-on, end-to-end IT role. UNICEF Canada does not have a separate help desk or Tier 1 function, so the Senior Systems Administrator is responsible for all levels of technical support. The role also leads day-to-day security operations, including hardening our Microsoft 365 environment, managing endpoint protection, and responding to alerts from our managed detection and response provider.
On any given day you might:
- Get a new staff member's laptop, accounts and MFA set up and walk them through it in person
- Troubleshoot a Teams, printer or VPN issue at someone's desk or over a remote session
- Triage a security alert from our MDR provider and contain a compromised account
- Tighten a Conditional Access policy or roll out an Intune configuration
- Patch servers, check backups and plan a firewall change
Cybersecurity is the center of gravity of the role. UNICEF Canada handles donor and payment data, and we're a target for phishing, business email compromise and fraud. You'll run the day-to-day security operations that protect that trust, working closely with the Deputy Director, IT, and our security partners.
Key Accountabilities
Cybersecurity operations and compliance (35%)
- Run day-to-day security operations across our stack: Sophos endpoint protection (EDR), Field Effect Covalence managed detection and response (MDR), Barracuda email security, Microsoft Defender and Password management.
- Act as the first internal responder to alerts from Field Effect, Sophos and Defender: triage, investigate, contain and remediate, escalating to the Deputy Director, IT as needed.
- Own identity security in Microsoft Entra ID: MFA, Conditional Access, privileged access, sign-in risk policies and regular access reviews.
- Configure and maintain Microsoft security and compliance tools, including Defender for Office 365, Purview DLP, sensitivity labels, retention and audit.
- Track and improve our Microsoft Secure Score and endpoint compliance, and drive vulnerability and patch management to agreed timelines.
- Maintain incident response, ransomware and business continuity playbooks, and take part in tabletop exercises and full restore tests.
- Run our security awareness program, including KeepNet phishing simulations, targeted training and follow-up with staff.
- Support audits, external assessments and alignment with NIST CSF 2.0, privacy law (PIPEDA, Quebec Law 25), and payment security requirements (PCI DSS).
- Review new vendors, apps and AI tools for security and privacy risk before they're adopted.
End-user and desk-side support (25%)
- Provide all tiers of technical support (Tier 1 through 3) to staff and volunteers, in person, by phone, Teams and remote session.
- Own the IT ticket queue end to end: logging, prioritizing, resolving and closing requests, and spotting recurring issues to fix at the root.
- Manage the device lifecycle for laptops, mobile devices, printers and peripherals: procurement, imaging or Autopilot enrolment, deployment, repair and secure disposal.
- Run onboarding and offboarding: accounts, licenses, devices, access and secure removal of access on departure.
- Support executives and leadership with responsive, discreet, and white-glove service.
- Set up and support meeting rooms, AV and Teams Rooms for in-office and hybrid meetings.
- Write clear how-to guides and train staff on Microsoft 365 and other core tools.
Microsoft 365 and cloud administration (20%)
- Administer Microsoft 365: Exchange Online, Teams, SharePoint, OneDrive and Power Platform.
- Manage devices and apps through Microsoft Intune, including compliance policies, configuration profiles, and app deployment.
- Administer Microsoft Entra ID, including hybrid identity with on-premises Active Directory where it remains.
- Manage Azure resources and cloud services, keeping cost, security and performance in check.
- Support the integration and security of business platforms, including Salesforce Nonprofit Cloud, Raiser's Edge NXT and our fundraising and payment platforms.
- Use scripting and automation (PowerShell, Graph API, Power Automate) to cut manual work and improve consistency.
- Stay current on Microsoft 365 updates and roll out new features thoughtfully.
Infrastructure, network and backup (20%)
- Manage our network: firewalls, switches, Wi-Fi and VPN at head office and regional sites.
- Maintain remaining on-premises and virtual servers (Windows Server, Hyper-V), including patching, monitoring and capacity planning.
- Manage backup and recovery for Microsoft 365, cloud and on-premises systems, and test restores regularly.
- Manage telephony and collaboration infrastructure, including Teams Phone and VoIP.
- Document systems, configurations, network diagrams and procedures, and keep them current.
- Lead or support IT infrastructure projects and perform off-hours maintenance when needed to minimize disruption.
Qualifications
- Education: A two-year post-secondary diploma or degree in IT or a related field, or equivalent experience.
- Experience: 5+ years in IT, with at least 3 years as a systems administrator in a generalist role that included hands-on end-user support.
- Cybersecurity: Hands-on experience with EDR/XDR and responding to security incidents, plus a working knowledge of phishing, BEC, ransomware and account-compromise response.
- Microsoft 365 and Entra ID: 3+ years administering Microsoft 365, including Exchange Online, Defender, Conditional Access, MFA and Intune.
- End-user support: A strong service mindset and proven experience supporting staff at every level, including executives, in person and remotely.
- Networking: Solid knowledge of TCP/IP, DNS, DHCP, VPN, VLANs, Wi-Fi and firewall configuration.
- Servers and backup: Experience with Windows Server, Active Directory and Group Policy, Hyper-V, and backup and recovery tools.
- Scripting: Comfort with PowerShell, or the drive to build it quickly.
- Communication: The ability to explain technical and security risks in plain language to non-technical staff and leaders.
- Ownership: You work well independently, manage competing priorities, and follow through from ticket to project.
- Flexibility: Willingness to travel occasionally within Canada and do off-hours maintenance or incident response when required.
An Employer of Choice: What We Offer
UNICEF Canada is where diverse talent & passion come together to create extraordinary impact for every child. We are committed to being an employer of choice and building a culture that is inclusive, ambitious, compassionate, and high impact.
Members of the UNICEF Canada team have access to the following employee benefits:
A ROBUST COMPENSATION PACKAGE
- Extended Health/Dental benefits, Healthcare Spending Account, and Wellness Account
- Life, AD&D, & Long-Term disability insurance coverage
- Employer match contributions (5%) to a Group Pension Plan
- Access to parental leave top-up
A COMMITMENT TO WELLNESS
- Fixed hybrid work environment to balance connection and collaboration with the work-life integration needs of our team
- Minimum 3 weeks of annual vacation (increases with time served) & 1 additional day per year of service (max 30)
- 10 paid sick days & 2 personal days
- 8 employee wellness days – an additional series of pre-set days off, given annually to further extend long weekends
- Discounted rate for a GoodLife gym membership
- Access to an Employee and Family Assistance Program
A CULTURE OF LEARNING & GROWTH
- Access to a comprehensive global learning platform with over 1600 courses, webinars & resources
- Internal leadership development, training, & mentorship programs that integrate Anti-Racism and diversity, equity and inclusion principles
- Opportunities to access both local & global stretch assignments
AN INCLUSIVE & PURPOSE-DRIVEN WORKPLACE
- Centrally located head office in mid-town Toronto with satellite offices in Montreal
- Easily accessed by public transit and a short walk from several parking locations
- Inclusive & accessible co-working and meeting spaces designed to foster purpose at every turn and accommodate the diverse needs of employees
A CHANCE TO DO MEANINGFUL & LIFE-CHANGING WORK
- Under the leadership of a dynamic, accomplished, and experienced executive leadership team, you’ll be part of a diverse & talented Canada team committed to creating meaningful impact while fostering an inclusive and supportive work environment.
- You’ll join a global UNICEF family with a shared commitment to impact the lives of children
Our Commitment to Inclusive Workplaces & Recruitment
UNICEF Canada is an inclusive workplace and is committed to championing diversity, equity, inclusion and accessibility. Requests for accommodation can be made at any stage of the recruitment process.
At UNICEF Canada, we believe strongly in personal connections and our hiring process is entirely human-driven. We do not use AI or automated systems to review applications or conduct interviews. Each candidate is evaluated by our experienced team to ensure a fair and thoughtful hiring experience.
How to Apply
Please submit your resume and cover letter as one document to careers@unicef.ca by 11:59PM EST on November 26, 2027. Please reference "Senior Systems Administrator" in the subject heading.
UNICEF Canada thanks all applicants for their interest in this opportunity, however, only those selected for an interview will be contacted. Consistent with our Child Safeguarding Policy, all successful candidates must receive clearance by a police background check (including a vulnerable sector screen).
