I would like to present to you a new job opportunity and I think you may find it interesting.

If you are interested kindly send the following documents to hrsmss@smsoftconsulting.com by Wednesday, July 8, 10:00 AM EST if that interests you and matches your profile.

Updated Resume in word format (Mandatory)

References (Mandatory) Expected hourly rate (Mandatory) Visa Status (Mandatory) LinkedIn ID (Mandatory)

Client: Ministry of Public and Business Service Delivery and Procurement

Work Location: 777 Bay St., Toronto, Ontario, Hybrid

Estimated Start Date: 2026-09-01

Estimated End Date: 2027-08-31

#Business Days: 270.00

Extension: 777.00

Hours per day or Week: 7.25 hours per day

Security Level: CRJMC

Must Haves

5+ years of experience in cyber security solutions and next-generation network security, including hands-on implementation, configuration, and troubleshooting 5+ years of experience in network security and modern architectures (e.g., SDN, SD-WAN, SASE/SSE), preferably within Ontario K–12 environments Proven experience designing and implementing enterprise security architectures, including integration of network and security controls (e.g., Zero Trust, SASE, cloud security) Strong knowledge and practical application of security frameworks and models (NIST CSF v2, CIS Controls v8, MITRE ATT&CK, D3FEND, ATLAS) Experience designing and implementing security automation and orchestration workflows Hands-on experience with AI-enabled security operations and security analytics. Experience with Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and AI governance. Bachelor’s degree in computer science, cyber security, or a related field.

NICE TO HAVE

preferably within Ontario K–12 school boards Postgraduate degree in computer science, cyber security or engineering is preferred.

Preferred certifications such as

5+ years’ hands-on experience working in the K-12 education sector, with Ontario K-12 school boards, in particular with school board network, network security and cyber security.

RoleOverview

The Senior Technology Architect role requires deep knowledge, expertise, and experience in in cyber security solutions, security operations (SecOps) solutions and practices, automation and artificial intelligence (AI) in cyber security, managed security services, and next-generation network security. The resource also requires hands-on experience in analyzing, configuring, implementing, and troubleshooting cyber security models, automation solutions and threat detection, particularly within the education sector, preferably in the Ontario K–12 school board environment.

This Resource Is Responsible For, But Not Limited To

Providing technical leadership and guidance on cyber security architecture, security operations, AI-enabled security, and next-generation network technologies. Designing, implementing, and supporting security solutions including Cloud Security, Identity Security, Endpoint Security, SASE/SSE, SIEM, SOAR, and XDR. Developing and implementing AI-enabled security capabilities, including security automation, AI agents, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and autonomous security operations. Supporting integration of AI platforms with security technologies including SIEM, SOAR, threat intelligence, vulnerability management, and identity security platforms. Assisting with the development, testing, and deployment of AI-based security use cases, playbooks, and operational workflows. Assisting in the development of AI integration tools for pre-emptive security, namely Threat intelligence and Vulnerability insight Providing subject matter expertise, tactical and operational advice, consultancy, and training on all aspects of cyber security, AI-enabled security, and network solutions such as: Cyber security solutions to protect, detect, and respond to cyber threats Cloud security solutions Musing MITRE ATT&CK, D3FEND, and ATLAS frameworks in security operations AI-assisted SecOps practices, including agentic AI, autonomous security operations, and human-in-the-loop controls AI governance, responsible AI adoption, and risk-informed use of AI in cyber security Various vendor-specific cyber security, AI, and network solutions Designing, implementing, and integrating security technologies, telemetry pipelines, orchestration tools, and automated workflows supporting SecOps and MSS service integration, including: SIEM/SOAR/Agentic AI integration and engineering support Telemetry ingestion, normalization, and correlation pipelines Security tooling integration across hybrid environments Automation of MSS workflows and operational processes Executing and maintaining continuous automated red teaming (CART) platforms (e.g., SCYTHE, Caldera, Attack), and integrating outputs into detection tuning, control validation, and playbook optimization Monitoring and reporting on security operations performance, including development of dashboards, KPIs/KRIs, and MSSP performance metrics to support continuous improvement Collaborating with MSSPs and internal stakeholders to optimize workflows, improve detection logic, and support service modernization toward AI-enabled operating models Delivering technical training, stakeholder engagement, and operational guidance to support cyber resilience and continuous improvement. Presenting technical findings, risk insights, and strategic recommendations to senior leadership and stakeholders Providing regular status updates and project reporting on deliverables, milestones, and performance outcomes Applying a collaborative approach to solution design, development, and implementation across diverse stakeholder groups Aligning with industry and legislative advancements at the federal, provincial/local level (e.g., Enhancing Digital Security and Trust Act, 2024 (EDSTA)). Delivering on other duties as assigned. This work involves working in close partnership with various government departments, the K-12 education sector, telecommunications providers, and network and cyber security technology vendors to develop tailored approaches and implementation plans. To support various stakeholders, the resource must be available to perform hands-on configuration, troubleshooting and training at the client site. Therefore, the resource must be available to travel same day or overnight in Ontario, as needed. The unit manager may assign other related board work for other unit or branch initiatives, as required.

Experience And Skill Set Requirements

Cyber security and network architecture – 35%

preferably within Ontario K–12 environments Proven hands-on experience implementing and supporting: Cloud-based security architectures (SSE/SASE including SWG, CASB, Fawaaz, ZTNA) Zero Trust Architecture (ZTA) Cloud security platforms (e.g., Azure, AWS, Google Cloud) Endpoint security (EPP, EDR, XDR) Identity and access management (password less, MFA, certificate-based authentication) Incident Response and Incident Management (IR/IM) platforms Vulnerability management and patching automation User and Entity Behavior Analytics (UEBA) Penetration testing and automated red teaming Operational Technology (OT) security and IT/OT convergence Experience assessing, piloting, and implementing emerging cyber security and network technologies

Automation, AI & Security Operations – 30%

Familiarity with AI security platforms such as Microsoft Security Copilot, OpenAI, Anthropic Claude, Google Gemini, AWS Bedrock, Palo Alto AIRS, Splunk AI Assistant, CrowdStrike Charlotte AI, or similar technologies. Strong understanding of AI governance and risk management including prompt injection, model security, data protection, and responsible AI practices

Training, Collaboration & Stakeholder Engagement – 10%

5+ years of experience presenting to senior and executive management and external stakeholders. 5+ years’ coordinating and leading complex technical work with multiple IT teams, internal and external stakeholders. 5+ years of experience preparing written materials (e.g., status reports, recommendations, briefing notes) and experience maintaining security content (rules, dashboards, playbooks) across shared platforms. 5+ years of experience delivering cyber security upskilling training to IT and security teams. Experience supporting cross-organizational collaboration, including knowledge sharing and threat intelligence exchange

Industry Certifications / Relevant Degrees – 10%

Relevant vendor certifications or equivalent work experience.

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM) Certified Cloud Security Professional (CCSP) Other examples include Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC).

Azure security

Public Sector Experience – 5%

Knowledge of Government of Ontario standards (e.g., GO-ITS) and relevant legislation (e.g., EDSTA).

Note

The client may exercise its option(s) to extend the Statement of Work (SOW) beyond October 5, 2027, provided that the Master Service Agreement is extended. Any such extension shall be on the same terms, conditions, and covenants contained as those contained in the SOW. This procurement will include the option to extend the end date of the contract if there are unused effort days and no change to the ceiling amount, if the need arises. This contract will require the consultant to work up to 2 days per week in the office and the remaining days working remotely. Travel Requirements – The resource must be available to travel the same day or overnight in Ontario, as required. For this role, travel to school board locations across the province will be required. Travel expenses will be reimbursed according to the Ontario Travel, Meal and Hospitality Expenses Directive.

Hybrid - 2 days onsite / 3 days remote