Sr. IT System Administrator

Propel (TSX: PRL) is the fintech company building a new world of financial opportunity by facilitating access to credit for consumers underserved by traditional financial institutions. Through its AI-driven platform, Propel evaluates customers in a more comprehensive way than traditional credit scores can. Our revolutionary fintech platform has already helped consumers access over one million loans and lines of credit and over one billion dollars in credit.

To build a new world of opportunity we bring together the brightest talent to help us build opportunities. We are entrepreneurs and believe in measuring success through results and growing within; talent and hard work never goes unnoticed. At Propel, we are here to change the way employees, customers and shareholders succeed together.

We are a team of passionate entrepreneurs, who foster curiosity and growth in our employees. Our culture is why we have been so successful and why our employees choose Propel to build their careers. It is also why we are one of North America’s fastest growing companies and a Best Place to Work.

Join us as we change the way employees, customers and shareholders succeed together.

About You:

You thrive in a vibrant, entrepreneurial organization where your ideas are valued. You are motivated by goals, a self-starter, and enjoy wearing multiple hats in a fast-growing fintech environment.

The Senior IT System Administrator is a senior technical owner within Propel IT, responsible for maintaining reliable, secure, documented, and healthy infrastructure, cloud services, endpoint platforms, identity services, and security-support processes. This hands‑on role requires strong troubleshooting, disciplined change management, and clear communication with IT, Information Security, P&C, business stakeholders, and vendors. As an L3 escalation point, this person owns assigned systems and issues end to end, drives resolution, communicates proactively, and coaches junior team members through standards and practical troubleshooting guidance.

Responsibilities

Infrastructure, Cloud, and Network Operations

• Administer,monitor, and improve Azure infrastructure, Entra ID, Azure networking, virtual machines, storage, resource health, access paths, and related cloud services
• Manage and support Windows Server, AD DS, DNS, GPO, DFS, IIS, VMware, backup/recovery dependencies, and other core infrastructure services as assigned
• Coordinate with vendors/MSPs for office network,firewall, switching, Wi-Fi, ISP, Azure, Cloudflare, and infrastructure work whileretaininginternal ownership of follow-up and closure
• Support Cloudflare WARP, Zero Trust tunnels, access policies, network routing dependencies, and approved remote/private accesspaths in coordination with Security and system owners
• Monitor system health, capacity, availability, backup posture, and configuration drift;identifyissues before they become recurring support problems

Endpoint, Patch, and Device Management

• Own day-to-day administration and health of endpoint management platforms such as Microsoft Intune, Microsoft Defender for Endpoint, KACE,Jamf, and any future macOS MDM replacement such as IRU/Kandji-style tooling
• Deploy,monitor, andvalidateoperating system patches, application updates, configuration profiles, security baselines, compliance policies, and endpoint remediation scripts
• Support Windows Autopilot, Intune enrollment,Jamfenrollment, device rebuilds, endpoint readiness checks, BitLocker/FileVault, LAPS,ScreenConnect, Cloudflare WARP, KACE, and Defender onboarding
• Maintainaccuraterunbooks for device onboarding, rebuild, patching, quarantine, remediation, and return-to-service workflows

Security Operations and Incident Support

• Review, triage, and elevate security alerts from Microsoft Defender, Rapid7, KACE, Intune, Entra sign-in logs, Cloudflare, and related systems according to Propel security and compliance processes
• Work with Information Security on suspicious activity, compromised-device investigations, risky sign-ins, malware alerts, phishing-related endpoint activity, and data-loss or DLP-triggered events
• Gather and preserve evidence through approved tooling, including Defender investigation packages, Live Response where authorized, full scan results, logs, timelines, affected-device scope, and remediation evidence
• Support containment actions when approved, including device isolation, session revocation, access blocking, password/MFA recovery actions, device wipe/rebuild, and controlled return-to-service validation
• Document incident actions, approvals, evidence, and recovery steps in Jira or the approved security record without exposing unnecessary sensitive details to requester-facing comments

Microsoft 365, Identity,