IT Network Infrastructure Engineer

Location: Canada_Remote, Canada

Dans des marchés en rapide évolution, les clients à travers le monde font confiance à Thales. Thales est une entreprise où les personnes les plus brillantes du monde entier se regroupent pour mettre en commun leurs idées et ainsi s'inspirer mutuellement. Dans tous les secteurs où œuvre Thales, notamment l'aérospatiale, le transport, la défense, la sécurité et l'espace, nos équipes d'architectes conçoivent des solutions innovantes qui rendent demain possible dès aujourd'hui.

Le bureau Avionique situé avenue Marie-Curie à Montréal constitue le centre de compétences du Groupe Thales pour les commandes de vol électriques des avions d'affaires et de transport régional. L'équipe conçoit et intègre des suites avioniques, des systèmes de commandes de vol électriques, des systèmes de communications par satellite ainsi que d'autres concepts innovants destinés aux marchés des avions d'affaires et de transport régional.

In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.

The Avionics office in Marie-Curie, Montreal is Thales Group's Centre of Competence for business and regional jet flight control systems is located at our Montreal - Marie Curie office. The team designs and integrates avionics suites, fly-by-wire flight control systems, SATCOM systems and other innovative concepts for the regional and business aircraft markets.

Thales is looking for an IT Network Infrastructure Engineer to support external customers. The person may be a SME in some domains; but, is expected to have full professional knowledge of network infrastructure concepts and company objectives to resolve a wide range of issues in effective and sometimes creative ways, in all of the following domains. As an advanced engineer, you are expected to do these things with little technical direction and with only general guidance on new assignments.

• Handle tickets in ServiceNow, read architecture diagrams, and construct rules based on those diagrams.
• Firewalls and network filters, in both Enterprise, Stores, and cloud networks.
• Intrusion Prevention policies.
• Networking Protocols/Concepts (Routing(OSPF, BGP), VLAN, Sub-netting, Load balancing, TCP/IP, DNS, HTTP, TLS, SSH).
• Site-to-site and remote-access VPN connectivity.
• Network Access Control.
• Authentication, Authorization and Accounting (to include multi-factor authentication).
• Web access proxy servers and URL filtering.
• Network Security policy creation, exception documentation and approval.
• Provide suggestions to team lead/manager in creating your professional development and training plan.
• Work on projects assigned to you, in effort to advance partnership opportunities between Network Security team and other business areas.
• Work with senior engineers to define network security requirements for current and future state end-to-end architectures and platforms to advance security controls and the security posture of the business.
• Assist senior engineers in collaborating with development and engineering teams to prioritize security risks, provide mitigation or remediation recommendations, and implement compensating controls.
• Assist in performing proof-of-concept testing for network security solutions under consideration for purchase and implementation.
• Assist in developing and maintaining network security policies, standards, processes and workflows.
• Provide 7/24 On-Call support for infrastructure related service incidents and follow internal management escalation procedures when necessary (team rotation).

Education:

• Bachelor's degree in a related field of study with a minimum of 5-8+ years of relevant work experience or a Master's degree in a related field of study with 4+ years of relevant work experience, or an equivalent combination of education and experience.

Skills and Abilities:

• Must have: 3+ Years working with Palo Alto Firewall.
• At least one entry-level vendor certification (with non-entry-level preferred) in the Network Security arena (Palo Alto PCNSA/PCNSE preferred, Cisco CCNA/CCNP Security, Juniper JNCIA-SEC/JNCIS-SEC, etc.) or equivalent experience.

• Excellent interpersonal & leadership skills.
• Excellent oral & written communication skills, people skills, planning, implementation and troubleshooting skills.

Skills and Abilities:

• Extensive experience working with Cisco switches, Cisco AnyConnect VPN, Dell switches, Juniper firewalls.
• ITIL experience and certifications.

• Some limited physical demands may present themselves while navigating server rooms and providing network support on site.
• Able to lift and carry items up to 50 lbs.

þ Schedule: Core business hours are Monday to Friday, between 9:30-3:00pm. Specific work schedule and expected hours of work will be discussed. Some weekend and evening work may be required and will be dependent on projects and customer requirements.

þ Physical Environment: Access will be required in Ottawa server room (secure zone - NATO Secret clearance required).

#LI-Hybrid

#LI-PD1

Thales est un employeur offrant l'égalité des chances qui valorise la diversité et l'inclusion sur le lieu de travail. Thales s'engage à mettre en place des mesures d'adaptation tout au long du processus de recrutement. Les candidats sélectionnés pour une entrevue et ayant besoin de mesures d'adaptation sont priés de le faire savoir lors de l'invitation à l'entrevue; notre équipe travaillera volontiers avec chaque candidat pour répondre à ses besoins particuliers. Tous les renseignements relatifs aux mesures d'adaptation seront traités d'une manière confidentielle et utilisés uniquement dans le but d'offrir une expérience candidat adaptée.

Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.

Ce poste exige un accès direct ou indirect à du matériel, des logiciels, ou à des informations techniques contrôlés en vertu de la Liste canadienne des marchandises et technologies d'exportation contrôlée, du Programme canadien des marchandises contrôlées, du Programme canadien de la sécurité industrielle, de la réglementation américaine lnternational Traffic in Arms Regulations (ITAR) ou de la réglementation américaine Export Administration Regulations (EAR). Tous les candidats doivent être éligibles ou en mesure d'obtenir une autorisation pour un tel accès, y compris l'éligibilité au Programme canadien des marchandises contrôlées et être en mesure d'obtenir une habilitation de sécurité canadienne de niveau Secret OTAN.

This position requires direct or indirect access to hardware, software or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR) and/or the US Export Administration Regulations (EAR). All applicants must be eligible or able to obtain authorization for such access including eligibility to the Canadian Controlled Goods Program and able to obtain a Canadian NATO Secret clearance.