Role overview

Job Title: Technology Architect (SecOps) - Senior
Location: Toronto, Ontario
Work Model: Hybrid
Duration: 12 months
Security Clearance: CRJMC
Submission Deadline: 2026-07-08, 12:00 p.m. EST

Must Haves

Network and Network Security 25%

5+ years of experience with network infrastructure (LAN/WAN, VPN, VLAN) and network hardware (switches, routers, firewalls)
5+ years of experience with software-defined networking technologies (SDN/SD-WAN) (e.g., Fortinet, Meraki, Palo Alto, Aruba)
3+ years of experience supporting Ontario K 12 school board network environments (WAN, LAN, Wi-Fi, internet delivery)
2+ years of experience with network monitoring and management tools (e.g., SolarWinds, FortiManager, Panorama)
2+ years of experience with traffic analysis and diagnostic tools (e.g., PRTG, Wireshark)
2+ years of experience working with network telemetry and logging formats (e.g., Syslog, IPFix, NetFlow)
2+ years of experience configuring and troubleshooting network protocols (e.g., MPLS, VPLS, VLAN Trunking Protocol)
Experience conducting network performance analysis, load testing, and risk assessments
Experience evaluating emerging network technologies through pilots and proof-of-concepts
Experience integrating networking and security architectures (e.g., SASE, ZTNA, NDR)

Cyber Security Expertise 25%

10+ years of experience in cyber security and next-generation network security
5+ years of experience implementing enterprise security architectures and automation workflows, preferably within Ontario K 12 environments
Proven experience with:
SSE/SASE architectures (SWG, CASB, FWaaS, ZTNA)
Endpoint security (EPP, EDR, XDR)
Advanced threat protection (IPS, IDS, NAC, DDoS protection)
Identity and access management (passwordless, MFA, certificate-based authentication)
Incident Response and Incident Management (IR/IM) platforms
Automated vulnerability management and patching solutions
UEBA and threat behaviour analytics
Penetration testing and automated red teaming tools
Operational Technology (OT) security and IT/OT convergence
AI/ML-enabled security monitoring, analytics, and automation
Strong understanding of layered security models and frameworks (e.g., NIST CSF v2, CIS Controls v8)
Familiarity with MITRE ATT&CK, D3FEND, and ATLAS frameworks
Experience evaluating emerging cybersecurity technologies through pilots and proof-of-concepts

Security Operations and Threat Detection 25%

Extensive experience managing and optimizing SecOps platforms, including SIEM, SOAR, EDR/XDR, CASB, IDR, and vulnerability management tools
Strong experience in detection engineering, including development, tuning, and lifecycle management of threat detection use cases across identity, endpoint, email, network, and cloud environments
Proven experience in incident response, including deep-dive investigations, root cause analysis, and escalation management
Experience supporting MSSP onboarding, transition planning, and operational readiness in multi-organization environments
Experience designing and implementing hybrid security operations models
Expertise in telemetry ingestion, log normalization, and real-time correlation of security events
Familiarity with SOC/NOC tools, including network traffic analyzers, performance monitoring, and configuration management solutions

Training, Collaboration & Stakeholder Engagement 10%

5+ years of experience presenting to senior and executive management and external stakeholders
5+ years of experience coordinating and leading complex, multi-stakeholder technical initiatives
5+ years of experience preparing technical documentation and communications
5+ years of experience delivering cybersecurity training and upskilling programs to IT and security teams
Experience supporting cross-organizational collaboration and knowledge sharing

Industry Certifications / Relevant Degrees 10%

Bachelor s degree in computer science, cyber security, or a related field
Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred
Relevant vendor certifications or equivalent work experience
Industry-recognized security certifications preferred:
CISSP
CISM
CCSP
CEH
CISA
CRISC

Public Sector Experience 5%

Knowledge of Government of Ontario standards (e.g., GO-ITS) and applicable legislation (e.g., EDSTA)
5+ years of experience working in the Ontario public sector, with at least 3+ years supporting K 12 school board network and cybersecurity environments

Description / Responsibilities / Skills

Project Description

The Cyber Resilience Strategy and Oversight Services (CRSOS) unit provides strategic vision, leadership and support for the development and implementation of modernized I&IT solutions in the public education sector and associated stakeholders.

Responsibilities of the CRSOS unit include:

Developing vision and implementation strategy for evolving network technology platforms in the K-12 sector
Working closely with stakeholder partners to assist in achieving sector and ministry strategic goals and objectives through innovative network and network security solutions
Acquiring intelligence for the sector through developing and managing relationships with sector organizations and network/network security organizations such as telecommunications service providers and network technology and service providers

Important Notes

The client may exercise its option(s) to extend the Statement of Work (SOW) beyond October 5, 2027, provided that the Master Service Agreement is extended.
This procurement will include the option to extend the end date of the contract if there are unused effort days and no change to the ceiling amount, if the need arises.
This contract will require the consultant to work up to 2 days per week in the office and the remaining days working remotely.
Travel Requirements The resource must be available to travel the same day or overnight in Ontario, as required. For this role, travel to school board locations across the province will be required. Travel expenses will be reimbursed according to the Ontario Travel, Meal and Hospitality Expenses Directive.

Responsibilities

The Senior Technology Architect role requires deep knowledge, expertise, and experience in cyber security solutions, security operations (SecOps) solutions and practices, automation and artificial intelligence (AI) in cyber security, managed security services, and next-generation network security.

The resource also requires hands-on experience in analyzing, configuring, implementing, and troubleshooting cyber security models, automation solutions and threat detection, particularly within the education sector, preferably in the Ontario K 12 school board environment.

Responsibilities include:

Leading operational cyber defense guidance, incident coordination, monitoring maturity, and integration with MSS/MDR providers
Delivering solution guidance, technical training, and implementation support for next-generation network and security technologies
Providing technical guidance, solution delivery, training, and implementation support for hybrid cyber security operating models integrating internal teams and Managed Security Service Providers (MSSPs)
Providing subject matter expertise in Network Operations Centre (NOC) and Security Operations Centre (SOC) technologies and tools
Managing and optimizing SecOps platforms (SIEM, SOAR, EDR/XDR, CASB, IDR, vulnerability management)
Leading incident investigation and response activities
Conducting baseline reviews, vulnerability triage, and collaborating with MSSPs
Driving MSS service optimization
Delivering training, operational guidance, and stakeholder engagement across boards
Presenting technical findings, risk insights, and strategic recommendations to senior leadership and external stakeholders
Providing regular status updates and reporting on assigned deliverables, milestones, and performance metrics
Applying collaborative approach to solution definition, development, and implementation
Aligning with industry and legislative advancements at the federal, provincial/local level (e.g., EDSTA)
Delivering on other duties as assigned

This work involves working in close partnership with various government departments, the K-12 education sector, telecommunications providers, and network and cyber security technology vendors to develop tailored approaches and implementation plans.

To support various stakeholders, the resource must be available to perform hands-on configuration, troubleshooting and training at the client site. Therefore, the resource must be available to travel same day or overnight in Ontario, as needed.