Lead IT Infrastructure & Cloud Engineer - Mining/Mineral Processing

Location: Toronto, ON

Hybrid Role: 2-3X on site

The Opportunity

We are seeking a Lead IT Infrastructure & Cloud Engineer to design, implement, and support our core infrastructure, cloud services, and modern workplace environment. This is a hands-on technical leadership role responsible for delivering secure, scalable, and reliable technology services across a growing international organization. You will lead the technical direction of the Microsoft 365 modern workplace, coordinate Level 2 and higher support with our Cloud Solution Provider (CSP), and provide technical leadership for infrastructure and workplace technology projects.

What You Will Do:

Infrastructure, Cloud and Modern Workplace

Own the technical direction, design, implementation, and ongoing improvement of the organization’s IT infrastructure, cloud services, and modern workplace environment.
Act as technical lead for Microsoft 365, including Entra ID, Intune, Microsoft Defender, Exchange Online, SharePoint Online, Teams, OneDrive, and related services.
Design and maintain secure, standardized endpoint management solutions for Windows, macOS, and iOS, including configuration, compliance, application deployment, patching, and device lifecycle management.
Lead identity and access management practices, including SSO, MFA, Conditional Access, passwordless authentication, privileged access, and joiner-mover-leaver controls.

CSP, Support and Service Management

Serve as the primary technical relationship owner for the company’s CSP, coordinating Level 2 and higher support, escalations, service reviews, root-cause analysis, and continuous service improvement.
Define clear support responsibilities and escalation paths between internal IT, the CSP, software vendors, consultants, and other technology partners, ensuring issues are owned through resolution.
Troubleshoot and resolve complex Level 2 and Level 3 technical issues, while identifying recurring problems and implementing permanent corrective actions.

Projects and Operational Reliability

Lead and coordinate infrastructure, cloud, and modern workplace projects delivered with the CSP and other partners, including upgrades, migrations, integrations, security improvements, and new service deployments.
Ensure the availability, performance, security, and scalability of cloud and on-premises infrastructure across all operating locations.
Develop and maintain architecture diagrams, technical documentation, standards, operating procedures, support runbooks, and configuration baselines.
Mentor and support junior team members and student interns, promoting knowledge transfer and consistent technical practices.

Cybersecurity, Governance and Leadership

Implement and enforce cybersecurity and data governance controls across Microsoft 365 and infrastructure services, including access controls, monitoring, information protection, retention, and compliance requirements.
Contribute to IT planning, technology roadmaps, budgeting, licensing optimization, and strategy execution.
Mentor and support junior team members and student interns, promoting knowledge transfer and consistent technical practices.

What You Bring:

Minimum 5–8 years of experience in IT infrastructure, systems, cloud engineering, or modern workplace roles, including experience acting as a senior technical lead.
Diploma or degree in Information Technology, Computer Science, or a related field; equivalent practical experience will be considered.
Strong hands-on experience designing, deploying, and maintaining Microsoft cloud and hybrid environments, including Microsoft 365, Azure services, VMware, and Hyper-V.
Demonstrated experience supporting a global, hybrid workforce and delivering reliable services across multiple locations and time zones.
Strong experience with Microsoft Intune and endpoint management for Windows, macOS, and iOS, including compliance, application deployment, update management, and endpoint security.
Experience designing and maintaining identity and access solutions using Microsoft Entra ID, SSO, MFA, Conditional Access, and passwordless authentication.