A new requirement from one of the ministries in Ontario. Please refer to the details provided below:
We are unable to submit a candidate without below mandatory documents.

1. "Please ensure that your resume is updated and provided in Word format."

1. "To facilitate our evaluation process, please fill out the attached Skills Matrix and provide your references accordingly."

1. "We kindly request that you specify your expected hourly rate."

Job Title:RQ07078 - Applications Architect - SeniorClient:Ministry of EducationWork Location:777 Bay St., Ontario, HybridEstimated Start Date:2024-05-03Estimated End Date:2024-08-31#Business Days:50.00Extension:Probable after the initial mandateHours per day or Week: 7.25 hours per daySecurity Level:CRJMC
To check the detailed description and matrix visit our website: Click here
We're excited to invite you to join our company's WhatsApp group dedicated to for new job postings. Your insights and contributions would be incredibly valuable. Please use the link below to join: [https://chat.whatsapp.com/KUQgHKfoqxgHKheZYlK97M] We look forward to your participation!"
(NOTE: Share required documents to [email protected] by Monday, May 6, 12:00 PM ESTMust Haves

• 10+ years' knowledge and experience with cyber security, network security and network protection architectures, frameworks, and solutions, including:

• Software-defined networking (SDN) and SD-WAN (Software-defined Wide Area Network)
• Secure Access Service Edge (SASE)
• MITRE ATT&CK framework

• 10+ years hands-on experience providing subject matter expertise and leading implementation of network security and network protection solutions and technologies implementation– preferably for Ontario K-12 school boards, including:

• Next-generation cyber security technologies leveraging automation, artificial intelligence (AI) and machine learning (ML)
• Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) including Microsoft Sentinel, Splunk, Google Chronicle, and FortiSIEM
• Endpoint security solutions - Endpoint protection (EPP), Endpoint detection and response (EDR), Extended Detection and Response (XDR)
• Identity Management (IdM), Privileged Access Management and other identity security solutions
• Automated patching solutions
• Incident Response (IR) and Incident Management (IM)

• 2+ years demonstrated hands-on experience providing security operations center (SOC) design, architecture and plans including SOC technologies, services, and equipment, but not limited to:

• SIEM
• SOAR
• SASE

Network Technology

• 5+ years' hands-on experience with software-defined networking (SDN, SD-WAN, SD-Edge)
• 5+ years' hands-on experience in data and performance monitoring and management systems, in particular, SolarWinds, FortiManager, Meraki, Panorama, Wireshark – preferably for Ontario K-12 school boards

Strong communication skills as demonstrated through:

• 5+ years' experience in effectively presenting to management teams and external stakeholders
• 5+ years' coordinating complex technical work with multiple IT teams, internal and external to the Minist

Industry Certifications / Relevant Degrees

• Relevant security certification required (e.g., CISSP or CISM).
• Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science or engineering is preferred.

Nice to Haves

• Public Sector Experience

• 5+ years' hands-on experience working with Ontario K-12 school boards, in particular with school board networks and network security

Note:
This procurement will include the option to extend the end date of the contract if there are unused effort days and no change to the ceiling amount, if the need arises.
This contract will require the consultant to work up-to 3 days per week in the office and the remaining days working remotely.

• Candidate must be able to work 3 days onsite and 2 days remote

Experience and Skill Set Requirements
Cyber Security and Network Security – 40%

• 10+ years' experience in advanced SD networks and network security – preferably for Ontario K-12 school boards
• 10+ years' knowledge and experience with cyber security, network security and network protection architectures, frameworks, and solutions, including:

• Software-defined networking (SDN) and SD-WAN (Software-defined Wide Area Network)
• Secure Access Service Edge (SASE)
• MITRE ATT&CK framework
• Zero-trust architecture (ZTA)
• Cloud security architecture
• Various vendor specific architecture and frameworks (e.g., Azure Security Architecture, Google infrastructure security, AWS cloud security architecture)

• 10+ years hands-on experience providing subject matter expertise and leading implementation of network security and network protection solutions and technologies implementation– preferably for Ontario K-12 school boards, including:

• Next-generation cyber security technologies leveraging automation, artificial intelligence (AI) and machine learning (ML)
• Next-generation firewalls (specifically Fortinet, Meraki, Palo Alto),
• Network access control (e.g., HPE Aruba ClearPass, FortiNAC),
• Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) including Microsoft Sentinel, Splunk, Google Chronicle, and FortiSIEM
• Endpoint security solutions - Endpoint protection (EPP), Endpoint detection and response (EDR), Extended Detection and Response (XDR)
• Cloud-based cyber security solutions such as Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) ,firewalls, and Zero-Trust Network access as available SASE (such as Zscaler, Netskope, Cisco Umbrella, etc.),
• Distributed denial of service (DDoS) protection,
• Advanced intrusion prevention systems (IPS), and intrusion detection systems (IDS)
• Identity Management (IdM), Privileged Access Management and other identity security solutions
• Automated patching solutions
• Incident Response (IR) and Incident Management (IM)
• Operation Technology (OT) security

• 10 + years hands-on experience providing subject matter expertise and leading implementation of authentication solutions and technologies - preferably for Ontario K-12 school boards, including:

• Password-based and passwordless authentication
• Multi-factor authentication (MFA)
• Certificate-based authentication
• Biometric authentication (e.g., Fast Identity online (FIDO) Universal 2nd Factor (U2F), FIDO2, Google Authenticator, Security Assertion Markup Language (SAML))

• 2+ years demonstrated hands-on experience providing security operations center (SOC) design, architecture and plans including SOC technologies, services, and equipment, but not limited to:

• SIEM
• SOAR
• SASE

• Demonstrated hands-on experience with cyber security industry frameworks such as NIST Cyber Protection Framework and 800 series, CIS Controls v8, COBIT and ISO 27001

• Knowledge of the new draft NIST Cyber Security Framework v2.0

• Excellent knowledge of the new and emerging cyber security and network security technology trends
• Excellent knowledge and exposure to IoT security issues and data capturing mechanisms

Network Technology – 30%

• 10+ years hands-on experience with network infrastructure solutions and technologies including LAN/WAN, VPN, VXLAN, wLAN, fog computing, network function virtualization (NFV), server virtualization, cloud platforms, and hardware (servers, switches, routers, firewalls)
• 5+ years' hands-on experience with software-defined networking (SDN, SD-WAN, SD-Edge)
• 5+ years' hands-on experience with Ontario K-12 school boards' networks (WAN, LAN, Wi-Fi, internet service delivery)
• 5+ years' hands-on experience in data and performance monitoring and management systems, in particular, SolarWinds, FortiManager, Meraki, Panorama, Wireshark – preferably for Ontario K-12 school boards
• 5+ years' hands-on experience with network data traffic awareness, monitoring and analysis tools and technologies, and enterprise tools, including SolarWinds, PRTG (Paessler Router Traffic Grapher) and Wireshark Network Analyzer – preferably for Ontario K-12 school boards
• 5+ years' hands-on experience with data logging mechanisms and technologies including Syslog, IPFix, CSV, CEF and NetFlow – preferably for Ontario K-12 school boards
• Demonstrated hands-on experience with developing customized WAN and network architectures for SDN networks to address unique and specific needs
• Excellent knowledge of the new and emerging network technology trends
• Demonstrated experience assessing and evaluating new and emerging network technologies with pilots and proof-of concepts
• Experience with telecommunication technologies such as:

• Data transport technologies including fibre optic cable, coaxial cable, wireless, radio and microwave
• Next-generation data transport such as LTE Advanced, DOCSIS C3.1, and 5G
• Transmission protocols including Multiprotocol Label Switching (MPLS), Virtual Private LAN Service (VPLS), TCP/IP (Transmission Control Protocol/Internet Protocol) and tunneling

Coordination Skills and Experience – 15%
Strong communication skills as demonstrated through:

• 5+ years' experience in effectively presenting to management teams and external stakeholders
• 5+ years' experience in preparing written materials (e.g., status reports, recommendations, briefing notes)
• 5+ years' coordinating complex technical work with multiple IT teams, internal and external to the Ministry

Industry Certifications / Relevant Degrees – 10%

• Relevant network certifications or equivalent work experience
• Relevant security certification required (e.g., CISSP or CISM).
• Computer Science, engineering or other relevant degree is required.
• Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science or engineering is preferred.

Public Sector Experience – 5%

• Knowledge of Government of Ontario standards (e.g., GO-ITS) and relevant policies and legislation
• 5+ years' hands-on experience working with Ontario K-12 school boards, in particular with school board networks and network security
• Hands-on experience providing design, development and delivery of technical training courses to Ontario K-12 school boards

Description
The Senior Application Architect role requires extensive knowledge of modern network connectivity, network security, cyber security and internet technologies with demonstrated hands-on experience designing and developing modern networks, network security and cyber security solutions in the Ontario K-12 school board environment. This resource is responsible for, but not limited to:

• Providing subject matter expertise, advice, consultancy, and training with various network and cyber security architectures and framework such as:
  • Software-defined networking (SDN) and SD-WAN (Software-defined Wide Area Network)
  • Secure Access Service Edge (SASE)
  • MITRE ATT&CK framework
  • Zero-trust architecture (ZTA)
  • Cloud security architecture
  • Various vendor specific architectures and frameworks (e.g., Azure Security Architecture, Google infrastructure security, AWS cloud security architecture)
  • NIST Cyber Security Framework v2
  • CIS Controls v8
  • Security Operation (SecOps) practices
• Providing subject matter expertise, solution and architecture advice, consultancy, training and implementation guidance with cyber security, network security and network protection solutions, including:
  • Next-generation cyber security technologies leveraging automation, artificial intelligence (AI) and machine learning (ML)
  • Endpoint security solutions - Endpoint protection (EPP), Endpoint detection and response (EDR), and Extended Detection and Response (XDR)
  • Cloud-based cyber security solutions, Secure Service Edge (SSE) / SASE, including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero-Trust Network