Responsable Rseau Montral, QC ( distance) Location: Quebec Remote Worker, Canada In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrows possible. Network Principal Montreal, QC (Remote) This position is eligible for the NORAM referral program for external candidates. The level is Tier 1 - $1,500. Regulatory Compliance Requirements This position requires direct or indirect access to hardware, software, technology or technical data controlled under the Canadian Export Control List, Canadian Controlled Goods Program, the Canadian Industrial Security Program, and the International Traffic in Arms Regulations (ITAR) and/or the Export Administration Regulations (EAR). All applicants must be able to meet the eligibility requirements outlined in the Canadian Controlled Goods Program and be able to obtain NATO Secret security clearance. Position Summary We have a current vacancy for a Network Principal to join our Team in Montreal, QC (Remote). Thales requires a Network Principal who will be responsible for all aspects of Network infrastructure operations. As a Network Infrastructure Engineer, you will be expected to become a SME in several relevant domains and to have full professional knowledge of network infrastructure concepts and company objectives to resolve a wide range of issues in effective and sometimes creative ways. As an advanced engineer, you are expected to do these tasks with little technical direction and only general guidance on new assignments. Key Areas of Responsibility Define network architecture, norms and best practices. Mentoring and training of new and/or more junior team members. Administer firewalls and network filters, in both Enterprise, Stores, and cloud networks. Develop and maintain Intrusion Prevention policies. Networking Protocols/Concepts (Routing(OSPF, BGP), VLAN, Sub-netting, Load balancing, TCP/IP, DNS, TLS, SSH). Site-to-site and remote-access VPN connectivity. Network Access Control. Authentication, Authorization and Accounting (to include multi-factor authentication). Web access proxy servers and URL filtering. Network Security policy creation, exception documentation and approval. Help define network security requirements for current and future state end-to-end architectures and platforms to advance security controls and the security posture of the business. Assist in performing proofofconcept testing for network security solutions under consideration for purchase and implementation. Assist in developing and maintaining network security policies, standards, processes and workflows. Provide 7/24 OnCall support for infrastructure related service incidents and follow internal management escalation procedures when necessary (team rotation). Minimum Qualifications Education: Bachelors degree in a related field of study with a minimum 58 years of relevant work experience or a Masters degree in a related field of study with 6+ years of relevant work experience, or an equivalent combination of education and experience. Skills and Abilities: Must have: 3+ years working with Palo Alto Firewall. Must have: 3+ years working with Cisco ISE. At least one vendor certification (with nonentrylevel preferred) in the Network Security arena (Palo Alto PCNSA/PCNSE preferred, Cisco CCNA/CCNP Security, Juniper JNCIASEC/JNCISSEC, etc.) or equivalent experience. If youre excited about working with Thales, but not meeting the requirements for this position, we encourage you to join our Talent Community! Special Position Requirements Schedule: Core business hours are Monday to Friday, between 9:303:00pm. Specific work schedule and expected hours of work will be discussed. Some weekend and evening work may be required and will be dependent on projects and customer requirements. Physical Environment: Access will be required in Ottawa server room (secure zone NATO Secret clearance required). Some limited physical demands may present themselves while navigating server rooms and providing network support on site. Able to lift and carry items up to 50 lbs. Why Join Us? Say HI and learn more about working at Thales. Click here. Thales provides an extensive benefits program for all fulltime employees working 24 or more hours per week and their eligible dependents, including the following: Company paid Extended Health, Dental, HSA, Life, AD&D, Shortterm Disability, Cancer Care Program, travel insurance, Employee Assistance Plan and WellBeing program. Retirement Savings Plans (RRSP, DCPP, TFSA) with a company contribution and a match to a DCPP, with no vesting period. Company paid holidays, vacation days, and paid sick leave. Voluntary Life, AD&D, Critical Illness, LongTerm Disability. Employee Discounts on home, auto, and gym membership. Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience. This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian NATO Secret clearance. Responsable Rseau Montral, QC ( distance) Ce poste est admissible au programme de recommandation NORAM pour les candidats externes. Le niveau est Tier 1 - 1500$. Exigences en matire de conformit rglementaire Ce poste ncessite un accs direct ou indirect du matriel, des logiciels, des technologies ou des donnes techniques contrls en vertu de la Liste des marchandises dexportation contrle du Canada, du Programme des marchandises contrles du Canada, du Programme de scurit industrielle du Canada, du Rglement sur le trafic international darmes (ITAR) et/ou du Rglement sur ladministration des exportations (EAR). Tous les candidats doivent satisfaire aux critres dadmissibilit noncs dans le Programme des marchandises contrles du Canada et tre en mesure dobtenir une habilitation de scurit Secret OTAN . Rsum du poste Nous avons actuellement un poste vacant de responsable rseau pourvoir au sein de notre quipe Montral, QC ( distance). Thales recherche un responsable rseau qui sera responsable de tous les aspects lis lexploitation de linfrastructure rseau. En tant quingnieur en infrastructure rseau, vous devrez devenir un expert dans plusieurs domaines pertinents et possder une connaissance professionnelle approfondie des concepts dinfrastructure rseau et des objectifs de lentreprise afin de rsoudre un large ventail de problmes de manire efficace et parfois crative. En tant quingnieur avanc, vous devrez accomplir ces tches avec peu de directives techniques et seulement des conseils gnraux sur les nouvelles missions. Principales responsabilits Dfinir larchitecture, les normes et les meilleures pratiques du rseau. Encadrer et former les nouveaux membres de lquipe et/ou les membres les moins expriments. Administrer les parefeu et les filtres rseau, tant dans les rseaux dentreprise que dans les magasins et les rseaux cloud. laborer et maintenir des politiques de prvention des intrusions. Protocoles/concepts de rseau (routage (OSPF, BGP), VLAN, sousrseautage, quilibrage de charge, TCP/IP, DNS, TLS, SSH). Connectivit VPN site site et accs distance. Contrle daccs au rseau. Authentification, autorisation et comptabilit (y compris lauthentification multifactorielle). Serveurs proxy daccs Web et filtrage dURL. Cration de politiques de scurit rseau, documentation des exceptions et approbation. Aider dfinir les exigences de scurit rseau pour les architectures et les plateformes actuelles et futures de bout en bout afin damliorer les contrles de scurit et la posture de scurit de lentreprise. Aider raliser des tests de validation de principe pour les solutions de scurit rseau dont lachat et la mise en uvre sont envisags. Aider llaboration et la maintenance des politiques, normes, processus et flux de travail en matire de scurit rseau. Fournir une assistance tlphonique 24 heures sur 24 et 7 jours sur 7 pour les incidents lis linfrastructure et suivre les procdures internes descalade de gestion si ncessaire (rotation des quipes). Qualifications Minimales Requises Formation: Licence dans un domaine dtudes connexe avec au moins 5 8 ans dexprience professionnelle pertinente ou master dans un domaine dtudes connexe avec au moins 6 ans dexprience professionnelle pertinente, ou une combinaison quivalente de formation et dexprience. Comptences et aptitudes: Indispensable: au moins 3 ans dexprience avec le parefeu PaloAlto. Indispensable: 3 ans ou plus dexprience avec CiscoISE. Au moins une certification fournisseur (de prfrence de niveau intermdiaire) dans le domaine de la scurit rseau (de prfrence PaloAlto PCNSA/PCNSE, Cisco CCNA/CCNP Security, Juniper JNCIASEC/JNCISSEC, etc.) ou exprience quivalente. Si vous tes enthousiaste lide de travailler chez Thales, mais que vous ne rpondez pas aux exigences de ce poste, nous vous encourageons rejoindre notre communaut de talents ! Exigences particulires du poste Horaires: Les heures de travail normales sont du lundi au vendredi, de 9h30 15h00. Les horaires de travail spcifiques et les heures de travail prvues seront discuts. Certains travaux le weekend et en soire peuvent tre ncessaires et dpendront des projets et des exigences des clients. Environnement physique: laccs la salle des serveurs dOttawa (zone scurise habilitation de scurit OTAN requise) sera ncessaire. Certaines exigences physiques limites peuvent se prsenter lors de la navigation dans les salles de serveurs et de la fourniture dune assistance rseau sur place. Capacit soulever et transporter des objets pesant jusqu 50 livres. Pourquoi nous rejoindre? Dites bonjour et dcouvrez-en plus sur le travail chez Thales en cliquant ici. #J-18808-Ljbffr
Job Title
Network Principal