RQ11206 - 2 x Technology Architect - Senior

RQ11206 - 2 x Technology Architect - Senior

2 openings - 2 submissions

1-year contract (250 business days) - 3 possible extensions

Hybrid - 2 days onsite / 3 days remotes - 777 Bay St.

Security Level: CRJMC

• 5+ years of experience designing and implementing secure architectures and automation-enabled solutions (preferably within Ontario K–12 environments)
• 5+ years of experience in modern network and security architectures (e.g., SDN, SD-WAN, SASE/SSE)
• Proven experience implementing enterprise security architectures, including Zero Trust and integrated network-security solutions
• Proven hands‑on experience implementing and supporting:
  • SASE/SSE technologies (SWG, CASB, FWaaS, ZTNA)
  • Cloud security architectures (e.g., Azure, AWS, Google Cloud)
  • Endpoint security (EPP, EDR, XDR)
  • Advanced threat protection (IPS, IDS, NAC, DDoS)
  • Identity and authentication solutions (passwordless, MFA, certificate‑based)
  • Incident Response and Incident Management (IR/IM) platforms
  • Vulnerability management and patching automation
• 5+ years of experience supporting or coordinating security operations or IT programs
• Experience coordinating onboarding, service alignment, or transition to steady‑state operations
• Strong understanding of incident response lifecycle and coordination activities
• Experience with SIEM, SOAR, or security monitoring tools (functional/user level)
• 5+ years experience coordinating across multiple stakeholders (e.g., internal teams, vendors, external partners)
• 5+ years experience facilitating meetings, workshops, or cross-functional initiatives
• 5+ years experience developing and maintaining documentation (e.g., playbooks, onboarding guides, status reports)
• Experience supporting operational readiness, transition planning, or service adoption
• Bachelor's degree in computer science, cyber security, or a related field

• Strong knowledge and application of cybersecurity frameworks and threat‑informed methodologies, including:
  • NIST CSF v2, CIS Controls v8
  • MITRE ATT&CK, D3
    
    FEND, and ATLAS
• Experience working with Managed Security Service Providers (MSSP/MDR) or shared service models
• Experience working in multi‑organization or federated environments (e.g., multiple boards/agencies)
• Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred.
• Industry‑recognized security certifications preferred, including:
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Cloud Security Professional (CCSP)
  • Other examples include Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC).
• 5+ years' hands‑on experience working in the K‑12 education sector, with Ontario K‑12 school boards, in particular with school board network, network security and cyber security.

The Senior Technology Architect role requires knowledge, expertise, and experience in cybersecurity solutions, security operations (Sec Ops) practices, managed security services (MSS/MSSP), and next‑generation network security. This resource will provide strategic coordination, planning support, and delivery oversight to Ontario K‑12 school boards in the areas of cyber security incident management, operational resilience, and technology modernization. The role focuses on coordinating technical workplans, providing program tracking and oversight, supporting managed security service (MSS) onboarding, and managing cyber incident response processes as boards shift toward shared service models and modernized operations.

This resource is responsible for, but not limited to:

• Delivering solution and architecture guidance, training, and implementation support for next‑generation networks, network protection, and cyber security technologies, including:
  • Security Service Edge (SSE) / Secure Access Service Edge (SASE), including integration of network and security functions (SWG, CASB, ZTNA, FWaaS)
  • SD‑WAN and Software‑defined Networking (SDN)
  • Endpoint security (EPP, EDR, XDR)
  • Advanced threat protection (IPS, IDS, NAC, DDoS)
  • Identity and authentication solutions (passwordless,…