IT Systems & Security Specialist

The Federal Bridge Corporation Limited (FBCL) is a Crown corporation responsible for overseeing the Canadian federal interests in four international bridge crossings between Canada and the United States. Its mandate is to provide the highest level of stewardship so that the international bridges and associated structures are safe and efficient for users. FBCL owns, manages and operates international bridges and associated structures in Sault Ste. Marie, Point Edward, Lansdowne (Thousand Islands) and Cornwall, Ontario.

Summary

Reporting to the Director, Technology and Information Systems, the IT Systems & Security Specialist recommends, designs, integrates, and supports corporate IT security and systems across server, application, operational, and cloud infrastructure. The incumbent provides specialized support for corporate systems, responsible to ensure IT security is fully implemented and optimized to protect data assets, and contributes to maintaining a robust, consistently available corporate IT infrastructure.

Duties and Responsibilities

IT Security (50%)

• Designs, implements, and ensures holistic function of corporate IT security across all infrastructure, servers, applications, operational systems and cloud solutions with approval from the director;
• Leads technical recommendations on security solutions and direction in alignment with organizational needs and corporate objectives;
• Guides and recommends security requirements to support corporate initiatives;
• Develops, implements and verifies security standards/controls for systems and devices across organization to meet FBCL security policies and/or best practices necessary for the protection of information resources;
• Defines, implements and maintains appropriate IT security monitoring tools to detect and respond to threats, including Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), etc.;
• Develops department guidelines and/or playbooks on how to find, stop, and resolve or recover from cyber threats;
• Seeks and maintains awareness to new and existing security threats, initiates and coordinates action to mitigate as appropriate;
• Leads development and rollout of information security awareness training materials and documentation;
• Manages regular system security vulnerability audits and maintains appropriate system security updates;
• Contributes to and supports disaster recovery plan including security action plans and standard operating procedures (SOPs);
• Effectively and quickly communicates security risks and possible network disruptions to team members and management for decision making and/or action; and,
• Provides expertise to internal/external resources for escalated problem resolution.

IT Systems (40%)

• Provides and contributes to design and planning towards the structure of technical solutions including applications, associated servers, infrastructure and other resources in alignment with guiding principals provided;
• Contributes to the support and maintenance of operational systems, including corporate applications and servers (on-premises, SaaS, M365), toll collection system, physical security systems (access control, CCTV) and other;
• Defines and communicates system requirements to internal and external resources;
• Evaluates and recommends appropriate software or hardware and suggests secure integration methods for new or existing solutions;
• Designs and implements secure application interfaces using API and other data connectors;
• Solves escalated technical problems and ensures optimized solution deployment;
• Works with solution providers to review architecture for conformance to the Corporation’s IT Standards;
• Monitors systems to ensure they maintain expected output;
• Openly shares technical knowledge and supports other IT team members;
• Maintains currency with industry trends and best practices in regards to on premise and cloud computing, vendor offerings, and security advancements;
• Recommends and supports the development of policies and procedures;
• Implements and/or utilizes tools to monitor and analyze data to ensure corporate systems and applications including server performance are optimized;
• Troubleshoots technology resources and resolves malfunctions of hardware, devices and software ensuring minimal downtime;
• Develops and maintains documentation to support technology implementations and ongoing knowledge share; and,
• Contributes to identifying areas of improvement to the IT infrastructure and potential new technologies to meet the needs of users and the Corporation.

Project Management (10%)

• Manages and prioritizes assigned projects and program components, including scoping, planning, documentation, stakeholder communication, contractor management, and delivery against established objectives;
• Creates and recommends architectural documents and specifications as needed, including system/security designs and diagrams;
• Provides timely project status updates to management;

• Oversees project/system implementation;
• Coordinates effectively with other project members in delivering the services as and when needed; and,

• Leads initiatives to ensure completion of IT systems as required.

Essential Qualifications

• Diploma (3 years) from a recognized post-secondary educational program in computer science, information technology, information management or another related specialty related to the duties of the position;
• Minimum3 years’ relevant combined experience in IT Security and IT Systems (post education/certification) in like role is required;
• Certified Information Systems Security Professional (CISSP) or Systems Security Certified Practitioner (SSCP) or equivalent certification is required;
• Cisco Certified Network Associate (CCNA) is also preferred but not required;
• Microsoft Windows Server certification (advanced preferred) or equivalent certifications is required;
• Specialized knowledge of information security technologies, methodologies, and best practices in the domains of: security administration of networks, operating systems, databases and applications, access control, encryption, firewalls and proxies, networking, security event log analysis, malware prevention and remediation, cloud technologies, security incident response, vulnerability assessment, intrusion detection and prevention, system administration is required;
• Experience implementing and maintaining appropriate IT security monitoring tools, including SIEM.
• Experience building/supporting servers in physical, virtual and cloud environments is required;

• Experience working with Microsoft 365 tenant management, specifically security, AI and governance is required;
• Experience in Security/Network architecture, supporting and developing enterprise IT solutions in on premise and cloud environment is required;
• Experience in collecting and analyzing stakeholder requirements, and managing external contractors/resources to achieve required results is required;

• Experience in network infrastructure components, internetworking devices, user management and network architectures is required;

• Knowledge of evaluating, testing, implementing tools for monitoring and systems management is required;
• Demonstrated ability to identify problems, evaluate alternatives, design and implement effective solutions is required;
• Demonstrated ability to prepare reports and analyze complex information is required;
• Strong time management, prioritization, organization abilities, interpersonal skills and communication skills is required;
• Strong attention to detail, analytical and troubleshooting skills is required;
• Ability to obtain and maintain Secret security clearance is required; and,
• Ability to demonstrate and maintain language requirement (English Essential) is required.

We thank all those who apply. FBCL is an Equal Opportunity Employer, which promotes a culture of inclusion and diversity. Accommodations are available throughout the staffing process and can be requested at any time from the assigned human resources representative.