RQ07326 - Technology Architect - Senior

Description :

TheSenior Technology Architect role requires extensive knowledge ofnetwork connectivity network security cyber security and internettechnologies with demonstrated handson experience analyzingconfiguring implementing and troubleshooting network networksecurity and cyber security solutions for the Ontario K12 schoolboard environment.

This resource is responsible for but not limitedto :

• Providing subjectmatter expertise configuration troubleshooting training andimplementation guidance with cyber security network security andnetwork protection solutionsincluding :
• Nextgenerationcyber security technologies leveraging automation artificialintelligence (AI) and machine learning(ML)
• Endpoint security solutionsEndpoint protection (EPP) Endpoint detection and response (EDR) andExtended Detection and Response(XDR)
• Cloudbased cyber securitysolutions Secure Service Edge (SSE) / Secure Access Service Edge(SASE) including Secure Web Gateway (SWG) Cloud Access SecurityBroker (CASB) and ZeroTrustNetwork
• Identity security solutionssuch as MultiFactor Authentication (MFA) Passkey IdentityManagement (IdM) and Privileged Access Management(PAM)
• Advanced intrusion preventionsystems (IPS) and intrusion detection systems(IDS)
• Network accesscontrol
• Incident Response andIncident Management (IR and IM)systems
• Automated vulnerability andpatching
• Penetration testing andautomated Red Teaming
• User andEntity Behaviour Analytics(UEBA)
• Distributed denial of service(DDoS) protection
• OperationTechnology (OT)security
• Providinghandson subject matter expertise troubleshooting and securingsoftwaredefined networking (SDN) technologyincluding :
• Softwaredefinedwide area network (SDWAN) including Fortinet Cisco Meraki Palo AltoFat Pipe etc.
• Emerging SDEdge suchas VMware VeloCloud Silver Peaketc
• Providing subjectmatter expertise in the development and delivery of technicaltraining courses on nextgeneration cyber security solutions securenetworking solutions and various security products to supportboards cyber resilienceefforts
• Troubleshooting providinganalysis and recommending solutions on complex cyber security andnetwork security issues
• Performingvulnerability scanning and penetration testing including activitiessuch as preparing test plans completing the testing analysis andrisk assessments to ensure sound network and securityarchitecture
• Staying abreast of theeverevolving cyber threat landscape to provide subject matterexpertise guidance and advice on tactical and operational cybersecurity and network securitypractices
• Providing subject matterexpertise analysis configuration troubleshooting and implementationguidance with security operations centre (SOC) technologiesincluding :
• SecurityInformation and Event Management(SIEM)
• Security OrchestrationAutomation and Response(SOAR)
• ThreatIntelligence
• SASE
• SolarWindsNetFlow Traffic Analyzer
• NetworkPerformance Monitor (NPM) and Network Configuration Management(NCM) Tools
• Providingsubject matter expertise analysis configuration troubleshootingtraining and implementation guidance with identity security andauthentication solutions and technologiesfor :
• Passwordbased andpasswordlessauthentication
• Certificatebasedauthentication
• Creating / updatingdetailed system documentation and technical specifications varioussolutions and architecture including cyber security networksecurity and network protection solutions and SOCsolutions
• Assessing new and emergingcyber security solutions and technology trends and industryanalysis including but not limited to wireless network securitypractices including authentication and edgesecurity
• Presenting to variousstakeholders as needed
• Providestatus and project status reports on other deliverablesassigned.
• Deliver on other duties asassigned.

This workinvolves working in close partnership with various governmentdepartments the K12 education sector telecommunications providersand network and cyber security technology vendors to developtailored approaches and implementationplans.

The manager may assign schoolboardrelated work for other initiatives asrequired.

Requirements

Experienceand Skill SetRequirements :

Musthaves :

CyberSecurity and NetworkSecurity :

• 4 yearshandson experience with cyber security network security and networkprotection solutions and technologies preferably for Ontario K12school boards including :
• Nextgeneration cybersecurity technologies leveraging artificial intelligence (AI) andmachine learning (ML)
• SecurityInformation and Event Management (SIEM) including MicrosoftSentinel Splunk AlienVault andFortiSiem
• Endpoint protection (EPP)Endpoint detection and response (EDR) Extended Detection andResponse (XDR) and other endpoint securitysolutions
• Identity Management (IdM)and identity security
• IncidentManagement (IM)
• 4 yearshandson experience with authentication solutions and technologiespreferably for Ontario K12 school boards including :
• 2 years demonstrated handsonexperience providing security operations center (SOC)troubleshooting support industry research products reviews andautomation including SOC technologies services and equipment butnot limited to :

NetworkTechnology :

• 2years handson experience with softwaredefined networking (SDNSDWAN) in particular Fortinet Meraki Palo Alto and Aruba preferablyfor Ontario K12 school boards
• 2years handson experience in data monitoring and management systemsin particular SolarWinds FortiManager and Panorama preferably forOntario K12 school boards

Coordination Skills andExperience :

Strongcommunication skills as demonstrated through :

• 3 years experience inpreparing written materials (e.g. status reports recommendationsbriefing notes)
• 3 yearscoordinating complex technical work with multiple IT teams internaland external to the Ministry

Industry Certifications / RelevantDegrees :

Cybersecurity certification (e.g. CEH CISSP or CISM)

Nicetohave :

PublicSectorExperience :

4years handson experience working with Ontario K12 school boards inparticular with school board networks and networksecurity

Skill SetRequirements :

CyberSecurity and NetworkSecurity :

• 5 yearsexperience in network security on advanced SD networks preferablyfor Ontario K12 school boards
• 4years handson experience with cyber security network security andnetwork protection solutions and technologies preferably forOntario K12 school boards including :
• Nextgeneration cybersecurity technologies leveraging automation artificial intelligence(AI) and machine learning(ML)
• Nextgeneration firewalls(specifically Fortinet Meraki PaloAlto)
• Network access control (e.g.HPE Aruba ClearPassFortiNAC)
• Security Information andEvent Management (SIEM) and Security Orchestration Automation andResponse (SOAR) including Microsoft Sentinel Splunk GoogleChronicle and FortiSIEM
• Endpointsecurity solutions Endpoint protection (EPP) Endpoint detection andresponse (EDR) Extended Detection and Response(XDR)
• Cloudbased cyber securitysolutions such as Secure Web Gateway (SWG) Cloud Access SecurityBroker (CASB) and ZeroTrust Network access as available SASE (suchas Zscaler Netskope Cisco Umbrellaetc.)
• Distributed denial of service(DDoS) protection
• Advanced intrusionprevention systems (IPS) and intrusion detection systems(IDS)
• Identity Management (IdM)Privileged Access Management and other identity securitysolutions
• Automated patchingsolutions
• Incident Response (IR) andIncident Management (IM)
• OperationTechnology (OT)security
• 4 years handsonexperience with authentication solutions and technologiespreferably for Ontario K12 school boards including :
• Passwordbased andpasswordlessauthentication
• Multifactorauthentication(MFA)
• Certificatebasedauthentication
• Biometricauthentication (e.g. Fast Identity online (FIDO) Universal 2ndFactor (U2F) FIDO2 Google Authenticator Security Assertion MarkupLanguage (SAML))
• 2 yearsdemonstrated handson experience providing security operationscenter (SOC) troubleshooting support industry research productsreviews and automation including SOC technologies services andequipment but not limitedto :
• SIEM
• SOAR
• SASE
• Demonstratedhandson experience with cyber security industry frameworks such asNIST Cyber Protection Framework and 800 series CIS Controls v8COBIT and ISO27001
• Knowledge of the newdraft NIST Cyber Security Frameworkv2.0
• Demonstratedexperience assessing and evaluating new and emerging networktechnologies with pilots and proofofconcepts
• Excellent knowledge and exposure toIoT cyber security issues and data capturing mechanism

NetworkTechnology :

• 3years handson experience with network infrastructure solutions andtechnologies including LAN / WAN VPN VLAN and hardware (serversswitches routers firewalls)
• 2 yearshandson experience with Ontario K12 school boards networks (WAN LANWiFi internet service delivery)
• 2years handson experience with softwaredefined networking (SDNSDWAN) in particular Fortinet Meraki Palo Alto and Aruba preferablyfor Ontario K12 school boards
• 2years handson experience in data monitoring and management systemsin particular SolarWinds FortiManager and Panorama preferably forOntario K12 school boards
• 2 yearshandson experience with network data traffic awareness monitoringand analysis tools and technologies including SolarWinds PRTG(Paessler Router Traffic Grapher) and Wireshark Network Analyzerpreferably for Ontario K12 school boards
• 2 years handson experience withdata logging mechanisms and technologies including Syslog IPFix andNetFlow preferably for Ontario K12 school boards
• 2 years handson experienceconfiguring troubleshooting and administering network protocolssuch as MPLS VPLS and VLAN Trunking Protocol (VTP)
• Handson experience performingnetwork load testing testing analysis and risk assessments toensure sound network architecture preferably for Ontario K12 schoolboards
• Providing subject matterexpertise for the design development and delivery of technicaltraining courses and demonstrations on SDN NTDM NGSEC architectureand products to support Ontario K12 school boards broadbandmodernization implementations
• Demonstrated experience assessingand evaluating new and emerging network technologies with pilotsand proofofconcepts

Coordination Skills andExperience :

Strongcommunication skills as demonstrated through :

• 3 years experience ineffectively presenting to management teams and externalstakeholders
• 3 years experience inpreparing written materials (e.g. status reports recommendationsbriefing notes)
• 3 yearscoordinating complex technical work with multiple IT teams internaland external to the Ministry

Industry Certifications / RelevantDegrees :

• Relevantvendor certifications or equivalent work experience
• Postgraduate degree (e.g. M.Sc.and / or Ph.D.) in computer science or engineeringpreferred
• Cyber securitycertification (e.g. CEH CISSP or CISM)

Public SectorExperience :

• Knowledgeof Government of Ontario standards (e.g. GOITS) and relevantpolicies and legislation
• 4 yearshandson experience working with Ontario K12 school boards inparticular with school board networks and network security
• Handson experience providingsupport troubleshooting and delivery of technical training coursesto Ontario K12 school boards

Experience and Skill Set Requirements : Must haves : Cyber Securityand Network Security : 4+ years hands-on experience with cybersecurity, network security and network protection solutions andtechnologies preferably for Ontario K-12 school boards, including : Next-generation cyber security technologies leveraging artificialintelligence (AI) and machine learning (ML) Security Informationand Event Management (SIEM) including Microsoft Sentinel, Splunk,AlienVault and FortiSiem Endpoint protection (EPP), Endpointdetection and response (EDR), Extended Detection and Response (XDR)and other endpoint security solutions Identity Management (IdM) andidentity security Incident Management (IM) 4+ years hands-onexperience with authentication solutions and technologiespreferably for Ontario K-12 school boards, including : 2+ yearsdemonstrated hands-on experience providing security operationscenter (SOC) troubleshooting, support, industry research, productsreviews and automation including SOC technologies, services, andequipment, but not limited to : Network Technology : 2+ yearshands-on experience with software-defined networking (SDN, SD-WAN),in particular, Fortinet, Meraki, Palo Alto, and Aruba preferablyfor Ontario K-12 school boards 2+ years hands-on experience in datamonitoring and management systems, in particular, SolarWinds,FortiManager, and Panorama preferably for Ontario K-12 schoolboards Coordination Skills and Experience : Strong communicationskills as demonstrated through : 3+ years experience in preparingwritten materials (e.

g., status reports, recommendations, briefingnotes) 3+ years coordinating complex technical work with multipleIT teams, internal and external to the Ministry IndustryCertifications / Relevant Degrees : Cyber security certification(e.

g. CEH, CISSP or CISM) Nice-to-have : Public Sector Experience : 4+ years hands-on experience working with Ontario K-12 schoolboards, in particular with school board networks and networksecurity Skill Set Requirements : Cyber Security and NetworkSecurity : 5+ years experience in network security on advanced SDnetworks preferably for Ontario K-12 school boards 4+ yearshands-on experience with cyber security, network security andnetwork protection solutions and technologies preferably forOntario K-12 school boards, including : Next-generation cybersecurity technologies leveraging automation, artificialintelligence (AI) and machine learning (ML) Next-generationfirewalls (specifically Fortinet, Meraki, Palo Alto), Networkaccess control (e.

g., HPE Aruba ClearPass, FortiNAC), SecurityInformation and Event Management (SIEM) and Security Orchestration,Automation and Response (SOAR) including Microsoft Sentinel,Splunk, Google Chronicle, and FortiSIEM Endpoint security solutions- Endpoint protection (EPP), Endpoint detection and response (EDR),Extended Detection and Response (XDR) Cloud-based cyber securitysolutions such as Secure Web Gateway (SWG), Cloud Access SecurityBroker (CASB) and Zero-Trust Network access as available SASE (suchas Zscaler, Netskope, Cisco Umbrella, etc.

Distributed denial ofservice (DDoS) protection, Advanced intrusion prevention systems(IPS), and intrusion detection systems (IDS) Identity Management(IdM), Privileged Access Management and other identity securitysolutions Automated patching solutions Incident Response (IR) andIncident Management (IM) Operation Technology (OT) security 4+years hands-on experience with authentication solutions andtechnologies preferably for Ontario K-12 school boards, including : Password-based and passwordless authentication Multi-factorauthentication (MFA) Certificate-based authentication Biometricauthentication (e.

g., Fast Identity online (FIDO) Universal 2ndFactor (U2F), FIDO2, Google Authenticator, Security AssertionMarkup Language (SAML)) 2+ years demonstrated hands-on experienceproviding security operations center (SOC) troubleshooting,support, industry research, products reviews and automationincluding SOC technologies, services, and equipment, but notlimited to : SIEM SOAR SASE Demonstrated hands-on experience withcyber security industry frameworks such as NIST Cyber ProtectionFramework and 800 series, CIS Controls v8, COBIT and ISO 27001Knowledge of the new draft NIST Cyber Security Framework v2.

0Demonstrated experience assessing and evaluating new and emergingnetwork technologies with pilots and proof-of-concepts Excellentknowledge and exposure to IoT cyber security issues and datacapturing mechanism Network Technology : 3+ years hands-onexperience with network infrastructure solutions and technologiesincluding LAN / WAN, VPN, VLAN, and hardware (servers, switches,routers, firewalls) 2+ years hands-on experience with Ontario K-12school boards networks (WAN, LAN, Wi-Fi, internet service delivery)2+ years hands-on experience with software-defined networking (SDN,SD-WAN), in particular, Fortinet, Meraki, Palo Alto, and Arubapreferably for Ontario K-12 school boards 2+ years hands-onexperience in data monitoring and management systems, inparticular, SolarWinds, FortiManager, and Panorama preferably forOntario K-12 school boards 2+ years hands-on experience withnetwork data traffic awareness, monitoring and analysis tools andtechnologies, including SolarWinds, PRTG (Paessler Router TrafficGrapher), and Wireshark Network Analyzer preferably for OntarioK-12 school boards 2+ years hands-on experience with data loggingmechanisms and technologies including Syslog, IPFix and NetFlowpreferably for Ontario K-12 school boards 2+ years hands-onexperience configuring, troubleshooting, and administering networkprotocols such as MPLS, VPLS, and VLAN Trunking Protocol (VTP)Hands-on experience performing network load testing, testinganalysis, and risk assessments to ensure sound network architecturepreferably for Ontario K-12 school boards Providing subject matterexpertise for the design, development and delivery of technicaltraining courses and demonstrations on SDN, NTDM, NG-SECarchitecture and products to support Ontario K-12 school boardsbroadband modernization implementations Demonstrated experienceassessing and evaluating new and emerging network technologies withpilots and proof-of-concepts Coordination Skills and Experience : Strong communication skills as demonstrated through : 3+ yearsexperience in effectively presenting to management teams andexternal stakeholders 3+ years experience in preparing writtenmaterials (e.

g., status reports, recommendations, briefing notes)3+ years coordinating complex technical work with multiple ITteams, internal and external to the Ministry IndustryCertifications / Relevant Degrees : Relevant vendor certificationsor equivalent work experience Postgraduate degree (e.

g., M.Sc.and / or Ph.D.) in computer science or engineering preferred Cybersecurity certification (e.g., CEH, CISSP or CISM) Public SectorExperience : Knowledge of Government of Ontario standards (e.

g.,GO-ITS) and relevant policies and legislation 4+ years hands-onexperience working with Ontario K-12 school boards, in particularwith school board networks and network security Hands-on experienceproviding support, troubleshooting, and delivery of technicaltraining courses to Ontario K-12 school boards