Network Security Architect/architecte de sécurité réseau

MDA•Sainte-Anne-de-Bellevue, QC

About The Position

The Network Security Architect is responsible for designing and evolving global secure network infrastructures that support the organization’s business objectives while mitigating network security risks. Reporting to the Manager of Networking and Security, this role supports mission-critical operations across multiple regions and time zones.

Requirements

CISSP plus one or more network‑focused certifications such as CCNP Security, CCIE Security, SANS GIAC.
Minimum 5 years of network security experience.
Proven experience with firewall platforms, next‑generation intrusion detection/prevention systems, secure routing, VPN, operational technology (OT), cloud and zero‑trust networking.
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field; or an associate degree with equivalent professional experience and certifications.
Fluent in both spoken and written French and English.
Deep knowledge of networking protocols, routing, switching, and secure network design.
Experience in designing integration between IT infrastructure and OT systems.
Strong proficiency with firewalls, IDS/IPS, secure web gateways, and network traffic analysis tools.
Hands‑on experience with SIEM integration, endpoint detection and response (EDR), and network anomaly detection.
Familiarity with cloud networking (AWS, Azure).
Experience in designing audio-video enterprise environments.
Experience with CMMC and other relevant security frameworks as they apply to network security.
Understanding of network‑level IAM and privileged access controls (e.g., NAC, 802.1X, RADIUS/TACACS+).
Ability to translate complex technical concepts into clear, actionable guidance for non‑technical stakeholders; strong critical‑thinking and problem‑solving abilities.
Proven track record of leading cross‑functional security projects, driving initiatives across multiple departments, and building high‑performing security teams.
Demonstrated ability to identify, assess, and prioritize risks associated with network architectures, business processes, and technology projects.
Must obtain and hold security clearance at the secret status level, and pass security assessment for the Controlled Goods Program (CGP).

Responsibilities

Design, establish, and implement enterprise‑class network security solutions (firewalls, IDS/IPS, secure routing, VPN, zero‑trust architectures, SD-WAN, cloud networking, SASE) for globally distributed network environments operating 24x7.
Design reliable, high-quality audio-video enterprise systems (digital signage) and architect the supporting network environment to support optimal performance.
Align network security standards, frameworks, and controls with the organization’s business and technology strategy.
Identify current and emerging network‑based threats; design architecture components to detect, deter, and respond to those threats.
Assess existing and proposed network designs for security gaps; recommend and document enhancements, hardening measures, and remediation plans.
Serve as a subject‑matter expert and escalation point for network security incidents; guide investigations and suggest post‑mortem actions.
Mentor members of IT, and network teams; provide guidance on secure network design, implementation, and operations.
Work closely with architects of other domains (cloud, application, cyber security) to ensure integrated, end‑to‑end security across the enterprise.