Jobs in Canada

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 1 hour ago
GC
COORDONNATEUR·RICE DE LOCALISATION - CHINOIS TRADITIONNEL/Localization Coordinator, Traditional Chinese
Game Companies
Montreal, QC
- Full-time
Encadrer le soutien aux outils et au pipeline, notamment la création de la documentation de processus, la supervision des tests de fonctionnalités et la synthèse des retours recueillis.
Added 1 hour ago
II
Quality Engineer
Intero Integrity
Toronto, ON
- Full-time
Lead root cause analysis on failures and non-conformances, and follow through with corrective and preventive actions (NCR / CAPA).
Added 1 hour ago
N
POS Integration & Implementation Engineer – Retail Data
nugget.ai
Mississauga, ON
- Contract
We are seeking an experienced POS Integration & Implementation Engineer to lead technical integrations between Daisy Retail and third-party POS systems.
Added 6 hours ago
FR
Project Manager
Foresight Recruitment Group
Toronto, ON · Greater Toronto Area, Canada
- Full-time
Our client is an established general contractor with a strong pipeline of work and is looking for a Project Manager to lead construction projects from preconstruction through to completion.
Added 7 hours ago
1
Founding Enterprise Account Executive (Outbound & Growth) - Novilo
15Rock
Toronto, ON
- Full-time
Technical & Executive Discovery: Lead unscripted first-call conversations and live RFP walkthroughs with Managing Partners, Proposal/Capture Leads, and CISOs - credibly explaining why…
Added 7 hours ago
O
Lead Principal Platform Software Engineer
Oracle
Toronto, ON
- $123,900 to $203,600 CAD / year
Provides technical guidance, domain expertise, and coaching in software architecture decisions and best practices that drive key organizational decisions, including industry standards and…
Added 9 hours ago
IS
DevOps & Cloud Infrastructure Engineer
Idealogical Systems Inc
Markham, ON
- Full-time
…office networking. This role suits someone who enjoys broad technical ownership and can work independently while collaborating closely with…
Added 10 hours ago
CW
B2B Sales Executive
City Wide Facility Solutions
Coquitlam, BC
- $50,000 to $100,000 CAD / year
- Full-time
Develop and manage your sales territory to build a consistent pipeline of opportunities
Added 10 hours ago
CW
B2B Sales Executive
City Wide Facility Solutions
Vancouver, BC
- $50,000 to $100,000 CAD / year
- Full-time
Develop and manage your sales territory to build a consistent pipeline of opportunities
Added 10 hours ago
CW
B2B Sales Executive
City Wide Facility Solutions
Burnaby, BC
- $50,000 to $100,000 CAD / year
- Full-time
Develop and manage your sales territory to build a consistent pipeline of opportunities
Added 11 hours ago
GC
TEXTURE & LOOKDEV SUPERVISOR - Hybride VFX
Game Companies
Montreal, QC
- Full-time
…development team. In this dual leadership and hands-on role, you will lead shows, build and refine pipeline setups and workflows, help with crewing, oversee team performance and growth, as…
Added 11 hours ago
GC
Senior DevOps Engineer - EA Sports Technology
Game Companies
Vancouver, BC
- Full-time
You will partner with the Operations Development Director and Technical Lead to estimate and complete projects and deliver excellent results. You have demonstrated the ability to work with…
Added 11 hours ago
GC
Advanced DevOps Engineer - EA Sports Technology
Game Companies
Vancouver, BC
- Full-time
The EA SPORTS™ Technical Team is seeking an experienced DevOps Engineer to join the organization. This role is ideal for someone with a strong passion for technology and deep experience…
Added 11 hours ago
HP
Project Manager
HighView Partners
Calgary, AB
- $89,000 to $123,000 CAD / year
- Full-time
The position is based in Calgary, Alberta, with a flexible hybrid arrangement requiring a minimum of three days per week in the office
Added 12 hours ago
AE
Intermediate Aquatics Biologist
AJM Environmental
Calgary, AB
- Full-time
Technical report development (you may be asked to provide 2 samples as lead author);
Added 12 hours ago
DG
AI Data Lead
Doane Grant Thornton LLP
Toronto, ON
- Full-time
This role is ideal for an experienced technical professional who can use their hands-on data engineering expertise, their knowledge of Microsoft systems, and their collaborative nature to…
Added 13 hours ago
KT
Account Executive – B2B Technology Solutions
KSPACE TECHNOLOGIES HQ
Remote, Canada
- $45,000 to $55,000 CAD / year
- Full-time
- Remote
With operations across multiple international markets, Kspace Technologies supports organizations seeking reliable technology implementation, modernization, and ongoing technical expertise.
Added 13 hours ago
S
Maintenance Manager
Sanofi
Toronto, ON
- Full-time
…Our deep understanding of the immune system – and innovative pipeline – enables us to invent medicines and vaccines that treat and protect millions of people around the world. Together, we…
Added 13 hours ago
CE
Labourer
Canadian Energy Insight Inc.
Lloydminster, AB
- Full-time
This role will work in hands-on capacity in a fast-paced team environment, supporting various projects completing pipeline/facility decommissioning or maintenance throughout the…
Added 13 hours ago
T
Senior Manager, Engineering
TD
Toronto, ON
- Full-time
…Google orgs, and AWS accounts, and is familiar with Cloud-based pipeline development and related DevSecOps…
Added 13 hours ago
ES
Advanced DevOps Engineer - EA Sports Technology
EA SPORTS
Vancouver, BC
- Full-time
The EA SPORTS™ Technical Team is seeking an experienced DevOps Engineer to join the organization. This role is ideal for someone with a strong passion for technology and deep experience…
Added 13 hours ago
WI
Lead, Global People Analytics
WSP in Canada
Moncton, NB
- Full-time
Bring clarity to complex workforce questions and help shape the future of global People Analytics at WSP. As Lead, Global People Analytics, you will partner with HR and business leaders to…
Added 13 hours ago
WI
Lead, Global People Analytics
WSP in Canada
Halifax, NS
- Full-time
Bring clarity to complex workforce questions and help shape the future of global People Analytics at WSP. As Lead, Global People Analytics, you will partner with HR and business leaders to…
Added 13 hours ago
WI
Lead, Global People Analytics
WSP in Canada
Montreal, QC
- Full-time
Bring clarity to complex workforce questions and help shape the future of global People Analytics at WSP. As Lead, Global People Analytics, you will partner with HR and business leaders to…
Added 13 hours ago
WI
Lead, Global People Analytics
WSP in Canada
Winnipeg, MB
- Full-time
Bring clarity to complex workforce questions and help shape the future of global People Analytics at WSP. As Lead, Global People Analytics, you will partner with HR and business leaders to…

Celestica International LP

Lead Network & Security Architect 1

Toronto, ON, Canada

Salary + Short Term Incentive = 125,000 - 199,000 CAD

Apply on careers.celestica.com About employer

Applications open in a new tab.

Job details

Pay: Salary + Short Term Incentive = 125,000 - 199,000 CAD
Experience: Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.
Posting language: English
Posted: Oct 6, 2026

Original job description

Req ID: 141212 Region: Americas Country: Canada State/Province: Ontario City: Toronto

Summary

We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers (including Silicon Valley, Richardson, Thailand, and other global hubs).

The successful candidate will be responsible for implementing and maintaining a completely isolated, air-gapped network environment that operates independently of standard corporate IT networks. You will manage complex secure access paths, isolated VLAN provisioning, private full-mesh SD-WAN overlays, and a multi-tiered global data package replication and distribution system. You will also serve as the key enablement architect, helping project teams quickly spin up new project-specific instantiations of the RDL network model while adhering to strict security constraints.

Core Responsibilities

Architectural Implementation & Governance

Deploy Reference Architecture: Standardize and implement the RDL reference design across all global HPS design locations (San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang, Chennai and future locations).
Support New Instantiations: Act as the primary technical design authority to spin up new RDL network instances (allocating subnets, configuring dedicated VLANs, establishing local jump hosts, and defining user authentication parameters) for upcoming HPS design projects.
Strict Constraint Enforcement: Maintain absolute isolation of the RDL environments. Ensure zero direct or indirect public internet connectivity and guarantee that out-of-scope systems or agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow Agents, ClearPass NAC, and Windows Domain joins) are strictly excluded from the lab network.

Network Infrastructure & Security

SD-WAN & Routing: Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.
Secure Firewalling: Configure and administer enterprise-grade firewalls (Checkpoint 3980) protecting the perimeter of each localized lab, defining strict ingress/egress filtering rules.
Switching & Segmentation: Manage core and access layer switches (Cisco Catalyst 9400/9200 series, Celestica DS2000, ES1500 switches) to segment the RDL into logical, multi-tenant VLAN environments - specifically separating Export Controlled and Non-Export Controlled network zones.

Identity and Remote Access Management

Remote Customer Access: Oversee the implementation and administration of CyberArk vPAM (Virtual Privileged Access Management) for remote customer connections.
Corporate Remote Access: Configure and maintain Zscaler ZTNA (Zero Trust Network Access) and App Connectors to terminate connections securely on Linux-based local jump hosts.
Decentralized Authentication: Design and maintain a secure user management protocol on jump hosts and local RDL nodes. As the RDL operates without Windows Active Directory, you will define standard operating procedures for the manual/programmatic creation of local system accounts and localized role-based access control (RBAC).

Secure Data Package Management & DevOps Repo Architecture

Repository Architecture: Maintain the multi-tier secure data distribution system:
- IT Repository Server: Internet-facing ingestion nodes (running on Hyper-V/Dell PowerEdge) to securely pull packages, drivers, and applications.
- Global Repository Server: The middle-layer relay that acts as a secure, scanned transit point between the corporate IT network and the isolated RDL network.
- RDL Local Repository Server: Localized instances inside the labs that pull from the Global Repo and host files locally over HTTP/HTTPS at /var/www/html/repo/.
Workflow Automation: Ensure seamless, secure, programmatically validated transfer of "transfer bundles" containing operating system packages (Rocky, Ubuntu, CentOS, etc.) across the air gap.
Security Scans & Compliance: Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers, ensuring all packages undergo integrity checks before reaching the inner RDL networks.

Knowledge/Skills/Competencies

Required Technical Skills

Hardware & OS Competencies: Hands-on experience with Checkpoint Firewalls (Checkpoint 3980 preferred), Cisco Catalyst 9400/9200 switches, and SilverPeak SD-WAN solutions.
Security & Identity Tools: Expert-level understanding of CyberArk (PVWM/vPAM) and Zscaler ZTNA/Zscaler App Connectors.
Virtualization & Systems: Solid administration experience in VMware vSphere Enterprise and/or Microsoft Hyper-V running on bare-metal systems (e.g., Dell PowerEdge R670).
Linux Administration: Strong proficiency with Linux environments (Rocky Linux, Ubuntu, CentOS) for jump host configuration and secure HTTP/HTTPS local web repository servers (Nginx/Apache).
Network Segmentation & Protocols: Expert in VLAN tagging, inter-VLAN routing, subnetting, IP address management (IPAM), and secure file transfer protocols.
Automated Data Pipelines: Familiarity with script-based file synchronization and automated extraction/integrity validation mechanisms (e.g., hashing, checksums) for software deployment across isolated boundaries.

Strongly Preferred Certifications

Checkpoint Certified Security Expert (CCSE) or Master (CCSM)
Cisco Certified Network Professional (CCNP) - Enterprise or Security
CyberArk Certified Defender or Sentry
Certified Information Systems Security Professional (CISSP)

Soft Skills & Working Style

Detailed Documentation: Proven track record of generating flawless High-Level Designs (HLD) and Low-Level Designs (LLD), block diagrams, and standard operating procedures (SOPs).
Strategic Problem Solver: Comfortable working around strict operational boundaries where typical modern agents and automated tools are banned for security compliance.
Cross-functional Partner: Ability to collaborate closely with HPS Design Engineers, Project Managers, Corporate IT Security, and external Customers.
Financial Stewardship: Ability to work closely with procurement to specify, justify, and size bill of materials (BOM) for both upgrading existing sites and provisioning new infrastructure.

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Salary

The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. A comprehensive benefits package is offered in addition to this range.

The range described in this posting is an estimate by the Company, and may change based on several factors, including but not limited to a change in the duties covered by the job posting, or the credentials, experience or geographic jurisdiction of the successful candidate.

Salary + Short Term Incentive = 125,000 - 199,000 CAD

Typical Education and Experience

Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related technical field.
Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

Celestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. This policy applies to hiring, promotion, discharge, pay, fringe benefits, job training, classification, referral and other aspects of employment and also states that retaliation against a person who files a charge of discrimination, participates in a discrimination proceeding, or otherwise opposes an unlawful employment practice will not be tolerated. All information will be kept confidential according to EEO guidelines. Celestica is an E-Verify employer.

COMPANY OVERVIEW:

Celestica, Inc. (NYSE: CLS; TSX: CLS) is a technology leader dedicated to driving customer success and market advancements. With deep expertise in design, engineering, manufacturing, supply chain, and platform solutions, Celestica enables critical data center infrastructure for AI, cloud, and hybrid cloud and advances technologies in high-growth markets. With a talented team and a strategic global network, Celestica helps its customers achieve competitive advantages.

Today, Celestica delivers innovative supply chain solutions globally to customers in strategic two operating and reporting segments: Advanced Technology Solutions (ATS) and Connectivity and Cloud Solutions (CC):

ATS: This segment serves customers in complex, regulated and high-reliability markets such as Industrial & Smart Energy, Aerospace & Defense, Semiconductor Capital Equipment, and HealthTech. It is engineering led, with deep expertise in design, manufacturing and lifecycle solutions.

CCS: This segment focuses on high-performance technology solutions and services for the data center, serving hyperscalers, digital native customers and enterprises. Celestica's Platform Solutions offering provides innovative and customizable computing, storage and networking solutions enabling AI-driven growth.

Built on a legacy of trust and performance, Celestica has earned its reputation by delivering results in complex and fast-changing markets. Celestica exceeds customer expectations by identifying trends and staying ahead of the curve. Backed by comprehensive capabilities and a global network across North America, Europe and Asia, Celestica helps customers gain competitive advantage with the quality, flexibility and resiliency they need to respond quickly to shifts in demand. Guided by a bold vision to accelerate market advancements, Celestica delivers innovative solutions and technologies that turn complexity into opportunity. Anchored in teamwork and commitment, Celestica strives to be the most trusted partner to its customers and colleagues worldwide.

Celestica would like to thank all applicants, however, only qualified applicants will be contacted. Celestica does not accept unsolicited resumes from recruitment agencies or fee based recruitment services.

Apply on careers.celestica.com About employer

More about this job

Responsibilities

The Lead Network & Security Architect will design, deploy, and manage isolated, air-gapped network environments across global design centers. This role involves implementing secure access paths, SD-WAN overlays, and multi-tiered data replication systems while enforcing strict security constraints.

Requirements

Candidates must have at least 8 years of experience in network architecture with a focus on securing isolated environments. A bachelor's degree in a technical field is required, along with expertise in firewalls, switching, identity management, and Linux administration.

Skills

Network Architecture
Security Architecture
Checkpoint Firewalls
Cisco Catalyst Switches
SD-WAN
CyberArk
Zscaler ZTNA
Linux Administration
VMware vSphere
Microsoft Hyper-V
VLAN Tagging
IPAM
Network Segmentation
Data Pipeline Automation
Technical Documentation
Project Management

Visa sponsorship

Not detected in the job text

Keywords

Network Architecture
Security Architecture
Air-gapped Networks
SD-WAN
Checkpoint 3980
Cisco Catalyst
CyberArk
Zscaler ZTNA
VMware vSphere
Hyper-V
Linux
Rocky Linux
Ubuntu
CentOS
VLAN
IPAM
Nginx
Apache
DevOps
CCSE
CCSM
CCNP
CISSP
High-Level Design
Low-Level Design
Data Center Infrastructure
Hardware Platform Solutions
Network Security
Identity Management
Automation

Report this job

Work requirements

Jobs in Canada