Description:
The Application Architect role requires extensive knowledge of network connectivity, network security and internet technologies with demonstrated hands-on experience designing and developing network security solutions in the K-12 school board environment. This resource is responsible for, but not limited to:
Providing subject matter expertise, advice, consultancy, training and implementation guidance of network technology solutions, services and equipment including, but not limited to, software-defined networking (SDN) technology:
Software-defined wide area network (SD-WAN) including Fortinet, Cisco Meraki, Palo Alto, etc.
Emerging SD-Edge such as VMware VeloCloud, Silver Peak, etc.
Providing subject matter expertise, advice, consultancy, training and implementation guidance with network security and network protection solutions, including:
Next-generation cyber security technologies
Distributed denial of service (DDoS) protection
Advanced intrusion prevention systems (IPS) and intrusion detection systems (IDS)
Network access control
Endpoint protection (EPP), Endpoint detection and response (EDR), Extended Detection and Response (XDR) and other endpoint security solutionsCloud-based cyber security solutions (e.g. Zscaler, Cisco Umbrella)
Incident Management (IM)
·Providing subject matter expertise, advice, consultancy, training and implementation guidance for network operations centre (NOC) and security operations centre (SOC) technologies, services, and equipment including, but not limited to:
Security Information and Event Management (SIEM)
Security Orchestration, Automation and Response (SOAR)
Developing strategic technologies roadmaps based on new and emerging network architecture solutions and technology trends and industry analysis, including, but not limited to:
Secure Access Service Edge (SASE)
Network function virtualization (NFV), Open Network Automation Platform (ONAP), etc.
Wi-Fi and cellular broadband adoption
Wi-Fi 6 (802.11ax), 802.11ay
WISP tools, technologies and implementation in Ontario
5G (5th generation) mobile data service, spectrum sharing, splicing, etc.
Wireless network security practices including authentication and edge security
Providing subject matter expertise, advice, consultancy, training and implementation guidance with authentication solutions and technologies for:
Password-based authentication
Multi-factor authentication (MFA)
Certificate-based authentication
Biometric authentication
Designing and building network data monitoring and management systems
Creating/updating detailed system documentation and technical specifications various solutions and architecture, including SD-WAN, SD-Branch, SD-Edge, mobile and wireless solutions, network security and network protection solutions, authentication solutions, and NOC and SOC solutions
Providing detailed options analysis on networks architectures and network security architectures
Presenting to senior and executive management and external stakeholders, as needed
Deliver on other duties as assigned. Provide status and project status reports on all deliverables assigned.
This work involves working in close partnership with various government departments, the K-12 education sector, telecommunications providers and network technology vendors to develop customized approaches and implementation plans.
Must Haves:
5+ years’ experience in advanced SD networks and network security – preferably for K-12 school boards
10+ years hands-on experience with network infrastructure solutions and technologies including LAN/WAN, VPN, VXLAN, fog computing, network function virtualization (NFV), server virtualization, cloud platforms, and hardware (switches, routers, firewalls)
5+ years’ hands-on experience with software-defined networking (SDN, SD-WAN, SD-Edge)
5+ years’ hands-on experience with K-12 school boards’ networks (WAN, LAN, Wi-Fi, internet service delivery)