Internal IT Manager

Location: Remote in Canada. Preference for those who can align with North America Pacific Time Zone. 

Reports To: Director, Technical Services 

Type: Full-Time Permanent 

About The Land Administration Company: 

The Land Administration Company (LAC) is a Canadian-owned and operated organization delivering innovative, world-class land administration solutions to governments and jurisdictions across the globe. With a proven track record of success and a team deeply experienced in land management projects, we are committed to driving positive, long-lasting social, economic, and environmental outcomes. 

At LAC, we believe in harnessing the power of cutting-edge technology, offering new employees the chance to develop in-demand skills that are shaping the future of land administration. Joining our team means becoming part of a purpose-driven organization where your work can make a real difference, from promoting minority rights and reducing poverty to tackling environmental challenges. 

Why Work with Us? 

• Innovation at the Core: We utilize leading-edge technologies, allowing you to develop highly sought-after skills in a dynamic, forward-thinking environment. 
• Global Impact: You'll have the opportunity to contribute to meaningful projects that help countries and citizens secure land rights and drive positive societal change. 
• Mission-Driven Work: Be part of a team focused on empowering nations and communities to achieve long-term social, economic, and environmental sustainability. 
• Collaborative Culture: Work alongside best-in-class partners and professionals who are passionate about making an impact and bringing innovative solutions to life. 

If you're passionate about technology, social change, and working on impactful global projects, we want to hear from you. 

About the role 

The IT Manager is a hands-on role responsible for owning, managing, and continuously improving LAC's internal IT environment, including our systems, security posture, tools, hardware, and processes. You will be the go-to person for internal IT: from resolving day-to-day help desk requests to administering our Microsoft 365 environment, to defining and enforcing the security controls that protect our data, devices, and communications. 

As a distributed organization working with governments around the world, the security, reliability, and usability of our internal systems is foundational to everything we do. This role carries genuine ownership: you will set standards, run projects, select tools, and be accountable for the health of our IT environment end to end. 

This is a player-coach position in a lean organization. You will spend part of your week on hands-on support and administration, and part on strategic improvement projects such as SharePoint optimization, security hardening, automation, and process design. You should be energized by both. 

Please note that we are unable to sponsor work visas of any kind.  

We use AI tools for scheduling and summarization in our hiring process. We do not use AI tools to make decisions about who moves forward or to assess the strength of candidates. Every application is reviewed and all hiring decisions are made by LAC team members. This is an active, open role that we are currently hiring for at LAC. 

Compensation & Benefits 

• Remote within Canada (our ideal candidate has the flexibility & maturity to manage a schedule that includes occasional virtual and in-person collaboration with teams globally) 
• $100,000 - $130,000 CAD annual salary 
• Full time, permanent role 
• Five weeks of paid vacation annually 
• Medical & dental benefits 
• Support for professional development 

Key Responsibilities 

IT Operations & Help Desk 

• Serve as the primary point of contact for internal IT support across the organization, resolving hardware, software, access, and connectivity issues in a timely, service-oriented manner. 
• Establish and maintain a structured help desk process (intake, triage, prioritization, SLAs, and knowledge base) using tools such as Jira Service Management. 
• Own employee IT onboarding and offboarding, including account provisioning and deprovisioning, device setup, access rights, and license assignment. 
• Create and maintain clear end-user documentation, self-service resources, and training materials to reduce recurring support requests. 
• Track and report on support metrics, recurring issues, and root causes, and drive permanent fixes rather than repeated workarounds. 

Security & Data Protection 

• Own LAC's internal security posture across identity, endpoints, email, collaboration tools, and data in transit and at rest. 
• Administer and harden Microsoft Entra ID (Azure AD), including MFA, Conditional Access, role-based access control, and least-privilege principles. 
• Manage endpoint security and device compliance through Microsoft Intune and Microsoft Defender for Endpoint (or equivalent MDM/EDR tooling) across laptops and mobile devices. 
• Implement and maintain data protection controls, including encryption, DLP policies, sensitivity labelling, retention, and secure external sharing (e.g., Microsoft Purview). 
• Monitor for, respond to, and document security incidents; define and maintain an incident response plan and run periodic tabletop exercises. 
• Manage email security, anti-phishing, and spam controls, and run ongoing security awareness training and phishing simulations for staff. 
• Maintain backup, recovery, and business continuity capabilities for critical internal systems and data, and test them regularly. 
• Ensure vendor and SaaS tools meet LAC's security requirements, including reviewing third-party access, data residency, and AI tool data governance (e.g., Claude). 
• Support customer, partner, and government security questionnaires, audits, and compliance requirements, and help mature LAC's practices toward recognized frameworks (e.g., ISO 27001, SOC 2, CIS Controls). 

Microsoft 365 & Collaboration Platform Administration 

• Administer and optimize the Microsoft 365 environment, including Exchange Online, SharePoint, OneDrive, Teams, and Entra ID. 
• Own SharePoint architecture and governance: information architecture, permissions models, storage optimization, versioning, retention, and ease of use for staff. 
• Administer Power BI (or similar data and reporting tools) as a company-wide platform: workspace and dataset governance, gateway and refresh management, licensing, and enabling teams to produce reporting and dashboards from various data sources. 
• Implement and maintain permission-aware access to reports and data, including workspace roles, sensitivity labels, and row-level security, so that dashboards respect user permission levels across the organization. 
• Administer and govern LAC's productivity and engineering tools, including Jira, Confluence, and Claude, covering user management, permissions, configuration, and integrations. 
• Manage software licensing across the organization, right-sizing subscriptions and eliminating waste. 
• Evaluate, pilot, and roll out new tools and integrations that improve productivity, with appropriate security review and change management. 

Hardware & Asset Management 

• Own the full lifecycle of IT hardware: procurement, imaging and configuration, deployment, tracking, maintenance, repair, and secure disposal. 
• Maintain an accurate, current asset inventory covering devices, peripherals, software licenses, and warranties. 
• Standardize hardware configurations and build repeatable, largely automated device provisioning (e.g., Windows Autopilot). 
• Manage relationships with hardware vendors, resellers, and repair providers, including for remote staff across regions. 

IT Strategy, Optimization & Projects 

• Research, propose, and implement processes, automation, and tools that make LAC's IT more efficient, secure, and user-friendly. 
• Plan and deliver internal IT projects end to end, including scoping, stakeholder communication, execution, documentation, and adoption. 
• Develop, document, and maintain IT policies and standard operating procedures (acceptable use, access control, device standards, data handling). 
• Manage the internal IT budget, forecast needs, and make cost-effective recommendations to leadership. 
• Report regularly to leadership on IT health, risks, spend, and improvement roadmap. 

Qualifications & Experience 

• 5+ years of progressive experience in IT administration, systems administration, or IT management, ideally including time as the primary owner of an organization's IT environment. 
• Proven, hands-on experience administering Microsoft 365 at the tenant level, including Exchange Online, SharePoint, Teams, OneDrive, and Entra ID. 
• Demonstrated experience with endpoint management and security tooling such as Microsoft Intune, Defender for Endpoint, or comparable MDM/EDR platforms. 
• Experience implementing identity and access controls, including MFA, Conditional Access, SSO, and least-privilege access models. 
• Experience administering Atlassian tools (Jira, Confluence), including permissions, workflows, and integrations. 
• Experience administering Power BI or similar reporting tools, including workspace governance and row-level or permission-based access to data, is a strong asset. 
• A track record of delivering IT improvement projects, such as SharePoint restructuring, security hardening, automation, or tool migrations. 
• Experience managing hardware lifecycles and asset inventories for a distributed or remote-first workforce. 
• Experience supporting security audits, client security questionnaires, or compliance frameworks (ISO 27001, SOC 2, CIS Controls). 
• Experience scripting or automating administrative tasks (e.g., PowerShell, Power Automate) is a strong asset. 
• Relevant certifications are an asset, such as Microsoft 365 Certified: Administrator Expert, Microsoft Certified: Security, Compliance, and Identity Fundamentals, Azure Administrator, CompTIA Security+, or ITIL Foundation. 
• Excellent written and verbal communication skills, with the ability to explain technical concepts to non-technical colleagues. 
• Ability to work independently and collaboratively in a fast-paced, evolving global environment. 
• The ability to pass a background check and security clearance. 

Ideal Candidate Profile 

You are a hands-on IT generalist with deep Microsoft 365 expertise who takes genuine ownership noticing problems before they are reported and fixing root causes, not just symptoms. 

• Security-minded by default, with the judgment to balance protection against usability in a small, fast-moving organization. 
• A strong service orientation: patient, approachable, and clear when supporting colleagues of all technical levels. 
• Comfortable being a team of one (or nearly so): able to prioritize ruthlessly, self-manage, and know when to bring in external specialists. 
• An excellent communicator and documenter who turns tribal knowledge into written, repeatable processes. 
• Pragmatic about new technology, including AI tools: enthusiastic about their potential while thoughtful about data protection, governance, and risk. 
• Ability to work cross-functionally with Engineering, Product, Operations, Customer Success, and Executive Leadership teams. 

Diversity, Equity & Inclusion 

We are an equal-opportunity employer and are dedicated to fostering an inclusive and diverse environment for employees from all walks of life. Employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, or disability. We hire based on talent, and we're excited to hear what you will bring to our team! 

How to Apply 

To apply, please submit a resume and cover letter below, ideally in a PDF! We thank all applicants for their interest; however, only those candidates selected for interviews will be contacted. 

If you don’t meet all our requirements exactly or have taken a non-traditional professional path, we still want to hear from you! Use your cover letter to tell us about your unique experience—we strive to build a diverse team and recognize that skills are transferable.