Description:

The Application Architect role requires extensive knowledge of network connectivity, network security and internet technologies with demonstrated hands-on experience designing and developing network security solutions in the K-12 school board environment. This resource is responsible for, but not limited to:

• Providing subject matter expertise, advice, consultancy, training and implementation guidance of network technology solutions, services and equipment including, but not limited to, software-defined networking (SDN) technology:

  • Software-defined wide area network (SD-WAN) including Fortinet, Cisco Meraki, Palo Alto, etc.

  •  Emerging SD-Edge such as VMware VeloCloud, Silver Peak, etc.

  •  Providing subject matter expertise, advice, consultancy, training and implementation guidance with network security and network protection solutions, including:

  • Next-generation cyber security technologies

  • Distributed denial of service (DDoS) protection

  •  Advanced intrusion prevention systems (IPS) and intrusion detection systems (IDS)

  • Network access control

  • Endpoint protection (EPP), Endpoint detection and response (EDR), Extended Detection and Response (XDR) and other endpoint security solutionsCloud-based cyber security solutions (e.g. Zscaler, Cisco Umbrella)

  •  Incident Management (IM)

• ·Providing subject matter expertise, advice, consultancy, training and implementation guidance for network operations centre (NOC) and security operations centre (SOC) technologies, services, and equipment including, but not limited to:

  •  Security Information and Event Management (SIEM)

  • Security Orchestration, Automation and Response (SOAR)

•  Developing strategic technologies roadmaps based on new and emerging network architecture solutions and technology trends and industry analysis, including, but not limited to:

  • Secure Access Service Edge (SASE)

  •  Network function virtualization (NFV), Open Network Automation Platform (ONAP), etc.

  • Wi-Fi and cellular broadband adoption

  • Wi-Fi 6 (802.11ax), 802.11ay

  • WISP tools, technologies and implementation in Ontario

  • 5G (5th generation) mobile data service, spectrum sharing, splicing, etc.

  • Wireless network security practices including authentication and edge security

• Providing subject matter expertise, advice, consultancy, training and implementation guidance with authentication solutions and technologies for:

  • Password-based authentication

  •  Multi-factor authentication (MFA)

  • Certificate-based authentication

  • Biometric authentication

•  Designing and building network data monitoring and management systems

• Creating/updating detailed system documentation and technical specifications various solutions and architecture, including SD-WAN, SD-Branch, SD-Edge, mobile and wireless solutions, network security and network protection solutions, authentication solutions, and NOC and SOC solutions

• Providing detailed options analysis on networks architectures and network security architectures

• Presenting to senior and executive management and external stakeholders, as needed

• Deliver on other duties as assigned. Provide status and project status reports on all deliverables assigned.

• This work involves working in close partnership with various government departments, the K-12 education sector, telecommunications providers and network technology vendors to develop customized approaches and implementation plans.

 Must Haves:

• 5+ years’ experience in advanced SD networks and network security – preferably for  K-12 school boards

• 10+ years hands-on experience with network infrastructure solutions and technologies including LAN/WAN, VPN, VXLAN, fog computing, network function virtualization (NFV), server virtualization, cloud platforms, and hardware (switches, routers, firewalls)

• 5+ years’ hands-on experience with software-defined networking (SDN, SD-WAN, SD-Edge)

• 5+ years’ hands-on experience with K-12 school boards’ networks (WAN, LAN, Wi-Fi, internet service delivery)