Salary range (but not limited to):

Annual bonus target, based on the base salary, with a potential payout of up to double the target (subject to personal and company performance):

As part of our commitment to Win As A Team, we share our success with employees through our annual bonus plan and Employee Share Purchase Plan (ESPP) – with Intact matching 50% of your net shares.

Our pension offerings provide flexibility and long-term security for our employees beyond their careers. We are one of the few companies offering the opportunity to receive guaranteed income for life via our defined benefit pension plan.

Salary for the candidate will be determined taking into consideration a number of factors including: experience, skills, qualifications, anticipated contribution to role, internal equity, etc. The salary range presented above is based on a 35-hour workweek and would represent a majority of different candidate profiles. However, we encourage candidates who may fall outside of this range to apply as well.

About the role

You are a seasoned Infrastructure Security and Senior Windows Systems Administrator with strong expertise in Windows Server, Active Directory, HSM appliances, and PKI/PQC. You will join a dynamic IT team based in Montreal, Laval, Saint-Hyacinthe, or Toronto (ON).

Highly self-sufficient, organized, and rigorous, you proactively anticipate issues and assess impacts and risks before they affect service availability and/or security.

Reporting to the Manager, Infrastructure Security, you will contribute to high-value initiatives at Intact and serve as a trusted technical pillar for both the team and the broader organization. Your primary mandate is to ensure the reliability, security, and scalability of our technology stack—including operating systems, virtualization platforms, infrastructure security controls, and key middleware products—to meet current and future business needs.

What you'll do here:

• Infrastructure Security Subject Matter Expert (SME) responsible for implementing and overseeing security controls to protect critical infrastructure, ensuring compliance with applicable standards, and reducing overall risk posture.

• Maintain strong awareness of industry trends and technologies by monitoring IT and cybersecurity news, emerging techniques, and the evolving threat landscape.

• Implement, configure, and continuously optimize security baseline controls by deploying hardened configurations and policies that improve the organization’s security posture.

• Provide operational support for Windows platforms and related infrastructure, including Active Directory, HSM appliances, and PKI/PQC (Post-Quantum Cryptography).

• Participate in the planning and delivery of projects and initiatives involving Windows, AD, HSM, and PKI/PQC capabilities.

• Participate in Disaster Recovery exercises to validate that processes and procedures are current, effective, and aligned with requirements.

• Maintain and support risk management activities, including the risk register, derogations/exceptions, and third-party risk assessment processes.

• Develop, maintain, and validate system baselines and hardening standards.

• Plan and execute operating system upgrades and patching activities to maintain secure and supported platforms.

• Uphold team operational standards and practices to ensure stability, reliability, and continuity.

What you bring to the table:

• College diploma (DEC) in Computer Science

• Ten years of experience in a systems administrator role

• Strong knowledge of Windows systems and protocols: Active Directory, HSM, PKI/PQC, ADFS, GPO, DHCP, DNS, LDAP, SMB, NTLM, SAML, etc.

• Expert level knowledge of network administration, architecture and engineering in mission-critical environments servicing large server deployments

• Strong scripting skills (PowerShell and Terraform)

• Good knowledge of log analysis and monitoring tools

• Knowledge of SCCM and SCOM systems

• Knowledge of packet analysis with Wireshark and Netmon

• Knowledge of ITIL processes

• Experience working in an Agile methodology

• Analytical mindset and strong diagnostic skills

• Knowledge of a wide variety of network equipment including but not limited to routers, switches, firewalls, denial of service mitigation, serial consoles, and load balancers

• Exceptional analytical, conceptual, and problem-solving abilities

• Excellent documentation and communication skills

• Availability to work on-call on a rotating basis with other team members

• For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English speaking colleagues across the country. 

• No Canadian work experience required however must be eligible to work in Canada 

#LI-Hybrid