ON - RQ07079 - Technology Architect - Senior

S M Software Solutions Inc - 7 Jobs
Toronto, ON
Full-time
Executive
Posted 14 days ago
We would like to present to you a new job opportunity and I think you may find it interesting.
If you are interested kindly send the following documents to [email protected] by Monday, May06, at 2:00 PM ESTif that interests you and matches your profile.
Without mandatory documents, we cannot submit a candidate.
  1. Updated Resume in word format (Mandatory)
  2. Expected hourly rate (Mandatory)

Job Title:RQ07079 - Technology Architect - Senior
Client:Ministry of Education
Work Location: 777 Bay St, Toronto, Ontario,Hybrid
Estimated Start Date: 2024-04-18
Estimated End Date: 2024-08-31
#Business Days:61.00
Extension: Probable after the initial mandate
Hours per day or Week: 7.25 hours per day
Security Level:CRJMC
Must Haves
Cyber Security and Network Security
·4+ years hands-on experience with cyber security, network security and network protection solutions and technologies – preferably for Ontario K-12 school boards, including:
o Next-generation cyber security technologies leveraging artificial intelligence (AI) and machine learning (ML)
o Security Information and Event Management (SIEM) including Microsoft Sentinel, Splunk, AlienVault and FortiSiem
o Endpoint protection (EPP), Endpoint detection and response (EDR), Extended Detection and Response (XDR) and other endpoint security solutions
o Identity Management (IdM) and identity security
o Incident Management (IM)
·4+ years' hands-on experience with authentication solutions and technologies – preferably for Ontario K-12 school boards, including:
·2+ years demonstrated hands-on experience providing security operations center (SOC) troubleshooting, support, industry research, products reviews and automation including SOC technologies, services, and equipment, but not limited to:
Network Technology
·2+ years' hands-on experience with software-defined networking (SDN, SD-WAN), in particular, Fortinet, Meraki, Palo Alto, and Aruba – preferably for Ontario K-12 school boards
·2+ years' hands-on experience in data monitoring and management systems, in particular, SolarWinds, FortiManager, and Panorama – preferably for Ontario K-12 school boards
Coordination Skills and Experience
Strong communication skills as demonstrated through:
·3+ years' experience in preparing written materials (e.g., status reports, recommendations, briefing notes)
·3+ years' coordinating complex technical work with multiple IT teams, internal and external to the Ministry
Industry Certifications / Relevant Degrees
·Cyber security certification (e.g. CEH, CISSP or CISM)
Nice-to-have
Public Sector Experience
·4+ years' hands-on experience working with Ontario K-12 school boards, in particular with school board networks and network security
Description
The Senior Technology Architect, role requires extensive knowledge of network connectivity, network security, cyber security and internet technologies with demonstrated hands-on experience analyzing, configuring, implementing, and troubleshooting network, network security and cyber security solutions for the Ontario K-12 school board environment. This resource is responsible for, but not limited to:
·Providing subject matter expertise, configuration, troubleshooting, training, and implementation guidance with cyber security, network security and network protection solutions, including:
o Next-generation cyber security technologies leveraging automation, artificial intelligence (AI) and machine learning (ML)
o Endpoint security solutions - Endpoint protection (EPP), Endpoint detection and response (EDR), and Extended Detection and Response (XDR)
o Cloud-based cyber security solutions, Secure Service Edge (SSE) / Secure Access Service Edge (SASE) including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero-Trust Network
o Identity security solutions – such as Multi-Factor Authentication (MFA), Passkey, Identity Management (IdM), and Privileged Access Management (PAM)
o Advanced intrusion prevention systems (IPS) and intrusion detection systems (IDS)
o Network access control
o Incident Response and Incident Management (IR and IM) systems
o Automated vulnerability and patching
o Penetration testing and automated Red Teaming
o User and Entity Behaviour Analytics (UEBA)
o Distributed denial of service (DDoS) protection
o Operation Technology (OT) security
·Providing hands-on subject matter expertise troubleshooting and securing software-defined networking (SDN) technology including:
o Software-defined wide area network (SD-WAN) including Fortinet, Cisco Meraki, Palo Alto, Fat Pipe, etc.
o Emerging SD-Edge such as VMware VeloCloud, Silver Peak, etc
·Providing subject matter expertise in the development and delivery of technical training courses on next-generation cyber security solutions, secure networking solutions, and various security products to support boards' cyber resilience efforts
·Troubleshooting, providing analysis, and recommending solutions on complex cyber security and network security issues
·Performing vulnerability scanning and penetration testing including activities such as preparing test plans, completing the testing analysis, and risk assessments to ensure sound network and security architecture
·Staying abreast of the ever-evolving cyber threat landscape to provide subject matter expertise, guidance and advice on tactical and operational cyber security and network security practices
·Providing subject matter expertise, analysis, configuration, troubleshooting, and implementation guidance with security operations centre (SOC) technologies, including:
o Security Information and Event Management (SIEM)
o Security Orchestration, Automation and Response (SOAR)
o Threat Intelligence
o SASE
o SolarWinds NetFlow Traffic Analyzer
o Network Performance Monitor (NPM) and Network Configuration Management (NCM) Tools
·Providing subject matter expertise, analysis, configuration, troubleshooting, training, and implementation guidance with identity security and authentication solutions and technologies for:
o Password-based and passwordless authentication
o MFA
o Certificate-based authentication
·Creating/updating detailed system documentation and technical specifications various solutions and architecture, including cyber security, network security and network protection solutions, and SOC solutions
·Assessing new and emerging cyber security solutions and technology trends and industry analysis, including, but not limited to wireless network security practices including authentication and edge security
·Presenting to various stakeholders, as needed
·Provide status and project status reports on other deliverables assigned.
·Deliver on other duties as assigned.
This work involves working in close partnership with various government departments, the K-12 education sector, telecommunications providers and network and cyber security technology vendors to develop tailored approaches and implementation plans.
The manager may assign school board-related work for other initiatives, as required.
Experience and Skill Set Requirements
Cyber Security and Network Security – 50%
·5+ years' experience in network security on advanced SD networks – preferably for Ontario K-12 school boards
·4+ years hands-on experience with cyber security, network security and network protection solutions and technologies – preferably for Ontario K-12 school boards, including:
o Next-generation cyber security technologies leveraging automation, artificial intelligence (AI) and machine learning (ML)
o Next-generation firewalls (specifically Fortinet, Meraki, Palo Alto),
o Network access control (e.g., HPE Aruba ClearPass, FortiNAC),
o Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) including Microsoft Sentinel, Splunk, Google Chronicle, and FortiSIEM
o Endpoint security solutions - Endpoint protection (EPP), Endpoint detection and response (EDR), Extended Detection and Response (XDR)
o Cloud-based cyber security solutions such as Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero-Trust Network access as available SASE (such as Zscaler, Netskope, Cisco Umbrella, etc.),
o Distributed denial of service (DDoS) protection,
o Advanced intrusion prevention systems (IPS), and intrusion detection systems (IDS)
o Identity Management (IdM), Privileged Access Management and other identity security solutions
o Automated patching solutions
o Incident Response (IR) and Incident Management (IM)
o Operation Technology (OT) security