Find work in Canada.

323,948 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 1 min ago
CE
Senior Coordinator, OT SCADA
Cenovus Energy
Calgary, AB
- Full-time
…standards compliance, data integrity, risk management, and MOC/project execution alignment for SCADA and OBS assets while acting as the primary interface between Operations, Engineering,…
Added 1 min ago
B
Senior Business Analyst (Contract) (Hybrid)
Broadridge
Markham, ON
- $55 to $65 CAD / hour
- Full-time
…products/services and provide functional leadership in the design and development of software…
Added 13 mins ago
CC
Senior Manager, Salesforce Platform Architecture & Development
Canadian Cancer Society
Toronto, ON · Montreal, QC · Quebec, QC · Prince George, BC · Vancouver, BC · Kelowna, BC · Halifax, NS · St. John's, NL · Calgary, AB
- Full-time
5+ years of hands-on experience with Salesforce architecture, development, and operations across major Clouds (Sales, Service, Experience, Marketing) and custom applications.
Added 19 mins ago
LH
Senior Program Manager
LGI Healthcare Solutions
Montreal, QC
- Full-time
For over 40 years, LGI Healthcare Solutions has built software that healthcare organizations depend on. AI is now at the heart of that work - not as a destination, but as the engine behind…
Added 19 mins ago
RB
Water Resources Engineer
Recruitment By Design
Burnaby, BC
- $104,000 to $157,000 CAD / year
- Full-time
Lead development, and application of mine water quality models using GoldSim software with
Added 19 mins ago
ZI
Mergers and Acquisitions Business Development Team Lead – SaaS
ZenaTech Inc.
Toronto, ON
- Full-time
As Team Lead, you will play a critical role in leading our SaaS M&A pipeline: mentoring a team of analysts to identify acquisition opportunities among SaaS companies, building and…
Added 32 mins ago
GE
Business Analyst
GFL Environmental Inc.
Vaughan, ON
- Full-time
Lead and execute Joint Application Development (JAD) sessions to elicit both functional and non-functional requirements.
Added 49 mins ago
N
Senior Implementation Consultant
Nakisa
Montreal, QC
- Full-time
Nakisa is a global leader in AI-powered enterprise software for Human Resources, Financial Management, and Commercial Real Estate (CRE). Our cloud platform powers mission-critical…
Added 1 hour ago
Database & Geographic Information System (GIS) Geologist, Special Projects
Blue Moon Metals
Canada
Blue Moon Metals is seeking a Lead Database & Geographic Information System (GIS) Geologist to oversee geological databases, GIS systems, and digital data workflows supporting exploration…
Added 1 hour ago
Senior Manager - Software Development
Scotiabank
Toronto, ON
Provide technical expertise, guidance, advice and knowledge transfer to team members on all aspects of application development for assigned applications or technology.
Added 1 hour ago
R
Product Marketing Manager
Rewind
Remote, Canada
- $116,000 to $140,000 CAD / year
- Full-time
- Remote
…encourage team members to think creatively, take ownership, and lead improvements. Your ideas and actions drive our…
Added 1 hour ago
DC
Team Leader, Real Property Management
Defence Construction Canada
Yellowknife, NT
- Full-time
Complete complex real property project work (e.g. real property studies and asset assessments, facility reviews, lease and land acquisition guidance, technical reviews, strategic plans,…
Added 1 hour ago
R
Planner / Scheduler
Raise
Toronto, ON · North York, ON
- Full-time
Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.
Added 1 hour ago
A
Senior Instrumentation Control and Electrical Engineer
AtkinsRéalis
Mississauga, ON
- Full-time
…provides an exciting opportunity to contribute to the design, development, testing, commissioning, and field deployment of specialized nuclear tooling systems used in reactor refurbishment…
Added 1 hour ago
A
Intermediate Planner
AtkinsRéalis
Mississauga, ON
- Full-time
Analyze schedules and communicate key findings to the Lead Planner, Project Controls Manager, and Project Manager.
Added 1 hour ago
S
Lead Business Consultant, Investment Operations
SimCorp
Toronto, ON
- Full-time
Join some of the most innovative thinkers in FinTech as we lead the evolution of financial technology. If you are an innovative, curious, collaborative person who embraces challenges and…
Added 1 hour ago
IS
Intermediate Infrastructure Construction Calculator
IBW Surveyors
ON
- Full-time
…quality control, and technical analysis. Working closely with Project Managers, Drafting Team Lead, and field crews, you will prepare layout data, verify design information, calculate…
Added 1 hour ago
T
Business Application Specialist
TD
Toronto, ON
- Full-time
…opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been…
Added 1 hour ago
T
Manager Tech Delivery / Partner Mgmt
TD
Toronto, ON
- Full-time
Communicate business vision / goal and portfolio priorities to team members (e.g. Application Owners / Development Managers, Business Systems Analysis, Platform / Service and/or Technology…
Added 2 hours ago
S
Senior Project Manager - Transportation Engineering & Planning
Stantec
Ottawa, ON
- Full-time
…beyond. Driven by data, innovation, and grounded in real world applications, our plans inspire people with a spectrum of work that includes planning for parking, transit, pedestrian safety,…
Added 2 hours ago
Curator of Education and Visitor Experience (Historical Archival Cultural Officer 3)
The Government of Nova Scotia
Halifax, NS
Closing Date: 21-Oct-26 (Applications are accepted until 11:59 PM Atlantic Time)
Added 3 hours ago
IF
Executive Assistant, Distribution, GBRS
iA Financial Group
Toronto, ON · Montreal, QC · Quebec, QC
- Full-time
Is comfortable using digital tools and social media (e.g., LinkedIn) and is eager to learn and leverage new technologies, software, or applications (e.g., Salesforce);
Added 3 hours ago
LC
Engineer - Project
Linamar Corporation
Guelph, ON
- Full-time
Intermediate to advanced proficiency in all applicable software applications (i.e. Microsoft Office including Project, AutoCAD, SolidWorks).
Added 3 hours ago
SA
Applications Product Owner
Stelumar Advanced Manufacturing Inc.
Canada
- Full-time
…with a particular focus on scalability and efficiency. The Applications Product Owner will have full ownership of ERP (Odoo) system performance, leading multiple workstreams independently…
Added 3 hours ago
IE
Analyst, Business
IMAX Enhanced | Streaming & Consumer Technology
Mississauga, ON
- Full-time
With our global team spanning North America, Europe, and Asia, IMAX brings together proprietary software, world-class architecture, and cutting-edge technology with deep industry expertise.…

Celestica

Lead Network & Security Architect 1

Toronto, ON, Canada

Salary + Short Term Incentive = 125,000 - 199,000 CAD · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: Salary + Short Term Incentive = 125,000 - 199,000 CAD
Job type: Full-time
Apply by: Nov 5, 2026
Experience: Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.
Posting language: English
Posted: Oct 6, 2026

Original job description

Req ID: 141212

Region: Americas

Country: Canada

State/Province: Ontario

City: Toronto

Summary

We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers (including Silicon Valley, Richardson, Thailand, and other global hubs).

The successful candidate will be responsible for implementing and maintaining a completely isolated, air-gapped network environment that operates independently of standard corporate IT networks. You will manage complex secure access paths, isolated VLAN provisioning, private full-mesh SD-WAN overlays, and a multi-tiered global data package replication and distribution system. You will also serve as the key enablement architect, helping project teams quickly spin up new project-specific instantiations of the RDL network model while adhering to strict security constraints.

Core Responsibilities

Architectural Implementation & Governance
Deploy Reference Architecture: Standardize and implement the RDL reference design across all global HPS design locations (San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang, Chennai and future locations).
Support New Instantiations: Act as the primary technical design authority to spin up new RDL network instances (allocating subnets, configuring dedicated VLANs, establishing local jump hosts, and defining user authentication parameters) for upcoming HPS design projects.
Strict Constraint Enforcement: Maintain absolute isolation of the RDL environments. Ensure zero direct or indirect public internet connectivity and guarantee that out-of-scope systems or agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow Agents, ClearPass NAC, and Windows Domain joins) are strictly excluded from the lab network.
Network Infrastructure & Security
SD-WAN & Routing: Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.
Secure Firewalling: Configure and administer enterprise-grade firewalls (Checkpoint 3980) protecting the perimeter of each localized lab, defining strict ingress/egress filtering rules.
Switching & Segmentation: Manage core and access layer switches (Cisco Catalyst 9400/9200 series, Celestica DS2000, ES1500 switches) to segment the RDL into logical, multi-tenant VLAN environments - specifically separating Export Controlled and Non-Export Controlled network zones.
Identity and Remote Access Management
Remote Customer Access: Oversee the implementation and administration of CyberArk vPAM (Virtual Privileged Access Management) for remote customer connections.
Corporate Remote Access: Configure and maintain Zscaler ZTNA (Zero Trust Network Access) and App Connectors to terminate connections securely on Linux-based local jump hosts.
Decentralized Authentication: Design and maintain a secure user management protocol on jump hosts and local RDL nodes. As the RDL operates without Windows Active Directory, you will define standard operating procedures for the manual/programmatic creation of local system accounts and localized role-based access control (RBAC).
Secure Data Package Management & DevOps Repo Architecture
Repository Architecture: Maintain the multi-tier secure data distribution system:

IT Repository Server: Internet-facing ingestion nodes (running on Hyper-V/Dell PowerEdge) to securely pull packages, drivers, and applications.
Global Repository Server: The middle-layer relay that acts as a secure, scanned transit point between the corporate IT network and the isolated RDL network.
RDL Local Repository Server: Localized instances inside the labs that pull from the Global Repo and host files locally over HTTP/HTTPS at /var/www/html/repo/.

Workflow Automation: Ensure seamless, secure, programmatically validated transfer of "transfer bundles" containing operating system packages (Rocky, Ubuntu, CentOS, etc.) across the air gap.
Security Scans & Compliance: Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers, ensuring all packages undergo integrity checks before reaching the inner RDL networks.

Knowledge/Skills/Competencies

Required Technical Skills

Hardware & OS Competencies: Hands-on experience with Checkpoint Firewalls (Checkpoint 3980 preferred), Cisco Catalyst 9400/9200 switches, and SilverPeak SD-WAN solutions.
Security & Identity Tools: Expert-level understanding of CyberArk (PVWM/vPAM) and Zscaler ZTNA/Zscaler App Connectors.
Virtualization & Systems: Solid administration experience in VMware vSphere Enterprise and/or Microsoft Hyper-V running on bare-metal systems (e.g., Dell PowerEdge R670).
Linux Administration: Strong proficiency with Linux environments (Rocky Linux, Ubuntu, CentOS) for jump host configuration and secure HTTP/HTTPS local web repository servers (Nginx/Apache).
Network Segmentation & Protocols: Expert in VLAN tagging, inter-VLAN routing, subnetting, IP address management (IPAM), and secure file transfer protocols.
Automated Data Pipelines: Familiarity with script-based file synchronization and automated extraction/integrity validation mechanisms (e.g., hashing, checksums) for software deployment across isolated boundaries.

Strongly Preferred Certifications

Checkpoint Certified Security Expert (CCSE) or Master (CCSM)
Cisco Certified Network Professional (CCNP) - Enterprise or Security
CyberArk Certified Defender or Sentry
Certified Information Systems Security Professional (CISSP)

Soft Skills & Working Style

Detailed Documentation: Proven track record of generating flawless High-Level Designs (HLD) and Low-Level Designs (LLD), block diagrams, and standard operating procedures (SOPs).
Strategic Problem Solver: Comfortable working around strict operational boundaries where typical modern agents and automated tools are banned for security compliance.
Cross-functional Partner: Ability to collaborate closely with HPS Design Engineers, Project Managers, Corporate IT Security, and external Customers.
Financial Stewardship: Ability to work closely with procurement to specify, justify, and size bill of materials (BOM) for both upgrading existing sites and provisioning new infrastructure.

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Salary

The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. A comprehensive benefits package is offered in addition to this range.

The range described in this posting is an estimate by the Company, and may change based on several factors, including but not limited to a change in the duties covered by the job posting, or the credentials, experience or geographic jurisdiction of the successful candidate.

Salary + Short Term Incentive = 125,000 - 199,000 CAD

Typical Education and Experience

Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related technical field.
Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

Celestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

This policy applies to hiring, promotion, discharge, pay, fringe benefits, job training, classification, referral and other aspects of employment and also states that retaliation against a person who files a charge of discrimination, participates in a discrimination proceeding, or otherwise opposes an unlawful employment practice will not be tolerated. All information will be kept confidential according to EEO guidelines.

Celestica is an E-Verify employer.

Company Overview

Celestica, Inc. (NYSE: CLS; TSX: CLS) is a technology leader dedicated to driving customer success and market advancements. With deep expertise in design, engineering, manufacturing, supply chain, and platform solutions, Celestica enables critical data center infrastructure for AI, cloud, and hybrid cloud and advances technologies in high-growth markets. With a talented team and a strategic global network, Celestica helps its customers achieve competitive advantages.

Today, Celestica delivers innovative supply chain solutions globally to customers in strategic two operating and reporting segments: Advanced Technology Solutions (ATS) and Connectivity and Cloud Solutions (CC):

ATS: This segment serves customers in complex, regulated and high-reliability markets such as Industrial & Smart Energy, Aerospace & Defense, Semiconductor Capital Equipment, and HealthTech. It is engineering led, with deep expertise in design, manufacturing and lifecycle solutions.

CCS: This segment focuses on high-performance technology solutions and services for the data center, serving hyperscalers, digital native customers and enterprises. Celestica's Platform Solutions offering provides innovative and customizable computing, storage and networking solutions enabling AI-driven growth.

Built on a legacy of trust and performance, Celestica has earned its reputation by delivering results in complex and fast-changing markets. Celestica exceeds customer expectations by identifying trends and staying ahead of the curve. Backed by comprehensive capabilities and a global network across North America, Europe and Asia, Celestica helps customers gain competitive advantage with the quality, flexibility and resiliency they need to respond quickly to shifts in demand. Guided by a bold vision to accelerate market advancements, Celestica delivers innovative solutions and technologies that turn complexity into opportunity. Anchored in teamwork and commitment, Celestica strives to be the most trusted partner to its customers and colleagues worldwide.

Celestica would like to thank all applicants, however, only qualified applicants will be contacted.

Celestica does not accept unsolicited resumes from recruitment agencies or fee based recruitment services.

Apply About employer

More about this job

Responsibilities

Own and deploy the secure, isolated RDL network reference architecture across global HPS design centers, including SD-WAN, firewalls, switching, VLAN segmentation, and secure remote access. Maintain the multi-tier repository and air-gap transfer workflows, enforce security constraints, and enable project teams to establish compliant lab environments.

Requirements

Requires a bachelor's degree in a relevant technical field and at least 8 years of network architecture experience, particularly securing air-gapped or highly isolated environments. Candidates should have hands-on expertise with enterprise networking and security tools, Linux and virtualization, secure data transfer, and detailed technical documentation; relevant certifications are strongly preferred.

Skills

Network Architecture
Air-Gapped Network Security
Checkpoint Firewalls
Cisco Catalyst Switching
SilverPeak SD-WAN
VLAN Segmentation
Routing and Subnetting
CyberArk vPAM
Zscaler ZTNA
Linux Administration
VMware vSphere
Microsoft Hyper-V
Secure Repository Management
File Integrity Validation
Technical Documentation
Role-Based Access Control

Visa sponsorship

Not detected in the job text

Keywords

Research And Development Lab
Air-Gapped Networks
Network Reference Architecture
Checkpoint 3980
Cisco Catalyst 9400/9200
Celestica DS2000
ES1500 Switches
SilverPeak SD-WAN
CyberArk vPAM
Zscaler ZTNA
Zscaler App Connectors
VLAN
IPAM
Export-Controlled Networks
Linux
Rocky Linux
Ubuntu
CentOS
Nginx
Apache
VMware vSphere
Microsoft Hyper-V
Dell PowerEdge
Secure File Transfer
Integrity Checks
Checksums
Role-Based Access Control
CCSE
CCNP
CISSP

Report this job