Senior Applications Architect (RQ03302)

Job content

AMANST Inc. is looking for Senior Applications Architectfor a contract opportunity with Ontario Government.

Estimated Business Days: 230 days

Responsibilities

The Application Architect, Level 3, role requires extensive knowledge of network connectivity, network infrastructure, internet technologies and network security, with demonstrated hands-on experience with software-defined networking (SDN) and network security solutions in the Ontario K-12 school board environment. This resource will work in close partnership with the K-12 education sector, telecommunications providers and network technology vendors and is responsible for, but not limited to:

• Providing technical guidance and subject matter expertise on developing and implementing the best approach to collect and analyze a range of school board network-related data
• Providing subject matter expertise for the analysis of boards’ proposed plans to achieve performance objectives
• Providing support for network and network security performance outcomes by working in close partnership with the K-12 education sector technical IT leads, telecommunications providers and network technology vendors
• Providing subject matter expertise, advice, consultancy, training and implementation guidance with SDN technology:
• Software-defined wide area network (SD-WAN) including Fortinet, Cisco Meraki, Palo Alto, etc.
• Emerging SD-Edge such as VMware VeloCloud, Silver Peak, etc.
• Secure Access Service Edge (SASE)

• Providing subject matter expertise, advice, consultancy, training and implementation guidance with telecommunications technologies and solutions, including:
• Data transport technologies including fibre optic cable, coaxial cable, wireless
• Next-generation data transport such as LTE Advanced, DOCSIS C3.1 and 4.0, and 5G

• Developing strategic roadmaps based on new and emerging network architecture solutions and technology trends and industry analysis, including, but not limited to:
• Secure Access Service Edge (SASE)
• NFV, ONAP, etc.
• Wi-Fi and cellular broadband adoption
• Wi-Fi 6 (802.11ax), 802.11ay
• WISP tools, technologies and implementation in Ontario
• 5G (5th generation) mobile data service, spectrum sharing, splicing, etc.
• Wireless network security practices including authentication and edge security

• Providing subject matter expertise, advice, consultancy, training and implementation guidance with network security and network protection solutions, including:
• Next-generation network security technologies
• Distributed denial of service (DDoS) protection
• Advanced intrusion prevention systems (IPS) and intrusion detection systems (IDS)
• Network access control
• Endpoint detection and response (EDR) and other endpoint security solutions

• Providing subject matter expertise, advice, consultancy, training and implementation guidance with authentication solutions and technologies for:
• Password-based authentication
• Multi-factor authentication (MFA)
• Certificate-based authentication
• Biometric authentication

• Creating/updating detailed system documentation and technical specifications various solutions and architecture, including, but not limited to, SD-WAN, SD-Branch, SD-Edge, mobile and wireless solutions, network security and network protection solutions, authentication solutions, and NOC solutions
• Providing detailed options analysis to inform future-state solutions for Ontario K-12 school board networks
• Presenting to senior and executive management and external stakeholders, as needed
• Deliver on other duties as assigned

The manager will have the right to assign additional work, directly or indirectly related to this initiative as needed to support unit priorities as and when required.

Experience and Skill Set Requirements

Network Technology – 60%

• 10+ years hands-on experience with network infrastructure solutions and technologies including LAN/WAN, VPN, VXLAN, fog computing, network function virtualization (NFV), server virtualization, cloud platforms, and hardware (switches, routers, firewalls)
• 5+ years’ hands-on experience with software-defined networking (SDN, SD-WAN, SD Edge) – preferably with Ontario’s K-12 school boards
• 5+ years’ hands-on experience with various networks (WAN, LAN, Wi-Fi, internet service delivery) – preferably with Ontario’s K-12 school boards
• 5+ years’ hands-on experience in data monitoring and management systems, in particular, SolarWinds, FortiManager, Meraki, Panorama, Wireshark – preferably for Ontario K-12 school boards
• 5+ years’ hands-on experience with network data traffic awareness, monitoring and analysis tools and technologies, and enterprise tools, including SolarWinds, PRTG (Paessler Router Traffic Grapher) and Wireshark Network Analyzer – preferably for Ontario K-12 school boards
• 5+ years’ hands-on experience with data logging mechanisms and technologies including Syslog, IPFix, CSV, CEF and NetFlow
• Demonstrated hands-on experience with developing customized WAN and network architectures for SDN networks to address unique and specific needs – preferably for Ontario K-12 school boards
• Excellent knowledge of the new and emerging network technology trends (e.g., Edge computing, 5G and Wi-Fi 6)
• Demonstrated experience assessing and evaluating new and emerging network technologies with pilots and proof-of concepts
• Experience with telecommunication technologies such as:
• Data transport technologies including fibre optic cable, coaxial cable, wireless
• Next-generation data transport such as LTE Advanced, DOCSIS C3.1, and 5G
• Transmission protocols including Multiprotocol Label Switching (MPLS), Virtual Private LAN Service (VPLS), TCP/IP (Transmission Control Protocol/Internet Protocol) and tunneling

Network Security – 30%

• 4+ years’ experience in advanced SD network security – preferably for Ontario K-12 school boards
• 4+ years hands-on experience with network security and network protection solutions and technologies – preferably for Ontario K-12 school boards, including:
• Next-generation firewalls (specifically Fortinet, Meraki, Palo Alto),
• Distributed denial of service (DDoS) protection,
• Advanced intrusion prevention systems (IPS),
• Network access control (e.g., HPE Aruba ClearPass, FortiNAC),
• Endpoint protection and cloud-based security solutions,

• 4 + years hands-on experience with authentication solutions and technologies, including:
• Password-based authentication
• Multi-factor authentication (MFA)
• Certificate-based authentication
• Biometric authentication

• (e.g., Fast Identity online (FIDO) Universal 2nd Factor (U2F), FIDO2, Google Authenticator, Security Assertion Markup Language (SAML))
• Demonstrated hands-on experience with Secure Access Service Edge (SASE) platforms and solutions
• Excellent knowledge and exposure to IoT security issues and data capturing mechanisms

Public Sector Experience – 5%

• Knowledge of Government of Ontario standards (e.g., GO-ITS) and relevant policies and legislation
• 5+ years’ hands-on experience working with the Broader Public Sector, in particular Ontario K-12 school boards, board networks and network security
• Demonstrated experience providing design, development and delivery of technical solution and technical training courses to Ontario Public Service or the Broader Public Service

Industry Certifications / Relevant Degrees – 5%

• Relevant vendor certifications or equivalent work experience
• Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science or engineering
• Security certification required (CISSP or CISM) – Nice to have

Job Type: Fixed term contract

Schedule:

• Monday to Friday