Senior Network Administrator Northland Power Inc. Location: Ontario Category: System Administrator

Key Responsibilities

• Own, manage and maintain network infrastructure across Northland, including firewalls, switches, routers, site-to-site VPN connectivity, SASE VPN, and wireless infrastructure
• Provide technical direction, develop, and implement solutions to address business requirements and network challenges.
• Utilize network monitoring tools to diagnose complex network performance issues
• Triage and resolve support requests and where necessary, involve external providers and security team.
• Ensure all technical outputs meet or exceed quality expectations and defined policies, standards, and procedures.
• Evaluate and experiment with new technologies to improve operations.
• Collaborate with infrastructure, security, enterprise application, project management, operations, and managed services teams to develop and implement solutions.
• Keep team informed of trends, challenges, and major issues.
• Create and maintain network infrastructure documentation, including architecture diagrams, system build configurations, and standard operating procedures
• Act as the primary subject matter expert for network and firewall support issues

Who You Are:

• Credible: You have proven communication skills that enable you to establish connections quickly. You have a proven reputation for personal integrity and fact-based investigative analysis.
• Collaborative: You are a natural relationship builder and are comfortable working and engaging with a diverse group of internal and external stakeholders at all levels. You lead by example and focus on supporting others to achieve project success.
• Detail-oriented: You have demonstrated experience in being hands-on in projects, day-to-day operations, and investigations to ensure all work items are completed to the highest level of quality.
• Diligent: You have solid attention to detail, and experience of being hands-on in projects to inform key risk management decisions. You follow up with others when needed to ensure we remain on track.
• A strong communicator: You have exceptional oral and written communication skills and are able to articulate your analyses in a clear and concise manner to technical and non-technical audiences.
• Flexible: You are agile in your approach to be successful in handling multiple projects and can adjust your working hours as required to meet deadlines.
• Customer-Focused: You naturally have a service-oriented mindset which shows during your interactions through empathy, patience, and a positive attitude.

Qualifications and Experience

• 5+ years of experience working with large enterprise networks.
• Bachelor's degree in computer science/engineering, or equivalent work experience.
• CCNP, CCIE, Fortinet NSE4 or above, Palo Alto PCNSA would be an asset.
• Knowledge of recognized standards such as NIST, NERC, and ISO 27001 along with applying Perdue model principles would be an asset.
• Experience with Wi-Fi and 802.11 protocols, Network Access control (NAC) and AAA platforms for endpoint access-controls, endpoint posture-validation, 802.1x and Guest-Access controls.
• Design experience with large, scalable, and highly available enterprise networks spanning across a global footprint.
• Proficiency in troubleshooting large multi-tier micro-segmented networks in a complex WAN environment.
• Large-scale implementation experience with Next-Gen Firewalls, SASE and IPS Solutions & Security Fabric implementations using Cisco, Palo Alto and Fortinet products.
• Large-scale route/policy-based VPN implementation experience in a multi-vendor environment using IPSEC, DMVPPN, GRE/IPSEC, EZVPN, etc.
• Proficiency with routing protocols (BGP, OSPF, EIGRP), VLANs, VRF, STP, and LACP
• Experience with IDS/IPS, ACLs, NATs, SSL/TLS, SDWAN, SSL VPN, and IPSEC VPN.
• Expert skills in managing various Layer2/layer3 concepts in Cisco Switches such as MLS, VTP, IP Source Guard, Port based traffic-controls, QoS, 802.1Q Trunking, VLAN ACLs, Private-VLAN, Port Security, NetFlow, STP/RSTP/MST, SPAN/RSPAN/ERSPAN, LACP & EtherChannel, DHCP Snooping, Dynamic ARP Inspection, IOS DoS Protections, CoPP, VRRP & HSRP, BGP, OSPF, IPv6, etc.
• Hands-on expertise in implementing Azure networking building block concepts such as Hub/Spoke virtual Networks, Azure firewalls, Azure Route tables, Network Security Groups, Azure VPN Gateway, VNET peering, DDoS Protection, Azure Bastion, Azure network watcher etc. in a cloud-native/hybrid environment.
• Working experience in firewall automation and centralized policy management tools such as Panorama, FortiManager and Firemon to manage large numbers of virtual/physical firewalls dispersed around various geographic locations.

Nice to Have:

• Experience working in a plant/manufacturing/mining environment.
• Understanding of data center environments, concepts, and technologies.
• Understanding of SCADA and OT networking environments are a plus.
• Familiarity with information security best practices for network design and troubleshooting.
• Knowledge of network concepts in a virtualized environment (VMware and Hyper-V)
• Advanced application networking experience such as Citrix NetScaler. ADC/F5 Big- IP Series, Web Application Firewall, Packet brokering Solutions & hardware TAP etc.

Read the full posting.