Senior Systems & Network Engineer (L3) - Hybrid

Our client, a well-established, boutique MSP serving healthcare, transportation & professional services clients across Southern Ontario, is seeking a Senior Systems & Network Engineer. This key position serves as the primary engineer for the London, ON client base.

Why This Role Is Different

Most L3 roles at larger MSPs mean deep specialization in one lane, a long escalation chain, and someone else making the interesting decisions. This isn't that.

Our client's environments are genuinely complex — Cisco HyperFlex, ISE with SGT enforcement, CMMC Level 2 programs, M365 E5 security stacks, and FortiGate HA clusters — and they operate with a small, senior team. That means you'll have real ownership across the full stack, direct relationships with clients who respect your expertise, and meaningful input into how they build and operate things.

If you're the kind of engineer who reads the release notes, has opinions about network segmentation design, and gets satisfaction from closing a gnarly ticket nobody else could crack — this role was written for you.

What You'll Own

Infrastructure & Virtualization

You'll be the primary engineer on their VMware ESXi/vCenter and Cisco HyperFlex environments — handling resource optimization, VM networking, HA troubleshooting, and storage operations. On the Windows side, you'll manage Server 2019/2022, Active Directory, DNS/DHCP, and GPO across client environments, along with SQL Server health monitoring, AlwaysOn availability groups, backup validation, and index maintenance. You'll also support their RDS/RemoteApp environments.

Networking & Security

You'll take ownership of Cisco Catalyst switching across client sites — VLANs, trunks, EtherChannel, port security — and support the Cisco WLC3504 wireless infrastructure. On the security side, you'll manage FortiGate HA firewall clusters including VPN tunnels, policy rules, and NAT configurations. You'll also be a primary resource on Cisco ISE: SGT troubleshooting, profiling, RADIUS/TACACS operations, and supporting zero-trust segmentation initiatives.

Microsoft Cloud & Identity

You'll manage M365 E5 environments including Defender XDR, Sentinel, Purview, and Intune — handling Conditional Access policy design, MFA enforcement, device compliance, and identity hardening. Hybrid identity work includes Entra ID Connect, ADFS, and Duo MFA integration.

Security & Compliance

You'll play a hands-on role in their CMMC Level 2 programs: implementing controls, triaging and remediating Nessus findings, supporting audit evidence collection, and maintaining logging and monitoring through Sentinel or Splunk.

Day-to-Day Operations

Tickets flow through Autotask PSA. You'll handle Tier 2/3 escalations, build and maintain technical documentation and SOPs, produce Visio network diagrams, and participate in a light on-call rotation covering escalations only — typically a low-volume commitment with clear runbooks.

What Our Client is Looking For

• 5–10+ years in an MSP or enterprise infrastructure role
• You are genuinely comfortable working across the full stack without needing someone to hand you a playbook
• Strong hands-on experience with VMware ESXi and vCenter, Cisco Catalyst switching, FortiGate firewalls, Windows Server and Active Directory, M365 administration with a security focus, and NAC platforms — Cisco ISE preferred, but ClearPass or equivalent experience transfers. SQL Server administration familiarity rounds out the profile
• You write good documentation without being told to. You communicate clearly with both technical peers and non-technical clients. You own your work.
• You're dedicated to this organization and supporting its clients to the best of your ability.

Bonus Points

• Experience with Cisco HyperFlex, warehouse or OT network segmentation, or CMMC/NIST 800-171 compliance programs will be immediately useful here. Certifications — Cisco CCNP, Microsoft AZ-104/AZ-305, Fortinet NSE4/5 — are a strong signal but not a gate. Prior MSP experience with Autotask is a nice head start.

This job has been posted due to a vacancy within our client company.

In accordance with the Employment Standards Act’s (ESA) transparency requirements, Shadrach Consulting will provide a status update only to those candidates who are formally interviewed (this does not include pre-screening) by us or by our client within 45 days of the date of the last interview.

We are proud to support the full inclusion of persons with disabilities as set out in the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act, 2005. We are committed to ensuring the workplace is free from discrimination. During our hiring process, we will notify job applicants that accommodations are available upon request. If a selected job applicant requests accommodation, we will consult with the individual and provide or arrange for the appropriate accommodation taking into account the applicant’s disability-related needs.

Job Types: Full-time, Permanent

Pay: $115,000.00-$140,000.00 per year

Application question(s):

• Are you an L3 Systems & Network Engineer?

Experience

• working across full stack in MSP role : 5 years (required)
• VMware ESXi and vCenter, Cisco Catalyst switching: 5 years (required)

Location:

• Strathroy, ON (preferred)

Work Location: Hybrid remote in Strathroy, ON