Manager, Infrastructure & Security

• Serve as the senior technical lead and escalation point for infrastructure, cloud, networking, identity, endpoint, and cybersecurity issues.
• Design, configure, administer, and troubleshoot critical platforms directly, particularly for high-risk, complex, or time-sensitive work.
• Review and approve architectures, configurations, change plans, and scripts produced by vendor resources and consultants.
• Develop automation, scripts, and technical standards that improve reliability, security, and operational efficiency.
• Decide which work to perform directly and which to delegate, while maintaining oversight of all work in scope.

• Own the operational health of Spark Power's hybrid environment, including on-premises systems, Microsoft Azure, Microsoft 365, networking, storage, identity, and endpoints.
• Manage availability, capacity, patching, upgrades, lifecycle, and technical debt, and report on availability, backup success, and recovery testing.
• Deliver improvements in cloud adoption, consolidation, and cost optimization.
• Maintain backup, recovery, and disaster recovery capabilities, and test them regularly.
• Maintain architecture diagrams, inventories, configuration records, and operational procedures.

• Lead Spark Power's operational cybersecurity program across prevention, detection, response, and recovery.
• Serve as Spark Power's primary contact for the outsourced Security Operations Centre (SOC), reviewing escalated alerts and validating findings.
• Manage SOC service performance, including escalation procedures, response times, detection coverage and tuning, and reporting.
• Administer and tune security technologies and controls, including Microsoft Defender, Conditional Access, MFA, endpoint and email security, vulnerability management, and privileged access.
• Develop and maintain cybersecurity standards, procedures, and playbooks, and support enforcement of Spark Power's cybersecurity policies.
• Drive and report on vulnerability remediation, patch compliance, system hardening, access reviews, penetration testing, and phishing simulations.
• Assess third-party technology risk, including security due diligence, control reviews, and contractual security requirements.
• Monitor emerging threats, recommend risk-based control improvements, and support IT governance, audit, and compliance activities.

• Act as Spark Power's first point of contact for suspected breaches and security incidents, assessing impact, setting response priorities, and managing the SOC and service providers through containment, eradication, and recovery.
• Lead the response to major infrastructure outages and incidents, providing both coordination and direct technical support, and escalating to the Director, Information Technology, Legal, and business leaders as appropriate.
• Lead root cause analysis, post-incident reviews, and corrective actions.
• Apply ITIL-aligned incident, problem, change, release, and configuration management practices, ensuring planned changes include appropriate testing, rollback, and communication.
• Maintain runbooks and incident response procedures, and participate in after-hours support for major incidents and planned changes.

• Manage the day-to-day work of full-time and part-time vendor resources, prioritizing their efforts across support, incidents, projects, and security remediation.
• Set clear deliverables, priorities, and escalation paths, and hold vendor resources accountable for quality and timeliness.
• Provide coaching and feedback and ensure work delivered by vendor resources is documented and transferred to Spark Power.
• Manage relationships and service performance for managed service providers, security partners, telecommunications providers, and technology vendors, and drive corrective action when commitments are not met.
• Review statements of work, support procurement, licensing, and contract renewals, and provide technical input to IT budgets.

• Plan and lead infrastructure, cloud, and cybersecurity projects, including acquisitions, integrations, and separation activities, from requirements and solution evaluation through implementation and transition to operations, contributing hands-on throughout.
• Lead cross-functional teams spanning IT, business units, vendors, and consultants, building alignment on priorities, standards, and security requirements.
• Translate technical risk into clear business impacts, options, costs, and recommendations for business and technology leaders.

• Hands-on expertise with Microsoft Azure, Microsoft 365, Windows Server, Active Directory, Entra ID, virtualization, storage, backup, and disaster recovery
• Enterprise networking, including routing, switching, WAN, LAN, WLAN, VPN, segmentation, DNS, DHCP, and firewall administration.
• Cybersecurity operations, including Microsoft Defender, SIEM, endpoint and email security, vulnerability management, Conditional Access, MFA, and privileged access.
• Security incident triage, containment, eradication, and recovery.
• PowerShell scripting, infrastructure automation, monitoring, alerting, and log analysis.
• ITIL-aligned incident, problem, change, release, and configuration management practices.
• A builder mindset and resourcefulness, creating practical solutions and processes where none exist.
• Ability to plan ahead, anticipating capacity, lifecycle, security, and resourcing needs and scheduling work before issues become urgent.
• Proactive, clear written and verbal communication, keeping stakeholders informed of risks, changes, and incidents, and explaining technical options to non-technical audiences.
• 10+ years of progressive experience in infrastructure, cloud, networking, cybersecurity, or technology operations, including substantial hands-on administration and engineering.
• Demonstrated experience as a senior technical lead or player-coach, managing full-time and part-time vendor resources and managed service providers.
• Demonstrated experience leading the response to security incidents in partnership with an outsourced SOC or managed security provider.
• Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related discipline, or an equivalent combination of education and experience.
• Experience in a multi-site environment, with a strong understanding of business continuity, operational resilience, and third-party risk.
• Availability for occasional travel to Spark Power offices and operating locations, and for after-hours support during major incidents or planned changes.
• Microsoft Azure Administrator, Azure Solutions Architect, or Cybersecurity Architect certification.
• CISSP, CISM, CCSP, or comparable, with Security+ considered an asset.
• ITIL Foundation or higher, and CCNA, CCNP, or an equivalent networking certification.

Spark Power is the leading independent provider of end-to-end electrical services and operations and maintenance services to the industrial, utility, and renewable asset markets in North America. We work to earn the right to be our customers’ Trusted Partner in Power™. Our highly skilled and dedicated people, located in the communities we serve, combined with our knowledge of the power industry, technology expertise, and commitment to safety, ensures we deliver the right solutions that keep our customers’ operations up and running today and better equipped for tomorrow.

Spark Power welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.