Infrastructure Systems Analyst (Network) (RFT 1.0 FTE

Position Information

Posting Number: ROM
26-172E

Title:

Infrastructure Systems Analyst (Network) (RFT 1.0 FTE)
Position Status:
Regular Full-time
FTE: 1.0

Job Schedule:

Days
Department:
Information Technology
Union:
Non-union
Site:
Royal Ottawa Mental Health Centre
Number of Vacancies: 1

As one of Canada’s foremost mental health care and academic health science centres, The Royal has a clear purpose: to get more people living with mental illness into recovery faster. This is at the core of everything we do and it is driven by the passion, focus and dedication of our employees. Every day, the work that we do transforms the lives of people with mental illness through specialized mental healthcare, advocacy, research and education

The Infrastructure Systems Analyst 3 is a senior technical specialist responsible for the design, implementation, optimization, security, and reliability of the organization’s enterprise network infrastructure. This role provides expert-level leadership across complex network, connectivity, wireless, firewall, VPN, and secure remote access services while maintaining a strong working knowledge of core infrastructure platforms. Our current hybrid model requires employees to work on-site three days per week.

On-site requirements may change based on operational needs.

• Lead the design, implementation, and optimization of enterprise network services, including LAN/WAN, wireless, routing, switching, VPNs, firewalls, and secure remote access.
• Manage and support firewall policies (rules, NAT, VPNs, traffic analysis, troubleshooting, and policy optimization) and support cybersecurity investigations through analysis of firewall, VPN, and network activity logs.
• Design and maintain network segmentation (VLANs, zones, access controls) across clinical, administrative, wireless, guest, vendor, and server environments.
• Implement and support secure wireless networks (SSIDs, AP design, WPA2/WPA3-Enterprise, 802.1X, RADIUS, certificate-based authentication).
• Configure and troubleshoot enterprise switching (VLANs, trunking, LACP, spanning tree, port security, uplinks) and connectivity to enterprise systems.
• Design and support secure remote access solutions, including client and site-to-site VPNs, MFA, and vendor access.
• Act as a senior escalation point and lead incident response, root cause analysis, and service restoration for complex network and connectivity incidents.
• Provide expert guidance on network architecture, capacity planning, resiliency, and risk mitigation; collaborate with infrastructure teams across network, server, storage, virtualization, and cloud platforms.
• Contribute to infrastructure standards, roadmaps, and long-term technology planning; ensure alignment with security, compliance, and business continuity requirements.
• Maintain documentation (diagrams, standards, runbooks); support cloud connectivity, data centre modernization, and disaster recovery initiatives; provide mentorship, proactive monitoring, change execution, on-call support, and vendor coordination.

• College diploma or university degree in Computer Science, Information Technology, or related field.
• Minimum 5 years of progressive enterprise IT experience with a focus on networking in complex, multi-site environments.
• Advanced hands‑on experience with enterprise networking technologies: routing, switching, VLANs, trunking, spanning tree, LACP, firewall policies, NAT, VPNs, wireless, secure remote access, and troubleshooting.
• Strong experience with enterprise firewalls, including policy creation, NAT, VPNs, traffic analysis, rule review, and security‑focused management.
• Experience with enterprise wireless technologies: SSIDs, access points, controllers/cloud platforms, roaming, authentication, RF coverage, and VLAN integration.
• Strong knowledge of infrastructure platforms:
  Windows Server, Active Directory, virtualization, storage, backup, DNS, DHCP, and cloud‑connected services.
• Experience with certificate‑based authentication, PKI‑integrated services, and certificate lifecycle management.
• Experience with network segmentation, NAC, least‑privilege access, and…