Pease contact Steve at steve.forgie@[EMAIL PROTECTED]
if interested.
Job Title: Network Administration/Operator
1. Work Description: The contractor shall perform the following
tasks:
a. Provide subject matter expert network sup****t,
recommendations and design reviews to DIMEI in the following technology
areas:
i. Main protocols: IP, Ipv6, OSPF, BGP, (S)FTP,
HTTP(S),
SMTP, SNMP, TELNET, TCP, UDP, ICMP, IGMP, MIME, IPSEC, SSL;
ii. Networking Technologies (routers, switches, load
balancers, data link simulators, network monitoring tools, IP Accelerators
etc);
iii. Network Device administration (Syslog servers,
Firewalls, IDS, Active Directory, Protocol enforcers, HIPS, Trustifier
Services, etc); and
iv. Cryptographic technologies (commercial).
b. Participate in the sup****t and review of current
network management administration within a DND/CF network. The contractor
shall provide DIMEI with advice for all network system and sup****t
aspects.
As such the contractor shall:
i. In coordination with DIMEI, verify weekly testing
of
the host-based trustifier system agents to ensure that they defend against
any recently released computer programs. The testing results will be
do***ented using an existing test results template.
ii. In resolving identity, continuity and domain
separation problems scripting of custom rule scripts for the Trustifier
agent will be required. The resource will add enhancements to the
existing
scripts and also create new scripts.
iii. The investigation of end-users complaints, via
trouble
tickets (Sup****t Magic), regarding errors in accessing websites and
network
access/slowness issues. This task involves investigating the equipment
that
impaired access to the site and either fixing the issue or escalate to
more
senior technical staff.
iv. Monitoring of the Daily syslog files generated from
the
system's servers, mail servers, desktop agents, active directory servers,
firewalls, content checkers, proxies, host based management servers, and
Load Balancers.
v. Update the existing SOPs and create new SOPs, on an
as
requested basis, to define the additional procedures required for the
various organizations (i.e.: NOC in DND) to be able to deal with integrity
service sup****t as it pertains to the fixes in server scripts required;
vi. First and second line sup****t for the systems
firewall
servers, host based identity verification and management software
(Trustifier, Cisco and Symantec), proxies (SQUID (SUN OS) and Linux/suse
software), and content checkers (Linux).
vii. Provide advice by analyzing new requirements via
capability deficiencies and making recommendations as well as conducting
options analysis for the design of network security related
systems/sub-systems;
viii. Provide advice by conducting problem analysis, testing
and troubleshooting, reviewing exclusion proposals, investigating issues
of
the networks as well as providing recommendations for the best solution;
ix. Provide system sup****t by developing configuration
changes to the networking systems in response to changes in requirements
and
to the network design;
x. Provide advice by proposing
options/upgrades/modifications to the systems in response to changes in
network architecture, communication protocols etc.;
xi. Provide lab simulations and working sandbox
environments
for pre-deployment testing;
xii. Provide advice by reviewing and responding to Requests
for Change (RFC), design requests and technical assistance with respect to
security solutions;
xiii. Attend meetings, conferences and, workshops as and when
required.
c. Provide advice to DIMEI on all questions related to
migration and integration of existing or emerging Services and systems
with
DND/CF's network architecture.
2. Contract Period: ASAP for a period of 20 Weeks.
3. Location: Ottawa
4. Hours of work: Normal business hours are 7.5 hours per day,
Monday to Friday between 08:00 until 16:00.
5. Contractor Qualifications:
a. Knowledge:
i. Main protocols: IP, OSPF, BGP, FTP, HTTP, SMTP,
TELNET, TCP, UDP, ICMP, IGMP, MIME, IPSEC, SSL;
ii. Networking Technologies (Syslog servers, MS Active
Directory, Linux, MS-Server 0x, Solaris 0S, HPUX, Trustifier, routers,
switches, load balancers (F5), data link simulators, network monitoring
tools, IP Accelerators, virtualization, etc);
iii. Network Security (Firewalls, IDS (Cisco), IPS
(Tipping
Point), Protocol enforcers (Sygate), HIPS (CSA -Cisco), Trustifier
(Trustifier Inc.), etc); and
iv. Cryptographic technologies is a plus;
b. Skills:
i.
Trustifier Agent Management and network knowledge essential;
ii.
Experience with Window Server 03/0x, Content scanners, Firewalls
iii.
Experience with Linux/Suse,
iv.
Experience scripting preferable Java
v.
Deployment of desktop agents;
vi. Cisco
CCNA & CCNP is a plus.
c. Language: English
d. Security Clearance: Level II
|
