About the job RQ09515 - Technology Architect - SeniorThe Senior Technology Architect role requires deep knowledge, expertise, and experience in cyber security solutions, security operations (SecOps) solutions and practices, automation and artificial intelligence (AI) in cyber security, managed security services, and next‑generation network security. cyber security models, automation solutions and threat detection, particularly within the education sector, preferably in the Ontario K12 school board environment. Providing subject‑matter expertise, tactical, operational advice, consultancy, and training on all aspects of cyber security and network solutions such as: Cyber security solutions to protect, detect, and respond to cyber threats. Various vendor‑specific cyber security and network solutions.

Security operations (SecOps) and AI‑operations (AIOps) practices. Delivering solution and architecture guidance, training, and implementation support for next‑generation networks, network protection and cyber security technologies, including: Security service edge (SSE)/secure access service edge (SASE), including integration of network and security functions such as secure web gateway (SWG), cloud access security broker (CASB) and zero‑trust network architecture, firewall‑as‑a‑service (FWaaS). SD‑WAN (software‑defined wide area network) and software‑defined networking (SDN).

AI and machine learning (ML)‑driven network and security technologies. Advanced intrusion prevention systems (IPS), intrusion detection systems (IDS), network access control and distributed denial‑of‑service (DDoS) protection. Penetration testing and automated red teaming.

Operation technology (OT) security. Providing technical guidance, delivering solution, training, and implementation support for strategic integration of hybrid cyber security operating models involving both in‑house and outsourced MSSP (managed security services provider) capabilities, including: Security operations architecture planning.

Security

Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), EDR/XDR, and threat intelligence platforms in a hybrid implementation. Automation and orchestration workflows. Governance, risk, and compliance in a hybrid (in‑house and outsourced) security operations environment.

Providing subject‑matter expertise in network operations centre (NOC) and security operations centre (SOC) technologies, services, and tools, including, but not limited to: Security Orchestration, Automation and Response (SOAR). Strategic use of telemetry and analytics tools to support architectural decisions. end‑to‑end security automation workflows using SOAR platforms (Microsoft Sentinel, Cortex XSOAR), including bi‑directional integrations, telemetry ingestion, and orchestration of real‑time response actions. advanced AI in cyber security, including agentic AI and autonomous security, to support automation maturity and organisational readiness. agentic AI‑based automation for incident response, phishing mitigation, access control, and exposure management across distributed environments. to measure automation effectiveness, operational maturity,



and MSSP accountability. data science and ML techniques to security telemetry for anomaly detection, triage automation, and prioritisation scoring. operationalise AI‑human workflows, improve detection logic, and support continuous improvement loops. development and delivery of technical training courses, including working on automation and autonomous systems to board IT and cyber security staff in support of boards cyber resilience efforts. Presenting to senior and executive management and external senior stakeholders, as needed.

Providing regular status updates and project reports cooperative approach to solution definition, development, and implementation industry and legislative advancements at the federal, provincial/local level (Enhancing Digital Security and Trust Act, 2024 (EDSTA) ). This work involves working in close partnership with various government departments, the K‑12 education sector, telecommunications providers, and network and cyber security technology vendors to develop tailored approaches and implementation plans. To support various stakeholders, the resource must be available to perform hands‑on configuration, troubleshooting and training at the client site.

Therefore, the resource must be available to travel same day or overnight in Ontario, as needed. The unit manager may assign other related board work for other unit or branch initiatives, as required. Cyber security Architecture, Threat Management & Network 40% 10+ years in cyber security solutions and next‑generation network security, with a focus on hands‑on implementation, configuration, and troubleshooting. 5+ years of experience in network security within advanced SDN environmentsp, preferably in Ontario K12 school boards.

Proven hands‑on experience deploying and implementing the following solutions and technologies, preferably for Ontario K‑12 school boards: Azure, AWS, Google Cloud) NIST Cybersecurity Framework (CSF) v2, CIS Controls v8 AI/ML‑driven cyber security and agentic AI‑based automation Security automation (static and dynamic) and playbook development Penetration testing and automated red teaming Strong knowledge of layered security controls and risk‑informed cyber security models (NIST CSF v2, CIS Controls v8). Demonstrated ability to assess and evaluate emerging cyber security technologies through pilots and proof‑of‑concepts. Automation, AI & Autonomous Security 25% 5+ years of experience deploying secure architectures and automation workflows, preferably within Ontario K12 school boards.

Hands‑on experience with SOAR playbook design, bi‑directional integrations, and AIOps‑driven incident response. Proficiency in applying data science and ML to cyber security telemetry, including anomaly detection, scoring algorithms, and observability dashboards.



Familiarity with security data lakes and log analytics platforms (e.Azure Data Explorer, Splunk, ELK).

Understanding of AI governance, explainability, and ethical deployment of autonomous systems. Proven hands‑on experience designing and implementing hybrid (internal and outsourced) security operations, including: High‑level threat detection and incident response planning. SIEM, SOAR, EDR/XDR, and threat intelligence platforms.

Automation and orchestration workflows. Governance, risk, and compliance in hybrid environments.

Experience guiding the integration of SecOps platforms into broader cyber security architecture and automation frameworks.

Experience developing and tuning detection use cases across identity, endpoint, email, network, and cloud environments. Training, Collaboration & Stakeholder Engagement 10% 5+ years of experience presenting to senior and executive management and external stakeholders. 5+ years coordinating and leading complex technical work with multiple IT teams, internal and external stakeholders. 5+ years of experience preparing written materials (e.status reports, recommendations, briefing notes) and experience maintaining security content (rules, dashboards, playbooks) across shared platforms. 5+ years of experience delivering cyber security upskilling training to IT and security teams. Bachelors degree in computer science, cyber security, or a related field.

Postgraduate degree (e.in computer science, cyber security, or engineering is preferred. Relevant vendor certifications or equivalent work experience. Cyber security certification(s). Preference is Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP).

Other examples include Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC).

Public Sector

Experience 5% 5+ years hands‑on experience working in the K‑12 education sector, with Ontario K‑12 school boards, in particular with school board network, network security and cyber security. 10+ years in cyber security solutions and next‑generation network security, with focus on hands‑on implementation, configuration, and troubleshooting. 5+ years of experience in network security within advanced SDN environmentsp preferable in Ontario K12 school boards. Proven hands‑on experience deploying and implementing the following solutions and technologies, preferably for Ontario K‑12 school boards: Azure, AWS, Google Cloud). NIST Cybersecurity Framework (CSF) v2, CIS Controls v8.

AI/ML‑driven cyber security and agentic AI‑based automation. Security automation (static and dynamic) and playbook development. Proven hands‑on experience designing and implementing hybrid (internal and outsourced) security operations, including: High‑level threat detection and incident response planning.

SIEM, SOAR, EDR/XDR, and threat intelligence platforms. Automation and orchestration workflows. Governance, risk, and compliance in hybrid (in‑house and outsourced) security operations environment. "

📌 Rq09515 - Technology Architect - Senior (Winnipeg)
🏢 Rubicon Path
📍 Winnipeg