Job description: The Government of Canada (GC) is continuing to make great strides in becoming a digital-first organization.

The organization is looking to improve the GC Information Technology (IT) infrastructure and the user experience by consolidating, modernizing, and standardizing where possible. Priorities to support the delivery of government-wide digital transformation include:

• Ensuring the Government’s network is secure, fast and reliable.
• Providing public servants, the digital tools they need and that support a modern workplace.
• Helping to ensure the health of government systems and the modernization of applications by moving data to the Cloud or modern data centres; and
• Enabling government-wide transformations through the creation of standards, revised services, and a new funding model.

Infrastructure Security Operations (ISO) is responsible for planning, designing, building, operating and maintaining effective, efficient and responsive cyber and IT security infrastructure to protect GC data and technology assets. ISO delivers technical safeguards that protect the government network systems and services by detecting and preventing unauthorized access, misuse, modification and denial of network-accessible resources and data. ISO provides protection through perimeter/border defense services, intrusion detection and prevention services, wired/wireless protection services and web filtering services. End-point protection and security monitoring are done through anti-virus/malware services, end-point management services, event logging and auditing services, and compliance threat and vulnerability assessment infrastructure services.The ISO directorate also provides enterprise-level authentication services to both GC employees and external client communities such as Canadian citizens and businesses. Enterprise Mandated Services comprise Internal and External Credential Management, Government of Canada Internal Credential Management services, Management of Identity, Credential Authentication, and Public Key Infrastructure.

Tasks:

• Analyze existing services; propose, design, develop and implement improved overall systems design user experience, security controls, safeguards in accordance with government policies and standards
• Analyze IT Security Infrastructure and services statistics including security log analysis and other systems operational logs and events analysis).
• Analyze IT Security Infrastructure tools and techniques.
• Analyze data and provide advice and reports.
• Assist in implementation strategies
• System and subsystem solution designs compliant with policy, business, security, operational and support requirements.
• Detailed system and subsystem technical, development, integration, interface and build documentation
• Functional and technical test plans, test cases and test results documentation
• Technical collateral for cost/benefit analysis and proposals
• Detailed root cause analysis documentation; Detailed Change Request technical analysis documentation; and Operational collateral
• Conduct systems integration and development of selected services, sub-services, and applications
• Documentation: structured analysis and recommendations, weekly status reports, installation procedures, build books, maintenance procedures, business requirements analysis, network topologies, specifications and standards, design documentation, solution and implementation requests, support procedures, backup and restore procedures, etc.
• Deliver design and prototypes for the delivery of new service offerings.
• Identify the technical threats to, and vulnerabilities of networks and systems.
• Directory, authentication, and authorization protocols such as LDAP, Kerberos, SAML, OpenID Connect, or any future security authentication protocols
• Identity Management processes, best practices, standards, policies and supporting technologies
• Operating Systems such as Windows, Unix and Linux
• Networking Protocols such as HTTP, FTP, and Telnet
• Secure IT architectures fundamentals, standards, communications, and security protocols such as IPSec, IPv6, SSL, and SSH
• IT Security protocols at all layers of the Open Systems Interconnection (OSI) and Transmission Control
• Protocol/Internet Protocol (TCP/IP) stacks
• Domain Name Services (DNS), DHCP and Network Time Protocols (NTP)
• Network routers, multiplexers, and switches
• Application, host and/or Network hardening and security best practices such as shell scripting, service identification, and access control
• Intrusion detection/prevention systems (HIDS/HIPS), Network-based Intrusion Defence Systems, malicious code defence, file integrity, Enterprise Security Management, Security Information and Event Management (SIEM) Systems and/or firewalls
• Data Parsing
• Wireless technology
• Cryptographic Algorithms
• Manage the IT Security configuration.
• Monitor and develop reporting for system utilization and performance metrics.
• Perform lab testing to evaluate fixes, new features, and system interoperability.
• Prepare technical reports such as IT Security Solutions option analysis and implementation plans.
• Provide cross training and knowledge transfer to other support personnel.
• Provide engineering support through planning and implementing complex changes in large scale multi-tenant networked environments.
• Provide Independent Verification and Validation (IV&V) support to IT Security related projects.
• Provide network security expertise on multi-disciplinary project teams to develop design alternatives.
• Provide operational support for firewalls / VPNs / web content filtering infrastructure by performing change.
• Review perimeter security requirements and develop cost effective responses.
• Review, assess, develop alternatives, and recommendations for perimeter security approaches, technology, and processes.
• Provide expertise as well as design and implement solutions including Directory Technologies, Directory ETL systems, Authentication and Authorization Systems, Identity Management Systems, Credentials Management systems as well as business applications integrations.

Expected salary:

Location: Ottawa, ON

Job date: Thu, 07 Dec 2023 02:58:51 GMT

Apply for the job now!

The post Sr IT Security Engineer to analyze and develop IT security solutions for GC infrastructure appeared first on World News: Entertainment, lifestyle, Health, Technology.

Job description: Our valued public sector client requires the services of a Senior Network Security Analyst to conduct network security impact analysis and analyze IT security threats and alerts.

The Government of Canada (GC) is continuing to make great strides in becoming a digital-first organization.

The organization is looking to improve the GC Information Technology (IT) infrastructure and the user experience by consolidating, modernizing, and standardizing where possible. Priorities to support the delivery of government-wide digital transformation include:

• Ensuring the Government’s network is secure, fast and reliable.
• Providing public servants, the digital tools they need and that support a modern workplace.
• Helping to ensure the health of government systems and the modernization of applications by moving data to the Cloud or modern data centres; and
• Enabling government-wide transformations through the creation of standards, revised services, and a new funding model.

Infrastructure Security Operations (ISO) is responsible for planning, designing, building, operating and maintaining effective, efficient and responsive cyber and IT security infrastructure to protect GC data and technology assets. ISO delivers technical safeguards that protect the government network systems and services by detecting and preventing unauthorized access, misuse, modification and denial of network-accessible resources and data. ISO provides protection through perimeter/border defense services, intrusion detection and prevention services, wired/wireless protection services and web filtering services. End-point protection and security monitoring are done through anti-virus/malware services, end-point management services, event logging and auditing services, and compliance threat and vulnerability assessment infrastructure services.The ISO directorate also provides enterprise-level authentication services to both GC employees and external client communities such as Canadian citizens and businesses. Enterprise Mandated Services comprise Internal and External Credential Management, Government of Canada Internal Credential Management services, Management of Identity, Credential Authentication, and Public Key Infrastructure.

Tasks:

• Analyze identified network and/or telecom problems, identify resolution strategies, and implement in a timely fashion.
• Analyze IT Security tools and techniques.
• Analyze security data and provide advisories and reports.
• Assist in training users to use the network and related software.
• Review, analyze, and/or apply

• Internet security protocols such as SSL, S-HTTP, S-MIME, IPSec, SSH
• TCP/IP, UDP, DNS, SMTP, SNMP
• Approved GC Cryptographic Algorithms
• Directory Standards, authentication, and authorization protocols such as LDAP, Kerberos, SAML, OpenID Connect, etc.
• Identity Management processes, best practices, standards, policies and supporting technologies
• Networking Protocols (for example, HTTP, FTP, Telnet)
• Technical IT Security safeguards
• IT Security tools and techniques
• Intrusion detection systems and firewalls

• Complete tasks directly supporting Infrastructure Security Operations.
• Complete tasks related to authorization and authentication in physical and logical environments.
• Conduct impact analysis for new software implementations, major configuration changes and patch management.
• Conduct operational processes and procedures as they relate to networking and telecom services.
• Configure equipment with assistance from vendor or other computing resources.
• Configures and optimizes technical installations.
• Coordinate installation, operation, maintenance, resolution of hardware and software problems, monitoring of traffic, capacity planning, system backup and user training for a Local Area Network.
• Design/develop IT Security protocols.
• Develop proof-of-concept models and trials for IT Security.
• Develop, implement, participate, and test a network disaster recovery plan.
• Evaluate, test and recommend new data communication hardware and software.
• Identify and analyze technical threats to, and vulnerabilities of, networks.
• Inform new users of the appropriate hardware and software specifications for access to the network.
• Install or coordinate installation of network hardware, software for use with personal computers and mainframe/personal computer interaction, and network upgrades according to vendor instructions.
• Installs and monitors facets of technology.
• Maintain a reference library to include reference manuals and user guides.
• Maintain accurate records and logs of users, equipment serial numbers, service records,
• maintenance agreements, warranties, wiring schemes and network problems and solutions.
• Maintain interface with vendor representatives and other computing resources to resolve hardware and software problems.

Expected salary:

Location: Ottawa, ON

Job date: Thu, 07 Dec 2023 07:54:02 GMT

Apply for the job now!

The post Sr Network Security Analyst to conduct network security impact analysis and analyze IT security threats and alerts appeared first on World News: Entertainment, lifestyle, Health, Technology.

Job description: Our valued Public sector client is in need of a Senior IT Security TRA and C&A Analyst to review, analyze, and apply GC IT Security policies, SA&A processes and risk mitigation strategies.

Provide services to assess and analyze risks and develop Statements of Sensitivity (SOS) and Threat and Risk Assessments (TRA) as required for Cyber Security and Identity Management (CSIM) to perform Security Assessment and Authorization (SA&A) for current and future computing initiatives.

We are looking for someone with the following, but not limited to, experience:

• 10 years as a IT Security TRA and C&A Analyst
• Experience developing any one (1) or more of the following types of reports for a Canadian Public sector client:

• data security analysis
• Concept of operations
• Statement of Sensitivity (SoS)
• Threat and Risk Assessment (TRA)
• Privacy Impact Assessment (PIA)
• Vulnerability Assessment
• Risk assessment.
• Experience identifying and modelling threats that pose a risk to a client’s systems and data and applying safeguards according to these threats during system design
• Experience creating complete Security Control Profiles by performing all of the following tasks to ensure that the solution architecture and its supporting processes and policies are assessed completely:

• Identifying the scope of the project.
• Establishing the set of security architecture components.
• Crafting a control profile on a per-component basis where one control may apply differently to each component, requiring separate evidence.
• Providing documented guidance as to acceptable evidence per control per component.
• Experience verifying that security safeguards for IT systems and infrastructure meet Government of Canada policies and standards and have been implemented correctly to meet assurance requirements
• Experience providing guidance to their client concerning the mitigation of security risks within the Public Cloud environment
• Two valid certifications from the following list:

• CISSP (Certified Information Systems Security Professional) from International Info System Security Certification Consortium Inc. (ISC)2
• CCSP (Certified Cloud Security Professional) from (ISC)²)
• CISSP / ISSEP (advanced specialty Information Systems Security Engineering Professional) from (ISC)2
• CISSP / ISSAP (advanced specialty information Systems Security Architecture Professional) from (ISC)2
• CISSP / ISSMP (advanced specialty Information Systems Security Management Professional) from (ISC)2
• CPP (Certified Protection Professional) from ASIS;
• CISA (Certified Information Systems Auditor) from ISACA
• CRISC (Certified in Risk and Information Systems Control) from ISACA;
• CISM (Certified Information Security Manager) from ISACA
• CBCP (Certified Business Continuity Professional) from DRI
• Certificate of Cloud Security Knowledge (Cloud Security Alliance)

Expected salary:

Location: Ottawa, ON

Job date: Thu, 07 Dec 2023 08:52:25 GMT

Apply for the job now!

The post Senior Secret cleared IT Security TRA and C&A Analyst to review, analyze, and apply GC IT Security policies, SA&A processes and risk mitigation strategies appeared first on World News: Entertainment, lifestyle, Health, Technology.