CanCap Group delivers fully managed programs for third-party financial institutions. We are hiring a Senior Systems Engineer to design, automate, and operate the core infrastructure our business runs on, and to help raise the engineering bar across the team. You will join a focused infrastructure team responsible for hybrid identity, cloud, network, endpoint, and the automation that ties them together.

The role combines architecture and engineering with hands-on Tier-3 ownership of the systems you build. Design and evolve hybrid infrastructure across Google Cloud Platform and Azure: identity, networking, security controls, monitoring, and cost. Own networking and routing end to end - design, configure, monitor, and troubleshoot LAN/WAN, IPSec/VPN tunnels, routing, and firewall policy.

Ensure the endpoint fleet is reliably and securely managed through Intune, Autopilot, and RMM tooling, including patching, configuration baselines, imaging, endpoint security, and access controls. Reduce operational toil through automation, improve reliability and availability, and continuously raise the quality bar on how the workplace is run. Maintain runbooks, architecture documentation, and knowledge base content for the systems you own.

Mentor teammates and partner with help desk, application owners, security, and operations on shared initiatives. 7+ years of hands‑on experience in senior systems, or infrastructure engineering roles. ~ Good fundamentals across networking and security: routing, switching, LAN/WAN, VPN, IPSec, firewall policy, and PKI. ~ Deep expertise in Windows environments: Active Directory (on-premises and hybrid), Windows Server, GPOs,



domain trusts, identity management, and Intune. ~ Experience in regulated environments (SOC 2, PCI, or equivalent), comfortable working within and contributing to a controls framework. ~ Strong written and verbal communication with technical and business stakeholders, and the ability to document and mentor.

Certifications such as CCNA, CCNP, MS SC-series (Modern Desktop / Enterprise Administrator), Azure/AWS/GCP associate or professional, or PKI/PKCS credentials. Monitoring, logging, and observability tooling.

Technical

Ownership & Accountability. You take full ownership of critical incidents and projects and drive them from inception to a stable, well‑documented resolution. You define the problem, scope the solution, and ship it without hand‑holding, and you ask for input where it matters.

You actively track where the industry is going, AI‑assisted operations, identity‑first security, modern network architectures, and have an informed opinion on what is worth adopting and what is not. Broad exposure across network, identity, cloud, endpoint, security, and automation, with measurable impact on how the business runs. A genuine engineering role — design and build, not just operate.

Hybrid work structure, approximately 60% in office and 40% remote, subject to business needs. Occasional after‑hours work for change windows and major incidents. Diversity and Inclusion CanCap Group and our subsidiaries are equal opportunity employers and value diversity.

We are committed to building and evolving a team that reflects a variety of backgrounds, perspectives, and skills. #

📌 Systems Engineer (Junior) (Mississauga)
🏢 Cancap Group
📍 Mississauga