It Infrastructure & Security Engineer

This is a mid-level, hands-on infrastructure role focused on technical delivery. It is not a strategy or people-leadership position.JD Sports Canada is growing quickly. We operate 55 stores today and are on track to reach 90 by 2029, supporting roughly 2,500 employees across the country. That growth is putting real pressure on our infrastructure and security posture, and we’re looking for an engineer to help build, improve, and maintain the platforms that support it.Sitting within our wider IT function, you’ll work alongside our support, DevOps, and new-store-opening teams. You’ll take ownership of delivering network, endpoint, and security improvements across the estate - including Meraki in every store, Intune and Entra ID across our devices, and a significant expansion of our security-monitoring capabilities.You’ll report directly to the Head of IT and contribute to the designs and standards you’ll be responsible for implementing. Support and escalation will be available, and you won’t be expected to solve everything alone. However, you will be trusted to own delivery and make a visible, measurable improvement to our technology estate.This role offers broad exposure, modern tooling, direct access to the person making the decisions, and a team small enough that your work will be noticed. It’s a strong opportunity for an established engineer who is ready to take greater ownership while continuing to develop their technical depth.What you’ll be working on in year one
Expanding our centralised logging and security monitoring coverage across the store estate, cloud, and SaaS platformsStandardising and hardening
Cisco Meraki
firewall, SD-WAN, and wireless configuration across all sitesDeploying and tuning modern email and endpoint security platformsMaturing
Intune
compliance policies, application deployment, and patching across our device fleetAutomating the manual operational work our team is still doing by handSupporting network build and turn-up for new store openingsResponsibilities
Security platform delivery
Onboard and maintain log sources into our security monitoring platform, including agent, syslog, and API-based collectionDeploy, configure, and tune email and endpoint security toolingImplement remediation for audit and vulnerability findings against agreed timelinesSupport evidence collection for PCI DSS and internal audit activityImplement and standardise Meraki MX, MS, and MR configuration across the store estateBuild and turn up network infrastructure for new store openingsTroubleshoot escalated connectivity, performance, and WAN resilience issuesMaintain network documentation and configuration baselinesOwn day-to-day Intune configuration: compliance policies, app deployment, OS patchingImplement
Entra ID
and conditional access configuration to defined standardsMaintain device lifecycle and asset management toolingAutomation & documentation
Automate recurring operational tasks using PowerShell, Graph API, and platform APIsProduce runbooks and as-built documentation for everything you deployKeep configuration standards current as the estate growsAll work is delivered against designs and standards set with the Head of IT.What we’re looking for
3-5 years in a hands-on infrastructure, systems, or security engineering roleSolid working experience with
Cisco Meraki
in a multi-site environment (MX, MS, MR)Solid working experience with
Microsoft Intune
and
Entra ID : compliance policies, conditional access, app deploymentWorking knowledge of the
Microsoft 365 security stack, including DefenderScripting for automation - PowerShell primarily, Python usefulExperience delivering rollouts across multiple sites with structured change managementExposure to SIEM or centralised logging platforms - Splunk, Sentinel, or similarEmail security platform experienceRetail, hospitality, or another distributed multi-site environmentPCI DSS exposureGraph API, Terraform, or CI/CD familiarityCertifications such as Meraki CMNA, MS-102, SC-300, or Security+You won't have all of this. If you're strong on Meraki and Intune and you learn fast, we'll back you on the rest.How you work (we care about this as much as the technical list):
You finish what you start and document it without being chasedYou test before you roll out, and you have a rollback planYou escal
(eps omitted to keep answer short)
#J-18808-Ljbffr