Network Data Security Analyst (J)

Network and Data Security Analyst (J)

Information Technology Services (ITS)

Applicants will be considered in the following order

1. Qualified permanent ESS/OSSTF Bargaining Unit employees.

2. Qualified probationary, temporary and Temporary Hourly Rated (THR) ESS/OSSTF employees.

3. Qualified external applicants (includes employees from other Bargaining Units)

Waterloo Region District School Board (WRDSB) serves approximately 65,000 students in 123 schools, as well as alternative and continuing education sites. WRDSB is committed to creating learning environments that support the achievement and well-being of all students through partnering with staff, parents, families, caregivers and communities to promote success in learning and life.

Reporting to the Chief Information Officer of Information Technology Services (ITS) through the Manager of Information Technology Services (ITS), the successful candidate will be responsible for implementing and supporting networking and data security strategies as they pertain to the WRDSB learning and business objectives.

The successful applicant for this Educational Support Staff position Level J ($104,628 - $120,684), will be working 40 hours per week, 12 months per year, effective as soon as possible . Shift work may be necessary and the successful applicant may be required to drive their own vehicle at times.

Responsibilities

• Configure and maintain enterprise-wide perimeter security infrastructure, including secure remote access and connectivity solutions.
• Configure and support enterprise web filtering and content security systems.
• Develop and implement enterprise endpoint protection and malware mitigation standards.
• Support administrative staff with the investigation of cybersecurity incidents and technology-related security events.
• Support the configuration and maintenance of the organization’s enterprise internet connectivity and service provider interfaces.
• Support and maintain critical network infrastructure services, including Domain Name System (DNS) and related protocols.
• Provide support for web server platforms, content management systems, and associated digital communication tools.
• Support and configure the lifecycle of digital certificates (SSL/TLS) and related encryption standards.
• Configure and maintain email security gateways and filtering systems to support secure delivery in collaboration with enterprise communication platform administrators.
• Work collaboratively with IT staff to support the implementation of enterprise services, including unified communications, collaboration platforms, identity-management utilities, and server deployments.
• Provide expert advice to IT leadership regarding strategic initiatives, such as security service architecture reviews and identity management optimizations.
• Participate in the design and implementation of secure network architectures, including internal segmentation, multi-tier perimeter zones (DMZ), and hybrid-cloud configurations.
• Provide leadership in the development, implementation, and continuous maintenance of enterprise security policies, standards, and procedural documentation.
• Configure and support enterprise solutions for remote administration, IT asset management, and automated software deployment.
• Provide technical support and expertise for the implementation and maintenance of the organization’s Business Continuity and Disaster Recovery (BCDR) plans.
• Other duties as assigned by the Information Technology Management team

Qualifications

• University degree or College diploma (3-4 year program) in Computer Science, Cybersecurity, Information Technology, or a related discipline, supplemented by ongoing professional development in modern operating systems and network infrastructure.
• A minimum of 5 years of progressive professional experience in network security, systems administration, or a related information technology role.
• Possession of current industry-recognized certifications in enterprise systems administration and network security (e.g., Microsoft Role-Based certifications, Cisco Security, or equivalent vendor-neutral security credentials)
• Palo Alto Networks Certified Network Security Engineer Training is an asset
• Possess a comprehensive and thorough understanding of:
• Enterprise web filtering and content security systems.
• Directory services and centralized policy management (e.g., Group Policy).
• Enterprise routing protocols, hardware, and network segmentation.
• Advanced routing protocols, such as Border Gateway Protocol (BGP).
• Holistic enterprise network security frameworks and best practices.
• Proficiency in the administration and security of diverse operating systems, including Linux, Unix-based systems, and modern Windows Server environments.
• Comprehensive knowledge of diverse hardware and software ecosystems, including Windows-based (x86/x64) and Apple/macOS environments.
• Demonstrate a strong aptitude for complex technical troubleshooting, root-cause analysis, and effective problem resolution in an enterprise environment.
• Possess strong working knowledge of server administration and enterprise-level data backup and recovery strategies for files and critical documentation.
• Demonstrate well-developed organizational and interpersonal skills, with the ability to communicate technical concepts effectively and professionally to a diverse range of stakeholders, including staff and end-users.
• Demonstrate the ability to manage complex projects and daily operational duties independently with minimal supervision, exhibiting strong initiative and effective time-management skills
• Must have a valid Ontario driver's license and access to a vehicle

Applicant Self-Identification Questions

The information collected in Apply to Education is used to monitor WRDSBs progress toward our equity goals including our commitment to diversity in WRDSB recruitment and hiring practices.

We are committed to the security and confidentiality of information under our control, and to the protection of privacy with respect to personal and confidential information that is collected, used, disclosed and retained in the system (Policy 1014_- Privacy Protection and Access to Information). Information is collected pursuant to Ontarios Education Equity Action Plan (Ministry of Education), PPM 165 and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). Access to this information is restricted to specific individuals in Human Resources.

Access, use and disclosure of the data is governed by MFIPPA and ethical research practices. Applicant Self-Identification data will be attached to your Apply to Education applicant profile as long as you are employed with the WRDSB.

If you prefer not to answer any of the Self Identification questions, you can select prefer not to answer. This in no way affects your application or the applicant selection process. If you have questions or concerns about this please contact humanresources@wrdsb.ca.

The Waterloo Region District School Board is committed to equity in employment. We are committed to fair and equitable hiring practices that allow us to hire qualified staff who reflect the diversity of the community we serve, who will foster the success and well-being of our students and who demonstrate a commitment to equity and inclusion in the classroom.

We actively encourage applications from members of groups with historical and/or current barriers to equity, including, but not limited to:

• First Nations, Métis and Inuit peoples, and all other Indigenous peoples;
• members of groups that commonly experience discrimination due to race, ancestry, colour, religion and/or spiritual beliefs, or place of origin;
• persons with visible and/or invisible (physical and/or mental) disabilities; and
• persons of marginalized sexual orientations, gender identities, and gender expressions

We will make any appropriate accommodation based on any of the human rights protected grounds, to support candidate participation in the hiring process.

While we appreciate all applications, only those selected for an interview will be contacted. No phone calls please.