From: steve.forgie@microtime-it.com   
      
   Pease contact Steve at steve.forgie@microtime-it.com if interested.   
      
      
      
   Job Title:  Network Administration/Operator   
      
      
      
   1.         Work Description:  The contractor shall perform the following   
   tasks:   
      
      
      
   a.                   Provide subject matter expert network support,   
   recommendations and design reviews to DIMEI in the following technology   
   areas:   
      
      
      
   i.                     Main protocols: IP, Ipv6, OSPF, BGP, (S)FTP, HTTP(S),   
   SMTP, SNMP, TELNET, TCP, UDP, ICMP, IGMP, MIME, IPSEC, SSL;   
      
   ii.                   Networking Technologies (routers, switches, load   
   balancers, data link simulators, network monitoring tools, IP Accelerators   
   etc);   
      
   iii.                  Network Device administration (Syslog servers,   
   Firewalls, IDS, Active Directory, Protocol enforcers, HIPS, Trustifier   
   Services, etc); and   
      
   iv.                  Cryptographic technologies (commercial).   
      
      
      
   b.                   Participate in the support and review of current   
   network management administration within a DND/CF network. The contractor   
   shall provide DIMEI with advice for all network system and support aspects.   
   As such the contractor shall:   
      
      
      
   i.                     In coordination with DIMEI, verify weekly testing of   
   the host-based trustifier system agents to ensure that they defend against   
   any recently released computer programs. The testing results will be   
   documented using an existing test results template.   
      
   ii.                   In resolving identity, continuity and domain   
   separation problems scripting of custom rule scripts for the Trustifier   
   agent will be required.  The resource will add enhancements to the existing   
   scripts and also create new scripts.   
      
   iii.                  The investigation of end-users complaints, via trouble   
   tickets (Support Magic), regarding errors in accessing websites and network   
   access/slowness issues.  This task involves investigating the equipment that   
   impaired access to the site and either fixing the issue or escalate to more   
   senior technical staff.   
      
   iv.                  Monitoring of the Daily syslog files generated from the   
   system's servers, mail servers, desktop agents, active directory servers,   
   firewalls, content checkers, proxies, host based management servers, and   
   Load Balancers.   
      
   v.                    Update the existing SOPs and create new SOPs, on an as   
   requested basis, to define the additional procedures required for the   
   various organizations (i.e.: NOC in DND) to be able to deal with integrity   
   service support as it pertains to the fixes in server scripts required;   
      
   vi.                  First and second line support for the systems firewall   
   servers, host based identity verification and management software   
   (Trustifier, Cisco and Symantec), proxies (SQUID (SUN OS) and Linux/suse   
   software), and content checkers (Linux).   
      
   vii.                 Provide advice by analyzing new requirements via   
   capability deficiencies and making recommendations as well as conducting   
   options analysis for the design of network security related   
   systems/sub-systems;   
      
   viii.               Provide advice by conducting problem analysis, testing   
   and troubleshooting, reviewing exclusion proposals, investigating issues of   
   the networks as well as providing recommendations for the best solution;   
      
   ix.                 Provide system support by developing configuration   
   changes to the networking systems in response to changes in requirements and   
   to the network design;   
      
   x.                   Provide advice by proposing   
   options/upgrades/modifications to the systems in response to changes in   
   network architecture, communication protocols etc.;   
      
   xi.                 Provide lab simulations and working sandbox environments   
   for pre-deployment testing;   
      
   xii.                Provide advice by reviewing and responding to Requests   
   for Change (RFC), design requests and technical assistance with respect to   
   security solutions;   
      
   xiii.              Attend meetings, conferences and, workshops as and when   
   required.   
      
      
      
   c.                   Provide advice to DIMEI on all questions related to   
   migration and integration of existing or emerging Services and systems with   
   DND/CF's network architecture.   
      
      
      
   2.         Contract Period:  ASAP for a period of 20 Weeks.   
      
      
      
   3.         Location:  Ottawa   
      
      
      
   4.         Hours of work:  Normal business hours are 7.5 hours per day,   
   Monday to Friday between 08:00 until 16:00.   
      
      
      
   5.         Contractor Qualifications:   
      
      
      
   a.         Knowledge:   
      
      
      
   i.                     Main protocols: IP, OSPF, BGP, FTP, HTTP, SMTP,   
   TELNET, TCP, UDP, ICMP, IGMP, MIME, IPSEC, SSL;   
      
   ii.                   Networking Technologies (Syslog servers, MS Active   
   Directory, Linux, MS-Server 0x, Solaris 0S, HPUX, Trustifier, routers,   
   switches, load balancers (F5), data link simulators, network monitoring   
   tools, IP Accelerators, virtualization, etc);   
      
   iii.                  Network Security (Firewalls, IDS (Cisco), IPS (Tipping   
   Point), Protocol enforcers (Sygate), HIPS (CSA -Cisco), Trustifier   
   (Trustifier Inc.),  etc); and   
      
   iv.                  Cryptographic technologies is a plus;   
      
      
      
   b.                   Skills:   
      
                                                      i.   
   Trustifier Agent Management and network knowledge essential;   
      
                                                    ii.   
   Experience with Window Server 03/0x, Content scanners, Firewalls   
      
                                                   iii.   
   Experience with Linux/Suse,   
      
                                                   iv.   
   Experience scripting preferable Java   
      
                                                     v.   
   Deployment of desktop agents;   
      
                                                   vi.                  Cisco   
   CCNA & CCNP is a plus.   
      
      
      
   c.         Language: English   
      
      
      
   d.         Security Clearance: Level II   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)