Monitor, investigate, and escalate security incidents for Alberta post-secondary members. Use SIEM/UEBA, SOAR, and EDR tools to detect intrusions, analyze malicious indicators, apply mitigations, build detection rules, maintain playbooks and processes, report coverage gaps, and present operational metrics. Act as first point of contact for incidents, collaborate across teams, and apply cybersecurity and privacy principles throughout the incident lifecycle.

Manage and modernize a hybrid research and education infrastructure stack: deploy and operate OpenStack and public cloud resources, maintain hardware and IaC, implement Kubernetes and observability (Prometheus/Grafana/ClickHouse/Zabbix), build logging/telemetry pipelines (Vector/Fluentd/Kafka), provide Tier 3 support to members, and participate in a compensated on-call rotation.

Manage and modernize Alberta's hybrid research and education infrastructure: deploy and operate OpenStack and public cloud resources, maintain hardware and IaC, implement observability (metrics, logs, traces), build telemetry/log pipelines, use configuration management and Kubernetes, provide Tier 3 support to member organizations, and participate in an on-call rotation.