Find work in Canada.

323,538 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 3 mins ago
Architecte d’infrastructure avant la vente, surveillance des patients en milieu hospitalier (Est du Canada et Québec)/Pre-Sales Infrastructure Architect, Hospital Patient Monitoring (Eastern Canada & Quebec)
Philips
Montreal, QC · Quebec, QC
Full-time
Added 18 mins ago
Senior Product Manager - Developer Productivity
Okta
Toronto, ON
This is a highly technical internal platform role that creates value for Okta through a cross-team, cross-industry, cross-functional layer that turns individual wins into organizational…
Added 30 mins ago
Power Platform & AI Agent Developer
K&K Global Talent Solutions INC.
ON · Ontario, Canada
Full-time
As the Power Platform & AI Agent Developer, you will serve as the principal technical authority responsible for designing, building, and deploying enterprise-grade low-code and pro-code…
Added 30 mins ago
Technical Architect Director - PubSec - Mulesoft Canada
Emplo Inc.
Gatineau, QC
Full-time
…customers. Drawing on 15+ years of deep data experience, you set the technical vision, advise customer executives at the CxO level, and lead the delivery of a governed, AI-ready data…
Added 30 mins ago
Finance Data Systems Specialist, Finance Architecture
ATB Financial
Calgary, AB
Full-time
As Finance Data Systems Specialist, you serve as a strategic architect of ATB’s financial data ecosystem. Reporting directly to the Director of Finance Architecture, you act as the vital…
Added 32 mins ago
Sr SDET
Tata Consultancy Services
Toronto, ON
$90,000 to $110,000 CAD / year
Full-time
You will architect robust test suites that run within high-frequency CI/CD pipelines.
Added 32 mins ago
Solution Architect / Senior Solution Architect - PubSec - Canada
Salesforce Partner Canada
Toronto, ON
Full-time
The Solution Architect leads one or more workstreams in sophisticated enterprise customer engagements, partnering with key collaborators to drive and achieve the vision while completing key…
Added 1 hour ago
Identity & Access Management Lead
InfiCare Staffing
Canada
Contract
Partner with Network, Microsoft 365, Cybersecurity, Application, and Infrastructure teams to resolve technical dependencies.
Added 1 hour ago
Senior Workday Functional Specialist
Fanshawe College
London, ON
Full-time
…Functional Specialist - HCM provides specialized functional and technical expertise in the support, configuration, maintenance, and continuous improvement of the Workday HCM platform, with…
Added 1 hour ago
Senior Architect - Transit & infrastructure Architecture
Arup
Toronto, ON
Full-time
This position is ideal for an architect who enjoys solving complex technical challenges, collaborating across disciplines, and delivering projects that have a lasting impact on cities and…
Added 1 hour ago
Digital Payload Architect | Remote Opportunity | Fastwater Staffing
HIKINEX
Remote, Canada
Contract · Remote
We are seeking an experienced Digital Payload Architect to lead the architecture, design, and integration of next-generation digital regenerative payloads for LEO and MEO satellite…
Added 1 hour ago
Senior Cloud Network Engineering Specialist (Hybrid)
Morgan Stanley
Montreal, QC
Full-time
…part of the job family responsible for managing and optimizing technical infrastructure and ensuring the seamless operation of IT systems to support business needs…
Added 1 hour ago
Software Architect - AI-Enabled Engineering
Wärtsilä
Vancouver, BC
This role combines hands-on software development with technical leadership and a strong focus on introducing and scaling AI-assisted engineering practices across the software development…
Added 1 hour ago
Enterprise Cloud & Secuirty Architect – Information Technology
Alberta Blue Cross
AB · Hybrid
Full-time
We have an exciting opportunity for an Enterprise Cloud & Security Architect to join our Enterprise Architecture team Reporting to Enterprise Architecture leadership, and in collaboration…
Added 1 hour ago
Principal Systems Architect
CN
Montreal, QC
Full-time
Support implementation teams by resolving technical issues and design challenges.
Added 1 hour ago
Network Architect
TEKFORTUNE INC
Canada
Contract
We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take…
Added 1 hour ago
Senior Software Developer
Seequent
Calgary, AB
Full-time
Reporting to the Team Lead, Software Development, the Senior Software Developer (frontend) provides technical leadership, mentorship, and architectural guidance while delivering…
Added 1 hour ago
Senior Workday Functional Specialist
Fanshawe Toronto@ILAC
London, ON
Full-time
…Functional Specialist - HCM provides specialized functional and technical expertise in the support, configuration, maintenance, and continuous improvement of the Workday HCM platform, with…
Added 1 hour ago
Senior Cloud Azure Architect
TECONICA SOFTWARES
Toronto, ON
Contract
Added 2 hours ago
Application Solution Architect, Artificial Intelligence.
Mantu
Montreal, QC
Full-time
Application Solution Architect, Artificial Intelligence
Added 2 hours ago
Staff Software Engineer – AI
Thomson Reuters
Toronto, ON
Full-time
As a Staff Software Engineer – AI on the Confirmation Product Engineering team, you will be a hands-on technical leader building and delivering production platform and AI capabilities. This…
Added 2 hours ago
Workday Solution Architect
BDO
Toronto, ON
Full-time
As a Workday Solution Architect, you will be responsible for leading solution design, architecture governance, and solution delivery oversight across Workday implementation, optimization,…
Added 2 hours ago
Solution Architect
Deloitte
Toronto, ON
Full-time
Provide architecture oversight throughout project delivery, partnering with functional and technical teams to manage risks, dependencies, integrations, testing, and deployment activities.
Added 2 hours ago
Lead Architect / Principal Engineer
Litmus
Toronto, ON
Full-time
Own the overall technical architecture of the platform - set the long-term vision and make the hard calls that balance speed, scale, and maintainability.
Added 3 hours ago
Senior Solutions Architect
Thri5
Toronto, ON
Full-time
As a Senior Solutions Architect at Thri5, you'll be the primary technical partner for prospective and existing customers. You'll work closely with our founders and leadership team, sales,…

TEKFORTUNE INC

Network Architect

Canada

Job type: Contract
Experience: ● Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.
Posting language: English
Posted: Oct 1, 2026

Apply About employer

Applications open in a new tab.

Original job description

Company Overview

Client is a leader in design, manufacturing, and supply chain solutions. Our Hardware Platform Solutions (HPS) team designs and delivers cutting-edge, high-performance computing, storage, and networking hardware. To support our advanced engineering efforts, we operate highly secure, air-gapped Research and Development Labs (RDL) globally.

Position Summary

We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers (including Silicon Valley, Richardson, Thailand, and other global hubs).

The successful candidate will be responsible for implementing and maintaining a completely isolated, air-gapped network environment that operates independently of standard corporate IT networks. You will manage complex secure access paths, isolated VLAN provisioning, private full-mesh SD-WAN overlays, and a multi-tiered global data package replication and distribution system. You will also serve as the key enablement architect, helping project teams quickly spin up new project-specific instantiations of the RDL network model while adhering to strict security constraints.

Core Responsibilities

Architectural Implementation & Governance

Deploy Reference Architecture: Standardize and implement the RDL reference design across all global HPS design locations (San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang, Chennai and future locations).

Support New Instantiations: Act as the primary technical design authority to spin up new RDL network instances (allocating subnets, configuring dedicated VLANs, establishing local jump hosts, and defining user authentication parameters) for upcoming HPS design

projects.

Strict Constraint Enforcement: Maintain absolute isolation of the RDL environments. Ensure zero direct or indirect public internet connectivity and guarantee that out-of-scope systems or agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow Agents, ClearPass NAC, and Windows Domain joins) are strictly excluded from the lab network.

Network Infrastructure & Security

SD-WAN & Routing: Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.

Secure Firewalling: Configure and administer enterprise-grade firewalls (Checkpoint 3980) protecting the perimeter of each localized lab, defining strict ingress/egress filtering rules.

Switching & Segmentation: Manage core and access layer switches (Cisco Catalyst 9400/9200 series, Client DS2000, ES1500 switches) to segment the RDL into logical, multi-tenant VLAN environments - specifically separating Export Controlled and Non-Export Controlled network zones.

Identity and Remote Access Management

Remote Customer Access: Oversee the implementation and administration of CyberArk vPAM (Virtual Privileged Access Management) for remote customer connections.

Corporate Remote Access: Configure and maintain Zscaler ZTNA (Zero Trust Network Access) and App Connectors to terminate connections securely on Linux-based local jump hosts.

Decentralized Authentication: Design and maintain a secure user management protocol on jump hosts and local RDL nodes. As the RDL operates without Windows Active Directory, you will define standard operating procedures for the manual/programmatic creation of local system accounts and localized role-based access control (RBAC).

Secure Data Package Management & DevOps Repo Architecture

Repository Architecture: Maintain the multi-tier secure data distribution system:

IT Repository Server: Internet-facing ingestion nodes (running on Hyper-V/Dell PowerEdge) to securely pull packages, drivers, and applications.

Global Repository Server: The middle-layer relay that acts as a secure, scanned transit point between the corporate IT network and the isolated RDL network.

RDL Local Repository Server: Localized instances inside the labs that pull from the Global Repo and host files locally over HTTP/HTTPS at /var/www/html/repo/.

Workflow Automation: Ensure seamless, secure, programmatically validated transfer of "transfer bundles" containing operating system packages (Rocky, Ubuntu, CentOS, etc.) across the air gap.

Security Scans & Compliance: Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers, ensuring all packages undergo integrity checks before reaching the inner RDL networks.

Technical Qualifications

Education & Experience

Bachelor’s degree in network engineering, Computer Science, Cybersecurity, or a related technical field.

Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.

Required Technical Skills

Hardware & OS Competencies: Hands-on experience with Checkpoint Firewalls (Checkpoint 3980 preferred), Cisco Catalyst 9400/9200 switches, and SilverPeak SD-WAN solutions.

Security & Identity Tools: Expert-level understanding of CyberArk (PVWM/vPAM) and Zscaler ZTNA/Zscaler App Connectors.

Virtualization & Systems: Solid administration experience in VMware vSphere Enterprise and/or Microsoft Hyper-V running on bare-metal systems (e.g., Dell PowerEdge R670).

Linux Administration: Strong proficiency with Linux environments (Rocky Linux, Ubuntu, CentOS) for jump host configuration and secure HTTP/HTTPS local web repository servers (Nginx/Apache).

Network Segmentation & Protocols: Expert in VLAN tagging, inter-VLAN routing, subnetting, IP address management (IPAM), and secure file transfer protocols.

Automated Data Pipelines: Familiarity with script-based file synchronization and automated extraction/integrity validation mechanisms (e.g., hashing, checksums) for software deployment across isolated boundaries.

Strongly Preferred Certifications

Checkpoint Certified Security Expert (CCSE) or Master (CCSM)

Cisco Certified Network Professional (CCNP) - Enterprise or Security

CyberArk Certified Defender or Sentry

Certified Information Systems Security Professional (CISSP)

Apply About employer

More about this job

Responsibilities

Own and deploy the secure, air-gapped R&D lab network architecture across global design centers, including SD-WAN, firewalls, switching, VLAN segmentation, and secure remote access. Maintain the multi-tier package repository and validated data-transfer workflows while enforcing isolation, access controls, and security compliance.

Requirements

Requires a bachelor’s degree in a relevant technical field and at least eight years of network architecture experience, particularly in secure or isolated environments. Candidates should have hands-on expertise with Check Point, Cisco switching, SilverPeak SD-WAN, CyberArk, Zscaler, Linux, virtualization, network segmentation, and automated integrity-checked data transfers; relevant security and networking certifications are preferred.

Skills

Network Architecture
Air-Gapped Network Security
Checkpoint Firewalls
Cisco Catalyst Switching
SilverPeak SD-WAN
VLAN Segmentation
Routing and Subnetting
CyberArk vPAM
Zscaler ZTNA
Linux Administration
VMware vSphere
Microsoft Hyper-V
Repository Architecture
Secure File Transfer
Data Integrity Validation
Role-Based Access Control

Visa sponsorship

Not detected in the job text

Keywords

Network Architecture
Air-Gapped Networks
Research and Development Labs
Hardware Platform Solutions
Checkpoint 3980
Cisco Catalyst 9400
Cisco Catalyst 9200
SilverPeak SD-WAN
CyberArk vPAM
Zscaler ZTNA
Zscaler App Connectors
VLAN
IP Address Management
Inter-VLAN Routing
Linux
Rocky Linux
Ubuntu
CentOS
VMware vSphere
Microsoft Hyper-V
Dell PowerEdge
Nginx
Apache
Secure Repository Servers
File Synchronization
Checksums
Role-Based Access Control
CCSE
CCNP
CISSP

Report this job