Network Security Architect

Security Requirements

The selected candidates must be able to obtain and maintain a Secret level security clearance and pass the Controlled Goods Program (CGP) security assessment.

Candidates must be Canadian citizens or permanent residents and have resided in Canada for at least five (5) years to be eligible for the required security clearance. Please note that individuals who have recently resided in certain sanctioned countries or have significant ties to them may not be eligible for this clearance.

Job Overview

The Network Security Architect is responsible for designing and evolving global secure network infrastructures that support business objectives while reducing network security risks. Reporting to the Networks and Security Manager, this individual contributes to the company's critical operations across multiple regions and time zones.

Your Key Responsibilities

Design Secure Networks

• Design, implement, and deploy enterprise-grade network security solutions, including:
• Firewalls
• Intrusion Detection and Prevention Systems (IDS/IPS)
• Secure Routing
• VPN
• Zero Trust Architectures
• SD-WAN
• Cloud Networking
• SASE (Secure Access Service Edge)
• Design global secure network infrastructures operating 24/7.

Design Audio-Video Networks

• Design reliable, high-quality enterprise audio-video environments (digital signage) and the necessary networking architecture to ensure optimal performance.

Strategic Alignment

• Align network security standards, frameworks, and controls with the organization's business and technological strategies.

Threat Identification and Mitigation

• Identify current and emerging network-related threats.
• Design architectural components to effectively detect, prevent, and respond to these threats.

Gap Analysis and Continuous Improvement

• Assess existing and proposed network architectures to identify vulnerabilities.
• Recommend, document, and implement improvements, security hardening measures, and remediation plans.

Incident Response

• Act as a technical expert during network security incidents.
• Support investigations and recommend corrective measures following post-incident analyses.

Mentoring and Leadership

• Mentor and guide IT and Networking team members.
• Provide guidance on the secure design, deployment, and operation of networks.

Collaboration

• Collaborate closely with cloud, application, and cybersecurity domain architects to ensure a comprehensive enterprise-wide security approach.
• Required Qualifications

Certifications

• CISSP certification is mandatory.
• One or more specialized network security certifications, such as:
• CCNP Security
• CCIE Security
• SANS GIAC

Experience

• Minimum of five (5) years of experience in network security.
• Demonstrated experience with:
• Firewall platforms;
• Next-generation IDS/IPS systems;
• Secure routing;
• VPN;
• Operational technology (OT) environments;
• Cloud environments;
• Zero Trust architectures.

Education

• Bachelor's degree in computer science, information technology, engineering, or a related field;
• or
• College diploma (DEC or equivalent) accompanied by relevant professional experience and appropriate certifications.

Languages

• Excellent proficiency in both French and English, both spoken and written.

Technical Expertise

• Excellent knowledge of network protocols, routing, switching, and secure network design.
• Experience in integrating IT infrastructures with operational technology (OT) systems.
• Strong expertise in firewalls, IDS/IPS, secure web gateways, and network traffic analysis tools.
• Practical experience with SIEM solutions, EDR (Endpoint Detection and Response) tools, and network anomaly detection solutions.
• Knowledge of AWS and Azure cloud environments.
• Experience in designing enterprise audio-video environments.
• Desired Skills

Security Frameworks

• Experience with the Cybersecurity Maturity Model Certification (CMMC) and other applicable security frameworks for network security.

Identity and Access Management (IAM)

• Good understanding of network-level access control mechanisms, including:
• NAC (Network Access Control)
• 802.1X
• RADIUS
• TACACS+

Analysis and Communication

• Ability to communicate complex technical concepts to non-technical stakeholders.
• Excellent analytical, problem-solving, and critical thinking skills.

Leadership

• Demonstrated experience in leading multidisciplinary security projects.
• Ability to drive initiatives involving multiple departments and develop high-performing teams.

Risk Management

• Demonstrated ability to identify, assess, and prioritize risks related to network architectures, business processes, and technological projects.
• Pay: From $100,000.00 per year
• Work Location: In person