Job Description

About the Role

The Infrastructure Systems Analyst 3 is a senior technical specialist responsible for the design, implementation, optimization, security, and reliability of the organization’s enterprise network infrastructure. This role provides expert-level leadership across complex network, connectivity, wireless, firewall, VPN, and secure remote access services while maintaining a strong working knowledge of core infrastructure platforms.

Our current hybrid model requires employees to work on-site three days per week. On-site requirements may change based on operational needs.

Key Responsibilities

• Lead the design, implementation, and optimization of enterprise network services, including LAN/WAN, wireless, routing, switching, VPNs, firewalls, and secure remote access.
• Manage and support firewall policies (rules, NAT, VPNs, traffic analysis, troubleshooting, and policy optimization) and support cybersecurity investigations through analysis of firewall, VPN, and network activity logs.
• Design and maintain network segmentation (VLANs, zones, access controls) across clinical, administrative, wireless, guest, vendor, and server environments.
• Implement and support secure wireless networks (SSIDs, AP design, WPA2/WPA3-Enterprise, 802.1X, RADIUS, certificate-based authentication).
• Configure and troubleshoot enterprise switching (VLANs, trunking, LACP, spanning tree, port security, uplinks) and connectivity to enterprise systems.
• Design and support secure remote access solutions, including client and site-to-site VPNs, MFA, and vendor access.
• Act as a senior escalation point and lead incident response, root cause analysis, and service restoration for complex network and connectivity incidents.
• Provide expert guidance on network architecture, capacity planning, resiliency, and risk mitigation; collaborate with infrastructure teams across network, server, storage, virtualization, and cloud platforms.
• Contribute to infrastructure standards, roadmaps, and long-term technology planning; ensure alignment with security, compliance, and business continuity requirements.
• Maintain documentation (diagrams, standards, runbooks); support cloud connectivity, data centre modernization, and disaster recovery initiatives; provide mentorship, proactive monitoring, change execution, on-call support, and vendor coordination.

Qualifications

• College diploma or university degree in Computer Science, Information Technology, or related field.
• Minimum 5 years of progressive enterprise IT experience with a focus on networking in complex, multi-site environments.
• Advanced hands-on experience with enterprise networking technologies: routing, switching, VLANs, trunking, spanning tree, LACP, firewall policies, NAT, VPNs, wireless, secure remote access, and troubleshooting
• Strong experience with enterprise firewalls, including policy creation, NAT, VPNs, traffic analysis, rule review, and security-focused management
• Experience with enterprise wireless technologies: SSIDs, access points, controllers/cloud platforms, roaming, authentication, RF coverage, and VLAN integration.
• Strong knowledge of infrastructure platforms: Windows Server, Active Directory, virtualization, storage, backup, DNS, DHCP, and cloud-connected services.
• Experience with certificate-based authentication, PKI-integrated services, and certificate lifecycle management.
• Experience with network segmentation, NAC, least-privilege access, and zero-trust-aligned controls.
• Proven ability to troubleshoot and resolve complex, high-impact technical issues independently.
• Excellent communication skills with the ability to translate technical concepts for non-technical audiences.
• Experience with monitoring/diagnostic tools (e.g., Zabbix, SNMP, PRTG, Wireshark, packet analysis).
• Demonstrated ability to design, document, and maintain enterprise network architecture and standards.
• Experience supporting mission-critical enterprise environments.

Preferred:

• Experience leading or participating in infrastructure modernization, CAB processes, and incident/problem/root cause analysis.
• Experience collaborating with Infrastructure, Security, Clinical Applications, and vendors.
• Hybrid cloud networking (Azure, AWS), site-to-site and client VPN design.
• Exposure to SDN (SD-WAN, controllers, NAC) and network automation/scripting (Python, Ansible, APIs).
• Experience improving operational efficiency, reducing configuration drift, and supporting high availability/resiliency design.
• Experience in regulated environments (preferably healthcare) and familiarity with ITIL frameworks.

Certifications

• CCNA (required) or equivalent enterprise networking experience.
• CCNP, Aruba, Palo Alto, or equivalent certifications strongly preferred.
• CISSP, Security+, or other cybersecurity certifications are assets.

Operational Environment:

• Multi-site healthcare environment supporting clinical and administrative systems
• Secure remote access requirements
• Hybrid cloud / modernized data centre environment
• High availability and business continuity expectations

Language Requirements

English level A- is mandatory in oral expression, comprehension, reading and writing. Bilingual (French/English) is considered an asset