Technical Architecture Specialist

Job Title: Technical Architecture Specialist

Location: Toronto, ON

Estimated Duration: 6 Months

Assignment Duties:
Reporting to the Manager, Process Control Systems Unit, the Technical Architect
Specialist will provide technical guidance develop Operational Technology Strategy and other related Architecture/Security related Standards/Artifacts for SCADA environment in the areas of routing, switching, firewall/IPS, network and control systems security, Splunk SEIM, WAN, mobility and wireless LAN. The candidate will also execute the following:

• Development of business and technical requirements.
• Development of OT network segregation and structure with rationale.
• Develop standards, architecture diagrams and other artifacts to effectively manage OT security.
• Provide recommendations regarding the improvements to network operations.
• Document design / architecture best practices for adoption.
• Provide recommendations regarding the improvements to OT project planning and project implementation.
• Develop network documentation, including but not limited to standards, processes, security, topology, and inventory, to ensure high quality service and support on an ongoing basis.
• Participate in or lead complex network design, performance engineering or problem resolution projects.
• Prepare and submit budgetary figures and business case analysis leading to funding and implementation of enhancements to OT systems.
• Develop and document network architecture standards and strategies to promote the long-term stability, efficiency, and effectiveness of the facilities network with a focus on network and Critical infrastructure.
• Continuously monitor, design, develop, and implement Cyber security position/posture to protect ICS infrastructure relating to Water/Wastewater.
• Performs related duties as required or assigned.

Travel

• The candidate will be required to travel within the GTA

Health & Safety

• The Candidate will be required to provide their own PPE (Personal Protective Equipment), including but not limited to hard hats, safety shoes, ear protection, vests, safety glasses.

Qualifications and Experience: 

• University degree in Computer Science or equivalent a definite asset.
• Experience within a (ICS) Industrial Control Systems environment within the manufacturing or Water/Wastewater Treatment sectors.
• Experience or certifications in Cyber Security (CISSP, CCNP/CCIE Security).
•  Minimum of 10 years Security Enterprise design, configuration, implementation, and testing experience.
• Experience designing, testing, implementing, supporting and documenting Cisco Identity Services Engine for Device Management and Network Access Control.
• Experience with industrial control systems network and security policy planning, development, documentation and implementation including technologies such as Splunk, Thousand eyes, etc.
• Progressive experience as an architect in an infrastructure / technology architecture environment.
• Knowledge of technology infrastructure and ITIL Library. PASS55, ISO 27001 & 27002, NIST Cyber Security Framework is highly desirable.

Technical Capabilities:

• Extensive knowledge in security concepts, technologies, and protocols, including but not limited to routing protocols (OSPF, EIGRP, BGP), transport protocols (TCP/IP and UDP/IP), multi-access network (Ethernet), Spanning Tree, VLAN's, VLAN trunking, EtherChannel, NAT, IPSec, GETVPN, SNMP, VSS, 802.1x, SSH, ACL, HSRP, NTP, QoS/CoS, Radius/TACACS+, ACI.
• Knowledge and experience of WAN and WWAN technologies; specifically, TLS, VPLS, MPLS, private line, HSPA/HSPA+,Multisite ACI, SDN.
• Knowledge and experience in enterprise networking including but not limited to data centre infrastructure, routing, switching, security, unified communications, mobility, wireless LAN and its implication and importance on business decisions is essential. Technologies to include VXLAN for Data Centre Disaster Recovery design.
• Experience with network planning, design, technology integration, implementation, and support of Cisco ASA/FP Firewall Active/Active or Active/Standby, IPS, and Firepower Management Center.
• Extensive knowledge of SEIM and other cyber security tools as related to Security and Critical infrastructure.
• Experience with developing technical requirements, design documentation and drawings, implementation plan, configuration sets, and verification/testing plan.

Deliverables 

• Develop Operational Technology Strategy Documentation and other related Architecture/Security related Standards/Artifacts for SCADA environment.
• Develop and document network architecture standards and strategies to promote the long-term stability, efficiency, and effectiveness.
• Develop Operational technology security safeguards including Unidirectional Gateways and network segregation/segmentation.
• Authors security design reports and technical memo as required.
• Authors and maintains security documentation, including but not limited to standards, processes, security, topology, and inventory, to ensure high quality service and support on an ongoing basis.
• Plan and lead broad-scope security strategies and proof of concept and product evaluations.
• Gather, analyse, and evaluate technical requirement and third party white papers from organizations such as Gartner or Forrester, etc.
• Prepare and submit budgetary figures and business case analysis leading to funding and implementation of enhancements to security.