Senior Technology Architect (Network Security)

Position Overview

• Role: Senior Technology Architect (Network Security)
  
• Contract: Until October 5 2027 with possible extensions.
  
• Work Model: Hybrid (2 days onsite 3 days remote)
  
• Travel: Must be available for same-day and overnight travel within Ontario when required.
  
• Submission Deadline: July:00 PM EST
  

Position Overview

We are seeking an experienced Senior Technology Architect (Network Security) to lead the design development implementation and evolution of modern network and network security architectures supporting Ontarios K-12 education sector and the Broader Public Sector.

The successful candidate will possess extensive expertise in enterprise network architecture software-defined networking (SDN) network security Secure Access Service Edge (SASE) Zero Trust cloud security and network operations. This role will serve as the strategic bridge between technical architecture teams and executive leadership by translating complex technical concepts into clear business-focused recommendations and implementation roadmaps.

Key Responsibilities

• Lead the development maintenance and evolution of enterprise network reference architectures.
  
• Design current-state and future-state network architectures aligned with cloud identity and cybersecurity strategies.
  
• Develop implementation roadmaps for network modernization initiatives.
  
• Provide architectural guidance for:
  
• Software Defined Networking (SDN)
  
• Software Defined WAN (SD-WAN)
  
• Secure Access Service Edge (SASE)
  
• Security Service Edge (SSE)
  
• Zero Trust Network Architecture
  
• Cloud security solutions
  
• Design and support enterprise network security solutions including:
  
• Next Generation Firewalls
  
• Secure Web Gateway (SWG)
  
• Cloud Access Security Broker (CASB)
  
• Firewall-as-a-Service (FWaaS)
  
• Intrusion Detection and Prevention Systems (IDS/IPS)
  
• Distributed Denial of Service (DDoS) protection
  
• Network Access Control (NAC)
  
• Endpoint Protection Platforms (EPP)
  
• Endpoint Detection and Response (EDR)
  
• Extended Detection and Response (XDR)
  
• Provide expertise in authentication and identity management technologies including:
  
• Multi-Factor Authentication (MFA)
  
• Certificate-based authentication
  
• Passwordless authentication
  
• SAML
  
• FIDO/U2F/FIDO2
  
• Support Network Operations Centre (NOC) and Security Operations Centre (SOC) initiatives.
  
• Provide guidance on:
  
• SIEM
  
• SOAR
  
• Incident Response
  
• Incident Management
  
• Perform network analysis troubleshooting monitoring and performance optimization.
  
• Develop executive presentations technical documentation architecture diagrams and strategic recommendations.
  
• Review and validate vendor architecture proposals and implementation approaches.
  
• Deliver technical training and operational guidance to IT and security teams.
  
• Collaborate with government stakeholders school boards telecommunications providers and technology vendors.
  
• Provide regular project status updates and architecture recommendations.
  

Required Skills & Experience

NOTE:

MUST HAVE

NICE TO HAVE

Network Security 35%

5 years of experience in network security within advanced SDN environments preferably in Ontario K12 school boards.

5 years of experience with network security and network protection solutions and technologies preferably for Ontario K-12 school boards including:

o Next-generation firewalls (specifically Fortinet Meraki Palo Alto)

o Distributed Denial of Service (DDoS) protection

o Advanced Intrusion Prevention Systems (IPS)

o Network access control (e.g. HPE Aruba ClearPass FortiNAC)

o Endpoint protection and cloud-based security solutions

5 years of experience with authentication solutions and technologies including:

o Password-based authentication

o Multi-factor authentication (MFA)

o Certificate-based authentication

o Biometric authentication (e.g. Fast Identity Online (FIDO) Universal 2nd Factor (U2F) FIDO2 Google Authenticator Security Assertion Markup Language (SAML))

2 years of experience with data analysis and data visualization tools to develop network dashboards (e.g. Tableau Microsoft Power BI).

Demonstrated experience assessing and evaluating new and emerging network security technologies with pilots and proof-of-concepts.

Demonstrated experience with secure access service edge (SASE) platforms and solutions.

Excellent knowledge and exposure to IoT security issues and data-capturing mechanisms.

Network Technology 35%

5 years of experience with network infrastructure solutions and technologies (e.g. LAN/WAN VPN VLAN) and hardware (e.g. switches routers firewalls).

5 years of experience with software-defined networking (SDN) / software-defined area network (SD-WAN) technologies in particular Fortinet Meraki and Palo Alto preferably for Ontario K-12 school boards.

5 years of hands-on experience in data network and performance monitoring and management tools (e.g. SolarWinds FortiManager Panorama) preferably for Ontario K-12 school boards.

5 years of experience with traffic analysis tools data logging mechanisms and technologies (e.g. Syslog IPFix NetFlow).

5 years of experience configuring troubleshooting and administering network protocols (e.g. MPLS VPLS VLAN Trunking Protocol).

5 years of experience with machine learning tools in network data analysis and prediction.

Hands-on experience performing network load testing testing analysis performance analysis and risk assessments to ensure sound network architecture preferably for Ontario K-12 school boards.

Communications and Stakeholder Engagement 20%

5 years of experience presenting to senior and executive management and stakeholders.

5 years of experience coordinating and leading complex technical work with multiple IT teams and stakeholders.

5 years of experience preparing written materials (e.g. status reports executive reports recommendations).

Proven experience communicating complex technical concepts to non-technical audiences including executive and senior management and stakeholders.

Experience operating in advisory and/or consulting roles within complex organizations.

Public Sector Experience 5%

Familiarity with Government of Ontario standards (e.g. GO-ITS) policy and relevant legislation (e.g. Enhancing Digital Security and Trust Act 2024 (EDSTA)).

Experience working within or alongside the Broader Public Sector (education preferred).

Relevant Degrees / Industry Certifications 5%

Degree in computer science engineering or a related discipline postgraduate degree (e.g. . M.A. Adand/or Ph.D.) preferred.

Relevant industry certifications or equivalent experience.

Cyber security credentials e.g. Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Ethical Hacker (CEH) considered an asset but not mandatory.