About Us Kinterra is a private equity platform dedicated to building secure supply chains for the modern economy by acquiring and developing critical minerals and related infrastructure assets. With approximately US$1.5 billion in committed capital, Kinterra invests in high-quality, development-stage mining and downstream infrastructure projects to enable the energy transition, support infrastructure expansion, and advance global manufacturing resilience.

We work alongside our portfolio companies to unlock value through active ownership, deep technical expertise, and disciplined project development. Our culture is rooted in collaboration, accountability, and excellence in execution

. About the Ro leKinterra is building a modern, cloud-first IT function to support its growing global platform across Canada, the United States, Australia, Poland, Dubai, and its portfolio companie

s. The IT Specialist, Systems & Automation will serve as the senior technical lead responsible for Microsoft 365, Entra ID, Intune, identity and access management, endpoint engineering, and IT automation. Working closely with the Junior IT Analyst and Network & Security Lead, the successful candidate will drive the evolution of Kinterra's technology environment by replacing manual processes with automated, scalable solutions while ensuring a secure, reliable, and high-performing end-user experience. This is a hands-on role for an experienced systems professional who enjoys solving complex technical challenges, supporting executive stakeholders, and building an IT function that enables business growth across Kinterra's global operatio

ns. Key Responsibilit

ies: Microsoft 365, Entra ID & Iden tity:Own Microsoft 365 tenant administration across corporate and portfolio company environments — Exchange Online, SharePoint, Teams, OneD rive.Design and operate Entra ID / Azure AD identity policies — user and group lifecycle, role-based access, Conditional Access, and authentication f lows.Implement and maintain MFA, Conditional Access, identity protection, and privileged identity management in coordination with the Network & Security Lead.Own M365 Security & Compliance configuration: Microsoft Purview, DLP, sensitivity labels, retention policies, and audit log

ging. Endpoint Management & I ntune:Architect and operate Microsoft Intune for device compliance, application deployment, configuration profiles, and Conditional Access integration across Windows and macOS.Build and maintain automated provisioning pipelines — Autopilot, scripted configuration, baseline enforc ement.Define and enforce endpoint security baselines, patch management cadence, and compliance repo rting.Provide Tier 3 escalation for endpoint configuration, policy, and identity issues raised by the Junior IT An

alyst. Automation, Engineering Discipline & Cross-Stack Troublesh ooting:Identify repetitive IT operations and replace them with automated, reviewable workflows — onboarding/offboarding orchestration, provisioning scripts, license management, ticket routing, alert triage.Develop and maintain automation in PowerShell, Python, Power Automate, and (where applicable) Logic Apps or Azure Fun ctions.Integrate AI-assisted workflows (Microsoft Copilot, Claude, ChatGPT, or equivalent) into IT operations where they deliver measurable productivity gains.Apply working knowledge of networking protocols (TCP/IP, DNS, DHCP, VPN, TLS) and security fundamentals (firewall behaviour, segmentation, Conditional Access) to troubleshoot end-to-end across identity, endpoint, and network layers.Resolve cross-stack issues at root cause — closing tickets without escalating every network-touching M365, Intune, or identity issue to the Network & Securit

y Lead. Onboarding, Offboarding & Identity Li fecycle:Own the systems side of joiner / mover / leaver workflows — automated HRIS-to-M365 provisioning, license assignment, group membership, and timely access rev ocation.Maintain standardized onboarding templates, access review cadence, and offboarding pl aybooks.Coordinate with the Junior IT Analyst, who executes the physical layer (device prep, desk-side setup, hardware coll

ection). VIP & Executive Es calation:Serve as the senior escalation path for executive and VIP IT needs — providing white-glove support where the Junior Analyst cannot resolve, or where the scenario warrants senior handling.Support executive travel IT needs at the systems layer: remote access, identity exceptions, and Conditional Access s cenarios.Maintain documented exception-handling and VIP runbooks so coverage is not personality-d

ependent. AV — Senior Ba ckup Only:Act as backup technical lead for high-stakes AV scenarios — board meetings, investor presentations, town halls — where additional senior coverage is warranted.Own AV-adjacent configuration: Teams Rooms tenant policies, identity integration, and Conditional Access e

xceptions. Documentation, BCP & Continuous I mprovement:Maintain authoritative IT runbooks, architecture documentation, and standard operating procedures.Contribute to Business Continuity Planning, Incident Response, and tabletop exercises — particularly for identity, M365, and endpoint scenarios.Drive a measurable reduction in manual IT effort through automation, self-service, and knowledge base enablement.Develop end-user-facing communications for change announcements, planned maintenance, security advisories, and post-incident

summaries. Co llaboration:Partner with the Network & Security Lead on identity, Conditional Access, segmentation, and security tooling integration.Coordinate with the Junior IT Analyst to ensure no service gaps; balance workload and escal ation paths.Support IT security reviews and ensure automation tooling meets access control, secrets management, and compliance r

equirements. W hat You Bring6–8+ years of hands-on experience in IT systems administration, endpoint engineering, or identity and access management — with demonstrated seni or ownership.Deep, hands-on Microsoft 365 administration: Exchange Online, SharePoint, Teams, OneDrive, and tenant-level c onfiguration.Strong Entra ID / Azure AD expertise: identity policies, Conditional Access, MFA, role-based access, and integration with downstream applications.Hands-on Microsoft Intune expertise: device compliance, application deployment, Autopilot, and configuration profiles across Windo ws and macOS.Strong scripting and automation: PowerShell to a senior level, plus Python o r equivalent.Strong understanding of identity and access management, MFA, Conditional Access, and secu rity hygiene.Experience with Microsoft Purview (DLP, sensitivity labels, retention policies) and M365 Security & ; Compliance.Working knowledge of networking protocols and security fundamentals — TCP/IP, DNS, DHCP, VPN, TLS, firewall rules, and segmentation concepts — sufficient to troubleshoot identity, endpoint, and M365 connectivity issues end-to-end and engage credibly with the Network & S ecurity Lead.Strong written communication — runbooks, architecture documentation, change communications, and executive-facing st atus updates.Comfort engaging directly with executive and VIP stakeholders when escalation requires it; professional and composed un der pressure.Demonstrated ability to operate independently, set technical direction, and mentor a more jun

ior teammate. This posting reflects a new current vacancy and Kinterra’s commitment to a fair and transparent recruitment process. We use AI enabled tools to support parts of the hiring process, however they are guided closely by humans. All interviewed candidates will be notified of the hiring outcome within 45 days, and accommodations are available upon request. Estimated salary range for this role, dependent candidate experience, is $11

0,000-$140,000