Network & Systems Security Architect

Imagine working at the forefront of innovation in fluid-flow technology, with over 1300 colleagues across the globe, and contributing to a legacy of excellence that spans eight manufacturing facilities on four continents. Armstrong Fluid Technology is a leader in HVAC sector specializing in industrial pump solutions. We are a community of the brightest and most creative minds, driven by a shared mission to engineer the future and safeguard our planet.

As a member of our team, you'll dive into an environment that encourages learning and boundary-pushing every day. You'll be part of an agile and dynamic workplace where today's solutions are built for tomorrow's challenges.

Title:                           Network & Systems Security Architect

Reports to:                 Global Manager, IT & Security

This role will oversee and ensure stable operation of the organization’s network architectures including LAN, SD-WAN and SAN, Cloud, internet connectivity and security of same. This includes planning, developing, installing, configuring, maintaining, supporting, monitoring and optimizing all networking hardware and software; and designing and implementing secure modern business solutions supporting the global IT infrastructure.

This position is located in Toronto, Canada with possible travel to our global operations in the USA, UK, Continental Europe, India, and China.

In addition to annual initiatives, the key accountabilities of this position are:

Drive technical projects and take overall responsibility for design, architecture, and implementation of global network initiatives and cyber-security.

Lead continuous improvements with respect to IT & OT security in collaboration with the Global IT Manager and IT teams.

Develop and design processes for network infrastructure deployment and configuration along with providing service improvements to improve day-to-day operational efficiency.

Lead installation and perform configuration, administration, and support hardware and software for LAN, SD-WAN and SAN, Cloud, including hubs, switches, routers, firewalls, network monitoring tools and services, configuration backup tools, network elements, and wiring to provide an optimized and reliable environment.

Detects and manages network faults and performance issues in collaboration with technical teams. Implements monitoring services and alerts to prevent future occurrence.

Provide L2 support for the network environment and business application connectivity, and support root cause analysis, investigations, and resolution of operational incidents.

Prepare, maintain, and communicate documentation of network designs and architecture, monitoring alert systems, administration processes, and all network and network security equipment and configurations.

Provides expertise advise and training and mentoring to other team members in their knowledge of network security and support.

Establish, maintain, and validate business continuity and disaster recovery for critical infrastructure and business applications.

Role Requirements:

University Degree in Information Technology, or equivalent combination of education and practical experience.

Minimum 5 years of experience in network design, architecture, and implementation of global enterprise IT network infrastructure, including SD-WAN and Cloud.

Minimum 5 years of experience in network administration and support of large scale, mission critical enterprise in a global, 24x7 operating environment.

Cisco certification in any of the following: CCA/CCNA/CCNP/CCIE (Routing and Switching, Security)

Working experience of the following:

Current operating systems (Windows).

Current network environments (LAN/WAN/SD-WAN, Cloud).

Cisco switches and routers, current network applications, all network layers, routing, switching and related protocols (TCP/IP, SMTP, HTTP, SFTP, FTP, SSH, TELNET, DNS, DHCP, RIP, EIGRP, BGP, OSPF, SNMP, 802.1X and RMON etc.).

Complex TCP/IP networks which include multiple routing protocols.

Enterprise wireless networks including installation, configuration, and troubleshooting.

Firewall and security infrastructure including integration with SIEM services.

Network fault isolation tools and protocols (analyzers, sniffer traces, SNMP, etc.).

Telephony Protocols and Technologies (SIP, PRI, VOIP, UC, Teams).

Identity and Access Management (IAM) and Security Authentication Protocols.

Monitoring and Backup technologies.

Advanced knowledge of the following:

ITIL incident management, problem, and change management.

Network provider/carrier services, network engineering (hardware and software), network design and planning.

Network tools used in supporting multiplatform environments, troubleshooting network-related problems, monitoring capacity, performance, security, and availability.

Creative problem-solving skills, conflict management within different organizations (centralized and matrix organizational structures).

Ability to prioritize, multitask, and perform job functions under occasional pressure.

Ability to break down complex problems in a simplified way, conduct root cause analysis and provide clear, well-thought-out recommendations.

Strong, team-oriented leadership skills with presence and a bias for action.

Self-directed with ability to work autonomously and collaboratively and a focus on results.

Ability to communicate in an open and authentic manner in all situations.