IT Operations Engineer

About veritree

veritree is a pioneering climate technology startup founded in 2021 and headquartered in Vancouver. Our mission is to measure and verify the environmental impact of restoration projects worldwide, aiming to plant one billion verified trees by 2030. We partner with businesses, planting organizations, and consumers who share a passion for sustainable restoration to generate tangible benefits for the planet and communities.

Role Overview and Key Objectives (6 Months)

• Assume full responsibility for IT operations and end-user support across veritree and its sister company tentree, effectively managing devices, identity systems, and day-to-day support.
• Take ownership of and optimize mobile device management (MDM) solutions, including zero-touch enrollment, security hardening, patching, and complete Windows MDM deployment.
• Establish a robust security operations foundation by supervising managed Endpoint Detection and Response (EDR) services, enforcing multi-factor authentication (MFA), ensuring least-privilege access, and developing onboarding, offboarding, and incident response playbooks using AI tools to enhance documentation and automation.

Key Responsibilities

• Deliver prompt, high-quality support for hardware, software, access, and connectivity issues.
• Maintain and support core IT infrastructure components such as DNS, VPN, Wi-Fi, networking, SaaS platforms, and productivity tools.
• Manage IT assets, licenses, vendors, procurement, renewals, cost optimization, lifecycle tracking, and technology evaluation.
• Develop and maintain clear documentation, runbooks, and knowledge resources to ensure IT processes are repeatable, auditable, and scalable.
• Administer identity and access management systems including Google Workspace and Microsoft 365 for users, groups, licensing, single sign-on (SSO), and security policies.
• Oversee onboarding and offboarding processes, enforce MFA, apply least-privilege principles, and conduct periodic access reviews.
• Manage MDM platforms covering Apple devices (Mosyle MDM, Apple Business Manager) and Microsoft Intune for Windows, executing zero-touch enrollment, application deployment, operating system patch management, and security baseline enforcement.
• Standardize device provisioning, inventory, and refresh procedures, including mobile and Bring Your Own Device (BYOD) policies.
• Lead security operations including management of EDR providers, monitoring of security logs, and incident response guided by MITRE ATT&CK framework.
• Coordinate phishing and email security initiatives such as SPF/DKIM/DMARC implementations, simulated phishing attacks, awareness training, and vulnerability management across infrastructure.
• Author and update security policies, operational runbooks, and risk registers aligned with established cybersecurity frameworks (CIS Controls, NIST Cybersecurity Framework).
• Leverage artificial intelligence tools like Claude, ChatGPT, and GitHub Copilot to enhance documentation, script development, log and alert analysis, and troubleshooting workflows.
• Design and implement automation and workflow solutions using scripting languages and integration platforms to minimize manual effort and human error.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or an equivalent combination of education and experience.
• Minimum of three years' experience in IT operations or systems administration, including exposure to security domains with the capability to manage IT independently.
• Proven expertise in managing device fleets through MDM platforms such as Mosyle, Jamf, Kandji with Apple Business Manager for Apple devices, or Microsoft Intune for Windows, or demonstrable ability to lead MDM implementations.
• Strong experience administering Google Workspace or similar platforms like Microsoft 365 / Entra ID.
• Familiarity with multiple operating environments including Linux, macOS, and Windows.
• Demonstrated proficiency using AI tools to streamline IT tasks including documentation, automation, and problem-solving.
• Experience in creating workflow automations using PowerShell, Python, n8n, or similar tools.
• Understanding of network fundamentals including DNS, VPN, Wi-Fi, and LAN/WAN technologies.
• Solid practical knowledge of cybersecurity operations focusing on identity and access management, endpoint protection/EDR, MFA, phishing prevention, and incident response.

Personal Attributes

• Self-motivated and comfortable managing ambiguity, setting standards, and founding IT programs independently.
• Strong analytical abilities coupled with a security-conscious and risk-aware mindset.
• Forward-thinking approach to applying AI tools to enhance productivity and reduce repetitive tasks.
• Excellent communication skills capable of explaining technical concepts to non-technical audiences.
• Ability to balance IT service delivery priorities with proactive security measures.

Preferred but Not Essential

• Industry certifications such as CompTIA Security+, Network+, A+, CISSP, CISM, CEH, SANS/GIAC, or vendor-specific certifications from Apple, Microsoft, or Google.
• Experience managing EDR or Security Information and Event Management (SIEM) solutions independently, including tools like SentinelOne, CrowdStrike, Splunk, or Microsoft Sentinel.
• Knowledge and application of cybersecurity frameworks like MITRE ATT&CK, STRIDE, NIST CSF, CIS Controls, and experience with SIEM platforms.
• Exposure to cloud security practices on AWS, Azure, or Google Cloud Platform involving workload, identity, and configuration security.
• Experience as the inaugural or sole IT/security professional within a growing company.

Compensation and Benefits

• Competitive salary with performance-linked review mechanisms to ensure fair, consistent pay increases based on individual impact and business success, with a salary range between $90,000 and $110,000 CAD annually.
• Comprehensive extended health, dental, and vision coverage.
• Additional Health Spending Account and Lifestyle Spending Account to support personal well-being and interests.
• Generous time-off policies including vacation, personal days, and an annual four-week remote work program.
• Employee discounts available with tentree, the sister company.
• Flexible hybrid work model promoting collaboration and focused productivity.

Diversity and Equal Opportunity

veritree is dedicated to creating a diverse workforce and inclusive work environment, making employment decisions based solely on qualifications, merit, and business requirements without discrimination.