Linux Systems Administrator

About The Embassy

The Embassy is a Canadian, Oscar-nominated production house, specializing in live-action production, post-production, and animation for feature films, television, and commercials. We are an independent creative studio with expertise in visual effects and production. Located in the heart of Vancouver's Digital District, we work with global production companies, agencies, and brands across film, television, and advertising.

Award-Winning

We have crafted award-winning visual effects for some of the world's most recognized brands and film franchises. Our work has received accolades including Oscar nominations and numerous VES, Cannes, D&AD, Clio, and ADCC awards.

About You

You are an experienced Linux Systems Administrator with a strong background in deploying and securing self-hosted collaboration and communications platforms. You are comfortable owning a project from planning through implementation, while collaborating closely with the IT team and documenting your work for long-term support.

You understand Linux infrastructure, networking, DNS, email deliverability, containerized deployments, and security best practices. You're equally comfortable troubleshooting complex technical issues and explaining your solutions clearly to internal teams.

Your Role

The Embassy is seeking an experienced contractor to deploy a fully self-hosted communications platform on our on-premises Linux infrastructure. You will work alongside our internal IT team to deliver a production-ready solution that includes email, team chat, and video conferencing.

The engagement is project-based with milestone deliverables and includes post-launch support.

What You'll Deploy:

• Email: Mailcow (Postfix/Dovecot) with complete DNS configuration, including SPF, DKIM, DMARC, and MX records
• Team Chat: Rocket.Chat or Mattermost (we would like your recommendation based on our requirements)
• Video Conferencing: Jitsi Meet, self-hosted and integrated with the chat platform
• SSL/TLS certificates using Let's Encrypt or an equivalent solution
  
• Reverse proxy configuration using Nginx or Traefik for unified routing
• Transition our legacy LDAP directory services to Active Directory
  

The preferred deployment approach is Docker-based on an Ubuntu Linux server hosted on-premises.

Responsibilities

• Audit the existing Linux server environment and confirm readiness, including operating system, networking, storage, and resource requirements
• Deploy and configure the email, chat, and video conferencing platforms
• Configure DNS records and ensure reliable mail delivery using SPF, DKIM, DMARC, and MX records
• Create and configure user accounts for 50+ staff members
• Develop a documented onboarding process for future users
• Configure backup and recovery procedures for all deployed services
• Implement security best practices, including firewall configuration, Fail2Ban, mail rate limiting, and service hardening
• Produce comprehensive technical documentation for handoff to our internal IT Manager
• Provide up to 30 days of post-deployment support with reasonable asynchronous response times

Your Qualifications

• 3+ years of demonstrated experience deploying Mailcow or comparable self-hosted mail platforms in production environments
• Experience deploying Rocket.Chat and/or Mattermost for business teams
• Experience deploying and configuring Jitsi Meet in production environments
• Strong Linux system administration experience (Ubuntu preferred)
  
• Expertise with Docker and Docker Compose
  
• Strong understanding of DNS, SSL/TLS certificates, reverse proxies, and email deliverability
  
• Experience securing Linux servers and implementing security best practices
  
• Ability to work collaboratively with an internal IT team
  
• Strong documentation and communication skills
  
• Experience delivering infrastructure projects independently and on schedule

We Offer

• Flexible hybrid/remote work environment
• Strong emphasis on work-life balance with standard working hours of 9am–5pm
• Paid lunch break
• Paid Sick days from day one
• Group benefits for eligible employees
• Employee Assistance Program for eligible employees
• Paid Float Days for eligible employees
• Summer and Christmas parties
• Centrally located office space for those who enjoy in-person collaboration
• Fully stocked kitchen with complimentary snacks and drinks
• Friday Happy Hour - join the team every Friday at 4pm, in person or remotely, for a casual wind-down chat over drinks
  

The Embassy Visual Effects Inc. is an equal-opportunity employer.

Ready to grow your career with a unique VFX studio? Apply today with your resume and demo reel!

Please note: At this time, we are only accepting applications from those who are legally eligible to work in Canada and are currently BC residents or willing to establish BC residency for the duration of the contract.