Cloud Administrator
Canada · Remote · Full-time · Mid-level · Senior
Founded in 2006, CyberClan is a global leader in cybersecurity and incident response. We help organisations recover quickly and securely from cyber incidents, ensuring minimal disruption and maximum resilience. With expert teams located across multiple time zones, we provide support and solutions around the clock, ensuring our clients receive continuous care and expertise whenever they need it.
We are a Managed Service Provider (MSP) seeking a Microsoft Entra ID & Intune Specialist with strong experience designing, implementing, and supporting secure Microsoft identity and endpoint management solutions. This is a hands‑on, technical role combining architecture, consulting, project delivery, and Tier 3 operational support. You will work across multiple Microsoft 365 tenants, advising clients, leading implementations, and supporting production environments. The ideal candidate has deep expertise in Microsoft Entra ID (Azure AD) and Microsoft Intune, strong security fundamentals, and experience in an MSP or consulting environment.
Key Responsibilities:
Microsoft Entra ID / Azure AD – Design & Implementation
Design and implement Microsoft Entra ID (Azure AD) identity architectures
Architect and deploy Conditional Access policies (MFA, device‑based access, risk‑based access)
Implement Zero Trust identity strategies
Configure and manage:
Role‑Based Access Control (RBAC)
Privileged Identity Management (PIM)
Enterprise Applications and Single Sign‑On (SSO)
App registrations and API permissions
Design and support hybrid identity using Entra Connect
Lead Entra ID migrations, security reviews, and tenant optimizations
Troubleshoot complex authentication, authorization, and access issues
Microsoft Intune – Design, Deployment & Operations
Design and implement Microsoft Intune for Windows, macOS, iOS, and Android
Architect Intune solutions including:
Configuration Profiles
Compliance Policies
Endpoint Security Policies
Security Baselines
Lead Windows Autopilot design and deployment (greenfield & brownfield)
Package and deploy applications (Win32, Store, MDM)
Configure and manage BitLocker, Microsoft Defender, and ASR rules
Troubleshoot complex enrollment, policy, and application deployment issues
Standardize Intune configurations across multiple client tenants
Projects, Consulting & Operations (Balanced Role)
Deliver Microsoft 365, Entra ID, and Intune implementation projects
Act as a technical consultant and trusted advisor to clients
Provide Tier 3 escalation support for identity and endpoint issues
Balance project delivery with ongoing operational responsibilities
Produce high‑quality technical documentation, solution designs, and runbooks
Improve MSP standards, templates, and reusable designs
Identify automation opportunities (PowerShell, Intune scripts)
Required Skills & Experience
5+ years’ experience with Microsoft identity and endpoint technologies
Proven hands‑on experience designing and implementing:
Microsoft Entra ID (Azure AD)
Microsoft Intune
Strong experience with:
Conditional Access & MFA
Windows Autopilot
Endpoint compliance and security
Experience in an MSP or IT consulting environment
Experience supporting multiple Microsoft 365 tenants
Strong understanding of:
Identity & Access Management (IAM)
Endpoint security
Zero Trust architecture
Excellent troubleshooting, communication, and consulting skills
Highly Desirable Keywords (Nice to Have)
Microsoft Defender for Endpoint
PowerShell automation
Tenant‑to‑tenant migrations
Security‑focused or regulated environments
Modern Workplace architecture
Certifications (Strong Asset)
SC‑300 – Microsoft Identity and Access Administrator
MD‑102 – Endpoint Administrator
MS‑102 – Microsoft 365 Administrator
Microsoft Security or Azure certifications
Why Work With Us
Senior, high‑impact technical role
Design and implement real‑world Microsoft cloud solutions
Exposure to diverse clients and complex environments
Strong technical culture within an MSP
Support for training, certifications, and career growth
Competitive compensation and flexible work options
Cyberclan is committed to equal pay for equal work in its compensation practices. The base salary range for this position in Canada is $90,000 - $110,000 CAD per year. A candidate’s salary is determined by various factors including, but not limited to, relevant work experience, skills, certifications and location.
This is Canadian-based employment, and it is expected that all employees maintain legal entitlement to work in Canada. Applicants selected to move forward in the hiring process are subject to background checks, including but not limited to criminal record, credit, and/or reference checks.
Job Type
Full-time/Exempt
This position may require occasional overtime and flexible scheduling, including evenings, weekends, and holidays, to ensure coverage in our 24/7/365 operational environment
Location
100% Telecommuting
%of Travel Required
0-5%
Physical Requirements
Prolonged periods of sitting at a desk and working on a computer
CyberClan is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.
Skills: Microsoft Entra ID, Microsoft Intune, Azure AD, Microsoft 365, Conditional Access, Multi-Factor Authentication (MFA), Identity and Access Management (IAM), Zero Trust, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Single Sign-On (SSO)