Senior IP Network Architect

Telesat • Ottawa, ON

10d • Onsite

About The Position

Telesat (Nasdaq and TSX: TSAT) is a leading global satellite operator, providing reliable and secure satellite-delivered communications solutions worldwide to broadcast, telecommunications, corporate and government customers for over 55 years. Backed by a legacy of engineering excellence, reliability and industry-leading customer service, Telesat has grown to be one of the largest and most successful global satellite operators.
Telesat Lightspeed, our revolutionary Low Earth Orbit (LEO) satellite network, scheduled to begin service in 2027, will revolutionize global broadband connectivity for enterprise and Government users by delivering a combination of high capacity, security, resiliency and affordability with ultra-low latency and fiber-like speeds. Telesat is headquartered in Ottawa, Canada, and has offices and facilities around the world.
The company’s state-of-the-art Satellite fleet consists of 12 GEO satellites, the Canadian payload on ViaSat-1 and one LEO 3 demonstration satellite. For more information, follow Telesat on X and LinkedIn or visit www.telesat.com
We are seeking a highly skilled and experienced Senior IP Network Architect to join our dynamic team. As a Senior IP Network Architect, you will play a pivotal role in designing, implementing, testing and optimizing our organization's IP network infrastructure. Your deep knowledge and expertise in IP Routing, network appliances, firewalls, SASE, SDWAN and IPSEC VPN will be essential in driving the stability, security, and efficiency of our network operations.
The Senior IP Network Architect is a Subject Matter Expert (SME) on all aspects of the LEO Network design and works with other LEO teams within Telesat and external contractors to ensure designs, implementation decisions, validation plans and documentation reflect the business requirements and objectives of the LEO program.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field or equivalent work experience.
• 10+ years of progressive experience in designing and architecting IP networks, with a focus on routing, firewalls, SDWAN, IPSEC VPNs, and deep packet inspection.
• Understanding of Metro Ethernet Forum (MEF) standards and objectives as they relate to Carrier Ethernet Services.
• Professional certifications such as CCIE, CCNP, CISSP, FCSS/NSE7 or equivalent are highly desirable.
• In-depth understanding and experience of direct Internet services to clients. This includes knowledge of best practices for IP transit, BGP peering, policies and DDoS.
• Expertise in network appliance evaluation, selection, testing and integration.
• In-depth understanding of security principles and practices as they relate to network architecture.
• Proven experience with network troubleshooting, performance optimization, and security enhancement.
• Strong knowledge of industry-leading routing protocols, firewall technologies, SDWAN solutions, IPSEC VPNs, and deep packet inspection methods. Experience with Fortinet FortiGate firewalls including SDWAN and IPSEC is highly desirable.
• Experience with network automation and scripting using tools such as Python, Ansible, or similar.
• Leadership experience and the ability to mentor junior team members.
• Excellent communication (verbal, written, presentation) and interpersonal skills.
• Comfortable leading meetings and able to communicate issues and trends to senior management and other groups at the appropriate level of detail.
• Communicate well with own team and across organizational boundaries to ensure the successful completion of shared goals.
• The incumbent will have significant influence on the architecture of the LEO network, vendors involved, and development and dissemination of reference materials for the LEO program. They will need to make recommendations and decisions based on their experience.
• Working conditions are generally comfortable typical of an office environment.
• Occasional international travel is anticipated.
• The successful candidate must be able to work in Canada and obtain clearance under the Canadian Controlled Goods program (CGP) and Reliability.

Nice To Haves

• Familiarity with test tools (Ixia and Spirent) is desirable.
• Experience with Fortinet FortiGate firewalls including SDWAN and IPSEC is highly desirable.

Responsibilities

• Lead the design of complex IP network architectures, considering business requirements, scalability, and performance.
• Possess a strong command of network platforms and appliances, including routers, switches, firewalls, SDWAN controllers, IPSEC VPN gateways, and deep packet inspection tools.
• Lead and design complex Direct Internet Access and Business Internet Access services for clients, considering business requirements, scalability, security and performance.
• In coordination with the Network and System Engineering teams attend, contribute and produce materials for internal and external design and system engineering reviews for Network Engineering related activities.
• Prepare and deliver materials including presentations, reference documentation and test strategies for network equipment deployment and operation.
• Develop and oversee plans including product idea investigations, proof of concept, service validation and product demonstrations in Telesat labs.
• Maintain a deep understanding of industry standards and protocols related to segment routing, such as IS-IS, BGP, and MPLS.
• Maintain familiarity with transport network technologies including Segment Routing (SR-MPLS) and Software Defined Networking (SDN).
• Assess, evaluate, and recommend network platforms and appliances, hardware, and software solutions to meet business requirements.
• Represent the Network Engineering team by documenting and delivering network requirements to hardware and software development teams specifically in the areas of customer facing MEF 3.0 interface and networking design support requirements.
• Design and implement secure network solutions with a focus on firewall configurations, IPSEC VPNs, and deep packet inspection techniques.
• Ensure compliance with industry standards and best practices for network security.
• Continuously monitor network performance, analyzing metrics and conducting assessments to identify bottlenecks, vulnerabilities, and areas for improvement. Develop strategies to optimize network performance, enhance security, and ensure high availability.
• Collaborate with cross-functional teams to enhance network performance and reliability.
• Experience with network automation and scripting using tools such as Python, Ansible, or similar.
• Stay current with industry trends, emerging technologies, and best practices related to IP networking and network appliances.
• Proactively recommend and lead the adoption of new technologies that align with business goals.
• Collaborate with vendors to evaluate products, negotiate contracts, and ensure the successful deployment and operation of network appliances.
• Provide mentorship and guidance to junior network engineers, sharing your expertise and promoting professional growth.
• Lead in-depth troubleshooting and root cause analysis of network issues, providing timely and effective resolutions.
• Lead the creation of test cases and validate by testing solutions around IP Routing, network appliances, firewalls, SASE, SDWAN and IPSEC VPN. Familiarity with test tools (Ixia and Spirent) is desirable.

Benefits

• At Telesat, we take pride in being an equal opportunity employer that values equality in the workplace. We are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree