Employment Status:
Regular
Time Type:
Full time
BUILDING A WORLD CLASS TEAM STARTS WITH YOU
At the heart of CSA Group is a vision: making the world a better, safer, more sustainable place. It's been part of our mission for nearly one hundred years: from the first engineering standard for railway bridges developed in 1919, to more than 3,500 standards, codes & related products today.
Headquartered in Canada, with a global footprint of more than 30 labs and offices across Europe, Asia and North America, CSA Group tests, inspects and certifies a wide range of products - from every day househould items to leading edge technology-to meet exacting requirements for safety, performance and environmental impact.
Our employees take pride in making a difference in people's lives through the work that we do. We're looking for people like you to help make it happen.
Job Summary:
CSA Group has an immediate opportunity for a Manager, IT Infrastructure (Network & Cloud) to provide senior technical leadership over the design, implementation, operation, and security of CSA Group's hybrid infrastructure estate — spanning the global network, on-premises compute and storage, and the Microsoft cloud environment. This role builds, secures, patches, and monitors infrastructure across on-premises and cloud environments, and is accountable for network and compute security posture, patch and vulnerability currency, and demonstrated recoverability through tested backup and disaster recovery capability. The position translates business requirements into cost-effective technical solutions, directs third-party managed service providers and system integrators, and recommends and implements new technologies to support revenue growth, operational efficiency, and risk management.
Responsibilities:
- Designs, implements, and operates the global WAN/SD-WAN, LAN, wireless, and structured cable plant, including routing, switching, and network segmentation.
- Configures, maintains, and audits firewalls, VPN, and remote access, including zero trust and multi-factor authentication integration.
- Builds and operates the on-premises virtualization platform, Windows Server and Linux environments, and core directory, identity, and name resolution services.
- Provisions and maintains SAN/NAS storage, and directs physical work in server rooms and data centre facilities, including cabling, power, cooling, and secure decommissioning.
- Designs, builds, secures, and operates Microsoft Azure infrastructure and administers the Microsoft 365 tenant, including hybrid identity and hybrid connectivity to on-premises environments.
- Applies hardening baselines and secure configuration standards, and manages privileged access, secrets, and certificates across network, compute, and cloud workloads.
- Plans and executes patch cycles, triages vulnerability scan output and vendor advisories, and remediates within change control.
- Administers enterprise backup and replication platforms, designs retention and immutability schedules, and performs and evidences scheduled restore testing.
- Maintains disaster recovery and business continuity plans, runbooks, and failover procedures, and plans and executes DR exercises with the business.
- Participates in security incident response, including containment, evidence preservation, remediation, and post-incident hardening.
- Administers infrastructure monitoring, alerting, and log management across network, compute, storage, and cloud, and produces availability, capacity, and performance trend reporting.
- Directs and holds accountable managed service providers, system integrators, and security partners engaged to deliver or support infrastructure services.
- Raises and documents changes for approval, communicates impact and maintenance windows, and maintains infrastructure diagrams, standards, runbooks, and configuration records.
- Automates repetitive build, configuration, patching, and reporting tasks to reduce manual effort and configuration drift across the estate.
- Acts as senior escalation point and technical mentor for complex infrastructure incidents, and leads root cause analysis and permanent corrective action for major outages.
- Provides guidance, coaching, and knowledge transfer to IT Technical Specialists and site IT staff, and consults on regional office and site infrastructure initiatives.
- Provides evidence and technical input for internal and external audits, accreditation, and regulatory information security assessments.
- Monitors cloud consumption and infrastructure spend, identifies rightsizing and optimization opportunities, and manages licence, support, and maintenance renewals.
- Understands the importance of HSE, reports hazards and incidents, completes assigned training, and participates in workplace inspections and audits.
Education & Experience:
- 3-year technical diploma or university degree in Computer Science, Computer Engineering Technology, Network Engineering, or a related discipline, or equivalent practical experience.
- Eight to twelve (8-12) years of progressive experience in enterprise infrastructure, including at least three to five (3-5) years operating as a senior or lead technical resource with end-to-end accountability for a production environment.
- Demonstrated hands-on experience across network (routing, switching, firewalls, VPN, wireless, SD-WAN), virtualization and Windows Server (with working Linux capability), SAN/NAS storage, and enterprise backup and replication platforms.
- Demonstrated hands-on experience building and operating Microsoft Azure infrastructure and administering a Microsoft 365 tenant, including hybrid identity and connectivity.
- Experience managing vendors, carriers, managed service providers, and system integrators, including scope, service levels, and deliverable acceptance.
Skills:
- Must have exceptional interpersonal and communication skills, including the ability to explain technical matters to non-technical stakeholders.
- Strong project, time management, and leadership skills, with the ability to manage operational demand and project commitments concurrently.
- Demonstrated experience applying hardening standards, managing privileged access, and executing patch and vulnerability remediation across network and compute infrastructure.
- Demonstrated experience designing, executing, and evidencing backup, restore, and disaster recovery testing against defined recovery objectives.
- Working proficiency in scripting and automation, with exposure to infrastructure as code.
- Position requirements demand initiative, creativity, integrity, and technical excellence.
- Desire to learn and become familiar with new technologies, and ability to assimilate knowledge quickly and effectively.
- Certifications considered an asset: Cisco CCNA/CCNP or equivalent (Fortinet NSE, Palo Alto PCNSA/PCNSE, Juniper JNCIA/JNCIS, Aruba ACSA/ACSP); Microsoft AZ-104; AZ-800/801 (or consolidated AZ-802); AZ-500 (or SC-500); MS-102; VMware VCP-VVF/VCF; CompTIA Network+, Server+, or Security+; ITIL Foundation; Veeam VMCE.
This is a hybrid position requiring regular in-person attendance and punctuality in accordance with Company policies. Additionally, the ability to interact well with other employees and work overtime, as necessary, is required.
The typical hiring range for this position is $116,230 - $152,555, however, based on a variety of considerations (such as education, licenses, certifications and/or experience,) CSA Group reserves the right to flexibility outside of the stated range.
CSA Group is an Equal Opportunity Employer and is committed to diversity, equity, and inclusion. We prohibit discrimination and harassment of any kind based on any grounds stipulated by applicable laws. We are an organization where opportunities are based on skills and abilities, and differences are respected and valued. Please contact us at [email protected] if you require accommodation in the interview process.