Job DescriptionDescription:The
Senior Technology Architect role requires deep knowledge, expertise and experience in next-generation network security, cyber security solutions, security operations (SecOps), automation and artificial intelligence (AI) in cyber security, and managed / shared security services (MSS) models. The resource must have hands-on experience in
designing, developing and implementing cyber security architectures and solutions, particularly within the education sector-preferably in the Ontario K-12 school board environment.
This resource is responsible for, but not limited to:
- Leadingthe end-to-end technical integration strategy and architecturedesign for the Cyber Security Operating Model (CSOM) acrossparticipating school boards.
- Providingsubject matter expertise and strategic advice on all aspects ofcyber security, network architecture, and modern security frameworks andsolutions such as:
- ZeroTrust Architecture (ZTA) and cloud security architecture
- MITREATT&CK, D3FEND and ATLAS frameworks
- NISTCybersecurity Framework (CSF) v2 and CIS Controls v8
- Variousvendor platforms (e.g., Microsoft, AWS, Google)
- Securityoperations (SecOps) and AI-Operations (AIOps) practices
- Leading AI-infusedtransformation through design and implementation of intelligentand autonomous security capabilities, including:
- SOARand Agentic AI solutions
- AI/ML-drivenanalytics and threat detection
- Userand Entity Behaviour Analytics (UEBA)
- Automatedthreat detection, response, and orchestration workflows
- Designingand implementing hybrid cyber security operating modelsintegratinginternal teams and Managed Security Service Providers (MSSPs),including:
- MSSstrategy, onboarding, optimization and performance management
- Alignmentand integration of Security Information and Event Management (SIEM),Security Orchestration, Automation and Response (SOAR), EDR/XDR, andthreat intelligence platforms
- Schoolboard MSS readiness, transition planning, and governance models
- Securityoperations architecture, threat detection, incident response, andautomation workflows
- Governance,risk, and compliance in hybrid (in-house and outsourced) environments
- Designingand delivering solution architecture, training, and implementation supportfor next-generation network and cyber security technologies,including:
- SecurityService Edge (SSE) / Secure Access Service Edge (SASE), includingintegration of network and security functions such as Secure Web Gateway(SWG), Cloud Access Security Broker (CASB), Zero Trust NetworkArchitecture (ZTNA), and Firewall-as-a-Service (FWaaS)
- SD-WAN(Software-Defined Wide Area Network) and SDN (Software-DefinedNetworking)
- dentityand access management (passwordless, password-based, certificate-based,and multi-factor authentication (MFA))
- Endpointsecurity (Endpoint Protection Platforms (EPP), Endpoint Detection andResponse (EDR), and Extended Detection and Response (XDR))
- Advancedthreat protection (Intrusion Prevention Systems (IPS), IntrusionDetection Systems (IDS), Network Access Control (NAC), and DistributedDenial-of-Service (DDoS) protection)
- AI/ML-enabledmonitoring, analytics, and automation
- IncidentResponse (IR) and Incident Management (IM)
- Vulnerabilitymanagement and patching automation
- Penetrationtesting and automated red teaming
- OperationalTechnology (OT) security
- Cloudadoption and modernization strategies, including segmentation,resilience, and data residency
- Developingand maintaining enterprise reference architectures to ensure alignmentacross infrastructure, security, and operational domains.
- Providingsubject matter expertise in Network Operations Centre (NOC) andSecurity Operations Centre (SOC) technologies and tools,including SIEM, SOAR, and network monitoring and management platforms.
- Supportingschool boards in transitioning from an internal SecOps model to ahybrid managed security services (MSS) model, including:
- Strategicadvisory and implementation support
- Telemetryand metrics design
- Internaloperations optimization
- MSSintegration and optimization
- Advisingon modernization strategies-including cloud adoption, networksegmentation, data residency, and distributed identitymodels-ensuring alignment with provincial and education-sectorrequirements.
- Leadingarchitecture and capability assessments across K-12 environments and MSSPsto inform solution design and telemetry optimization.
- Developing strategictechnology roadmaps based on emerging cyber security trends,threat landscape evolution, and industry best practices.
- Creatingand maintaining technical documentation and specifications,including architecture designs, options analysis, and cost modelling.
- Maintainingawareness of the evolving cyber threat landscape, particularlywithin the K-12 sector, and applying insights to improve security postureand practices.
- Presentingto senior leadership and external stakeholders, as required.
- Providingstatus reporting on deliverables and project progress.
- Collaboratingwith diverse stakeholder groups to support solution definition, design,and implementation.
- Aligningwith industry and legislative advancements at the federal and provinciallevel (e.g., Enhancing Digital Security and Trust Act, 2024(EDSTA))
- Deliveringon other duties as assigned.
This work involves working in close partnership with sector technical IT leads (e.g., school board IT leads), to develop tailored approaches and implementation plans. To support various stakeholders, the resource must be available to perform hands-on configuration, troubleshooting and training at the client site. Therefore, the resource must be available to travel same day or overnight in Ontario, as needed.
The unit manager may assign other related board work for other unit or branch initiatives, as required.
RequirementsExperience and Skill Set Requirements:Must Haves:- 10+ years of experience in cyber security and next-generation network security, with a strong focus on architecture design, integration, strategic planning, and implementation.
- 5+ years of experience designing and implementing secure, enterprise-wide architectures across cloud, network, identity, and security operations domains,
- Cloud-delivered security architectures (SSE/SASE, including SWG, CASB, FWaaS, ZTNA)
- Zero Trust Architecture (ZTA)
- Cloud security architectures (Microsoft, AWS, Google)
- AI/ML-driven cyber security capabilities and automation
- Endpoint security solutions (EPP, EDR, XDR)
- Vulnerability management and patching automation
- Proven experience designing and implementing hybrid (internal and outsourced) security operations models
- Strong knowledge of managed security service delivery models, including MSSP, MDR, and SOC-as-a-Service (SOCaaS).
- 5+ years of experience with network infrastructure (LAN/WAN, VPN, VLAN) and core components (switches, routers, firewalls)
- 5+ years of experience with SDN and SD-WAN technologies (e.g., Fortinet, Cisco Meraki, Palo Alto)
- 10+ years of experience providing advisory services to senior leadership and executive stakeholders.
- 5+ years of experience leading complex, cross-functional technical initiatives involving multiple internal and external stakeholders.
- Experience developing strategic cyber security and network technology roadmaps and modernization strategies.
- 5+ years of experience advising organizations on adoption of managed security service models (fully outsourced, co-managed, hybrid).
- Preferred certifications include:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CCSP (Certified Cloud Security Professional)
- Other relevant certifications such as CEH, CISA, CRISC
Nice to have:- preferably within Ontario K-12 school boards.
- MITRE ATT&CK, D3FEND, and ATLAS frameworks
- User and Entity Behaviour Analytics (UEBA)
- Penetration testing and automated red teaming
- preferably within Ontario's K-12 education sector.
- Experience establishing governance models and evaluating MSSP performance and service delivery.
- Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred.
- 5+ years' hands-on experience working in the K-12 education sector, with Ontario K-12 school boards, in particular with school board network, network security and cyber security.
Skill Set Requirements:Cyber security, network security and architecture expertise:- 10+ years of experience in cyber security and next-generation network security, with a strong focus on architecture design, integration, strategic planning, and implementation.
- 5+ years of experience designing and implementing secure, enterprise-wide architectures across cloud, network, identity, and security operations domains, preferably within Ontario K-12 school boards.
- 5+ years of experience in advanced network security, including software-defined environments (SDN/SD-WAN), preferably within Ontario K-12 school boards.
- Proven hands-on experience designing, implementing, and integrating the following solutions and technologies:
- Cloud-delivered security architectures (SSE/SASE, including SWG, CASB, FWaaS, ZTNA)
- Zero Trust Architecture (ZTA)
- Cloud security architectures (Microsoft, AWS, Google)
- MITRE ATT&CK, D3FEND, and ATLAS frameworks
- NIST Cybersecurity Framework (CSF) v2 and CIS Controls v8
- AI/ML-driven cyber security capabilities and automation
- Security orchestration, automation, and playbook development
- Endpoint security solutions (EPP, EDR, XDR)
- Advanced threat protection (IDS/IPS, DDoS protection, Network Access Control)
- Identity and access management (passwordless, certificate-based, MFA/2FA)
- Incident response and incident management (IR/IM)
- Vulnerability management and patching automation
- User and Entity Behaviour Analytics (UEBA)
- Penetration testing and automated red teaming
- Operational Technology (OT) security
- Proven experience designing and implementing hybrid (internal and outsourced) security operations models, including:
- Integration and optimization of internal security teams and managed security service providers (MSSPs)
- Security operations architecture in hybrid environments
- Threat detection and incident response in co-managed models
- Integration of SIEM, SOAR, EDR/XDR, and threat intelligence platforms
- Automation and orchestration workflows
- Governance, risk, and compliance in hybrid security operations environments
- Strong knowledge of managed security service delivery models, including MSSP, MDR, and SOC-as-a-Service (SOCaaS).
- Strong knowledge of federated and multi-tenant security architectures.
- Demonstrated ability to evaluate and assess emerging cyber security technologies through pilots and proof-of-concepts.
- Strong knowledge of IoT security and data capture/telemetry mechanisms.
Network Technology:- 5+ years of experience with network infrastructure (LAN/WAN, VPN, VLAN) and core components (switches, routers, firewalls) preferably within Ontario's K-12 education sector.
- 5+ years of experience with SDN and SD-WAN technologies (e.g., Fortinet, Cisco Meraki, Palo Alto) preferably within Ontario's K-12 education sector.
- 3+ years of experience with SSE/SASE technologies (e.g., Netskope, Zscaler, Prisma SASE, Cato).
- 5+ years of experience with network monitoring, traffic analysis, and management tools (e.g., SolarWinds, FortiManager, PRTG, Panorama, Wireshark).
- 3+ years of experience with network telemetry and logging formats (e.g., Syslog, NetFlow, IPFIX).
- 5+ years of experience configuring and troubleshooting network protocols (e.g., MPLS, VPLS, VLAN trunking).
- Experience evaluating emerging network technologies through pilots and proof-of-concepts.
Strategic Advisory and Architecture Leadership:- 10+ years of experience providing advisory services to senior leadership and executive stakeholders.
- 5+ years of experience leading complex, cross-functional technical initiatives involving multiple internal and external stakeholders.
- 5+ years of experience preparing and delivering technical and executive-level documentation (e.g., architecture designs, reports, recommendations, briefings).
- Experience developing strategic cyber security and network technology roadmaps and modernization strategies.
- Experience aligning security and network architectures with federal, provincial, and K-12 regulatory and compliance requirements.
- Strong expertise in secure solution design, including telemetry, monitoring, and metrics frameworks.
- 5+ years of experience advising organizations on adoption of managed security service models (fully outsourced, co-managed, hybrid).
- Experience establishing governance models and evaluating MSSP performance and service delivery.
- Experience delivering training and knowledge transfer to technical teams.
Industry Certifications / Relevant Degrees:- Relevant vendor certifications or equivalent work experience.
- Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred.
- Preferred certifications include:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CCSP (Certified Cloud Security Professional)
- Other relevant certifications such as CEH, CISA, CRISC
Public Sector Experience:- Knowledge of Government of Ontario standards (e.g., GO-ITS) and relevant policies and legislation (e.g., EDSTA).
- 5+ years' hands-on experience working in the K-12 education sector, with Ontario K-12 school boards, in particular with school board network, network security and cyber security.
