Who We Are:

At 4Refuel we believe that our people are our greatest asset. We're dedicated to fostering a vibrant workplace culture where every employee feels valued, engaged, and inspired to contribute their best. We are proud to have achieved an employee engagement score of 93%, paired with our superior safety culture, 4Refuel was recently awarded a prestigious WSIB honor, winning 'Canada's Best Health & Safety Culture'. Among other notable achievements, 4Refuel has also been recognized as: Great Place to Work, Canada's Safest Employers, and Best Workplaces for Women from a Great Place to Work Canada.

As Canada's largest and most experienced mobile refueller, 4Refuel has dominated the direct-to-equipment market for over 25 years and ranks among the country's largest fuel buyers.

What You Will Do:

We are looking for an experienced Identity & Systems Administrator to secure and optimize our hybrid identity environment, covering both on-premises Active Directory (AD) and Azure Entra ID (Azure AD) and the Microsoft 365 tenant. You will own identity governance, Conditional Access, SaaS integrations, and Microsoft 365 security controls. (MDR) coordination

You Will Be Responsible For:

On-Premises Active Directory

• Maintain domain controllers, DNS integration, and replication health.
• Design and manage OUs, Group Policies, delegated administration, and backup/restore procedures.

Hybrid Identity & Access Management

• Operate and troubleshoot directory sync/health (e.g., Azure AD Connect).
• Design, implement, and maintain Conditional Access, MFA, and Privileged Identity Management in Azure Entra ID.

User & Access Lifecycle

• Use the company's directory automation platform to create, modify, and disable AD/Azure AD accounts via role-based templates and approval workflows.
• Run periodic access reviews and maintain naming conventions and delegation rules.

Microsoft 365 Security & Compliance

• Configure and manage Microsoft 365 Defender, Safe Links/Attachments, DLP, and retention across SharePoint, OneDrive, Teams, and Exchange Online.

Security Operations & Incident Response

• Ensure that AD, Entra ID, and Microsoft 365 audit logs are collected to generate actionable alerts.
• Act as Tier 3 responder for phishing, account compromise, and permission escalation incidents; lead remediation and post-mortems.

SaaS Single Sign On & Provisioning

• Implement and maintain SAML/OIDC SSO, automated user provisioning (SCIM or APIs), and routine OAuth permission reviews for third-party SaaS apps.

Automation & Reporting

• Develop PowerShell and Microsoft Graph scripts-alongside directory automation tools-to automate licence assignments, bulk updates, compliance reports, and access checks.

Required Qualifications:

• 3-5 years administering Active Directory (OUs, GPOs, replication, DNS) and Azure AD/Entra ID.
• Hands-on experience with MFA, Conditional Access, hybrid identity sync, and Microsoft 365 security/compliance features.
• Proficiency in PowerShell scripting and familiarity with Microsoft Graph API.
• Solid understanding of identity-related logging, alerting, and incident response workflows.

Preferred Certifications:

• Microsoft Certified: Identity & Access Administrator (SC 300)
• Microsoft 365 Certified: Enterprise Administrator Expert
• CompTIA CySA+ or Microsoft SC 200 (Security Operations Analyst)

4Refuel welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

We are committed to diversity at 4Refuel, to building and sustaining a diverse and inclusive workforce and as an equal opportunity employer we encourage applications from all qualified individuals. 4Refuel does not discriminate against applicants based on genders, races, national and ethnic origins, religions, ages, sexual orientation, marital and family status, and/or mental or physical disabilities

Pay: $85,000.00-$115,000.00 per year