Network LAN/Security Specialist

We are seeking a highly skilled and dedicated Network LAN/Security Specialist to join our team in Toronto. In this role, you will apply advanced technical expertise to provide day-to-day operational support (both remote and on-site) and guide critical communication, distribution infrastructure, and network security upgrade projects.

The successful candidate will be involved across the entire project lifecycle—from requirement gathering, planning, and design, to implementation, testing, commissioning, auditing, and maintaining documentation. This position requires working 7 hours per day, 5 days per week during normal business hours with occasional after-hours work for network changes and upgrades.



Advantages
Extended Impact: Opportunity for a 6-month contract extension.

Cutting-Edge Projects: Direct involvement in large-scale Data Center architecture upgrades, network lifecycle replacements, and critical infrastructure security enhancements.

Diverse Technical Environment: Work with advanced technologies including Cisco Nexus Spine-Leaf/VXLAN, Cisco ACI, Firepower, Splunk, and Cisco ISE.

Hybrid Operations: A balanced mix of hands-on field verification, architectural planning, and remote support.



Responsibilities
Operations & Performance Management
Assist in the development of business requirements, technical requirements, and comprehensive network planning.

Execute configuration, connectivity, test planning, and cutover activities while ensuring project deliverables meet strict timelines and standards.

Perform ongoing, proactive network health assessments and performance analyses to manage operations and optimize traffic behavior.

Identify traffic patterns and behavioral trends for potential malicious network traffic, and develop automated scripts for wireless security assessments.

Provide operational support for complex wireless network deployments and document architecture best practices.

Install, configure, administer, and support SolarWinds NPM, Splunk Network Management, Firepower, Cisco ISE, and Cisco Prime.

Projects, Planning & Architecture
Perform architectural planning, design, configuration, and integration support for complex network design and performance engineering projects.

Gather business constraints, evaluate existing field conditions, develop technical design documents/drawings, and create as-built network blueprints.

Prepare network design reports, technical memos, and budgetary/business case analyses for system enhancements.

Provide technical expertise for network performance monitoring tools, WLAN, WWAN, Unified Communications, Firewalls/IPS, and SIEM infrastructure.

Review and provide strategic recommendations for VPLS, IPVPN WAN, and Disaster Recovery site network services design.

Continuously monitor, develop, and implement cybersecurity safeguards (including Data Diodes and network segmentation) to protect critical Industrial Control Systems (ICS) infrastructure.

Documentation & Deliverables
Author and maintain high-quality network documentation, including standards, operational processes, security protocols, topology maps, and inventory.

Prepare Request for Proposal (RFP), Request for Quotation (RFQ), and Request for Information (RFI) documentation, and evaluate vendor responses.

Administration, Tools & Safety
Represent the organization effectively during interactions across various local facilities.

Safely perform field verification, equipment installation, and commissioning outside in various weather and industrial conditions.

Provide personal vehicle transportation for travel within the GTA, along with necessary hand/power tools (e.g., drills, screwdrivers) and wireless survey equipment.

Provide and utilize personal protective equipment (PPE) including hard hats, safety shoes, ear protection, safety vests, and safety glasses.



Qualifications
Education & Certifications
Education: Post-secondary education in Computer Science, Information Technology, or a related discipline.

Core Certification: Must hold a Cisco Certified Internetwork Expert (CCIE) certification in good standing (verification via the Cisco Certification Tracking System is required).

Security & Advanced Credentials: Must possess at least one additional valid designation in good standing: CCNP Security, CCIE R&S, CCIE Wireless, or ISC2 CISSP.

Professional Experience
Industry Experience: Proven experience working within an Industrial Control Systems (ICS) environment, manufacturing, or critical Operational Technology (OT) sectors (ideally within Water/Wastewater treatment).

Cisco Enterprise: Minimum of 10 years of experience in Cisco Enterprise design, configuration, implementation, and testing across Data Center and Campus networks.

Identity & Access Management: Demonstrated experience designing, testing, implementing, and supporting Cisco Identity Services Engine (ISE) for Device Management and Network Access Control (NAC).

Data Center Architecture: Proven experience planning, designing, and implementing Cisco Nexus platforms in Spine-Leaf / VXLAN topologies.

Technical Capabilities
Core Protocols: Extensive knowledge of routing protocols (OSPF, EIGRP, BGP), transport protocols (TCP/IP, UDP), Spanning Tree, VLAN trunking, EtherChannel, NAT, IPSec, GETVPN, SNMP, VSS, 802.1x, SSH, ACL, HSRP, NTP, QoS/CoS, Radius/TACACS+, MPLS, HSPA/HSPA+, and VRFs.

Data Center & Cloud Infrastructure: Deep understanding of enterprise networking implications on business decisions, including VXLAN for Data Center Disaster Recovery, the complete Nexus product line, Cisco ACI Architecture, and Cisco Nexus Dashboard.

Network Security: Practical experience with technology integration and support for Cisco ASA/FP Firewalls (Active/Active and Active/Standby), IPS, and Firepower Management Center.

Penetration Testing & Monitoring: Robust knowledge of penetration testing tools and SIEM platforms (e.g., Splunk), alongside Cisco Prime Element Management and Network Monitoring systems.

Job Requirements
Driver's License: Must possess a valid Province of Ontario Class "G" Driver’s License and have regular access to a reliable vehicle (submission of a driver's license copy is required).

Physical Capability: Must be physically capable of performing duties outdoors and within industrial facility environments under varying weather conditions.

Flexibility: Must be available to work after-hours, including weekends and statutory holidays, to accommodate network changes and emergency upgrades.



Summary
If you're interested in the "Network LAN/Security Specialist" role based in Toronto, we encourage you to apply online at www.randstad.ca. Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.