Senior IP Network Architect

Telesat; Ottawa; On-site; CAD 120,000 - 180,000; Full time

Job summary

Telesat is seeking a Senior IP Network Architect to design, implement, test, and optimize our IP network infrastructure. You will lead complex architectures, focusing on routing, firewalls, SDWAN, IPSEC VPNs, and deep packet inspection to ensure security and performance.

You will mentor engineers, collaborate with cross-functional teams, and stay current with MEF standards and industry practices. Occasional international travel is anticipated; Canadian CGP clearance may be required.

Qualifications

• 10+ years of progressive experience designing and architecting IP networks, with routing, firewalls, SDWAN and IPSEC VPNs.
• Understanding of MEF standards related to Carrier Ethernet Services.
• Professional certifications such as CCIE, CCNP, CISSP or NSE7 are highly desirable.
• Experience with direct Internet services to clients, including IP transit and BGP policies.
• Experience with network automation and scripting (Python, Ansible).

Responsibilities

• Lead design of complex IP network architectures aligned with business needs.
• Champion security with firewall configurations and IPSEC VPNs.
• Develop test cases and validate IP routing, SDWAN, and VPN solutions; familiarity with Ixia/Spirent.
• Mentor junior engineers and collaborate with cross-functional teams.
• Evaluate and select network platforms and vendor solutions.

Skills

IP routing

Firewalls

SD-WAN

IPSEC VPN

Deep packet inspection

Network design

Python scripting

BGP

IS-IS

MPLS

Education

Bachelor's degree in Computer Science/IT

Tools

Fortinet FortiGate

Ixia

Spirent

Ansible

Job description

Telesat (Nasdaq and TSX: TSAT) is a leading global satellite operator, providing reliable and secure satellite-delivered communications solutions worldwide to broadcast, telecommunications, corporate and government customers for over 55 years. Backed by a legacy of engineering excellence, reliability and industry-leading customer service, Telesat has grown to be one of the largest and most successful global satellite operators.

Telesat Lightspeed, our revolutionary Low Earth Orbit (LEO) satellite network, scheduled to begin service in 2027, will revolutionize global broadband connectivity for enterprise and Government users by delivering a combination of high capacity, security, resiliency and affordability with ultra-low latency and fiber-like speeds. Telesat is headquartered in Ottawa, Canada, and has offices and facilities around the world.

The company’s state-of-the-art Satellite fleet consists of 12 GEO satellites, the Canadian payload on ViaSat-1 and one LEO 3 demonstration satellite. For more information, follow Telesat on X and LinkedIn or visit www.telesat.com

We are seeking a highly skilled and experienced Senior IP Network Architect to join our dynamic team. As a Senior IP Network Architect, you will play a pivotal role in designing, implementing, testing and optimizing our organization's IP network infrastructure. Your deep knowledge and expertise in IP Routing, network appliances, firewalls, SASE, SDWAN and IPSEC VPN will be essential in driving the stability, security, and efficiency of our network operations.

The Senior IP Network Architect is a Subject Matter Expert (SME) on all aspects of the LEO Network design and works with other LEO teams within Telesat and external contractors to ensure designs, implementation decisions, validation plans and documentation reflect the business requirements and objectives of the LEO program.

Network Architecture and Design

• Lead the design of complex IP network architectures, considering business requirements, scalability, and performance.
• Possess a strong command of network platforms and appliances, including routers, switches, firewalls, SDWAN controllers, IPSEC VPN gateways, and deep packet inspection tools.
• Lead and design complex Direct Internet Access and Business Internet Access services for clients, considering business requirements, scalability, security and performance.
• In coordination with the Network and System Engineering teams attend, contribute and produce materials for internal and external design and system engineering reviews for Network Engineering related activities.
• Prepare and deliver materials including presentations, reference documentation and test strategies for network equipment deployment and operation.
• Develop and oversee plans including product idea investigations, proof of concept, service validation and product demonstrations in Telesat labs.
• Maintain a deep understanding of industry standards and protocols related to segment routing, such as IS-IS, BGP, and MPLS.
• Maintain familiarity with transport network technologies including Segment Routing (SR-MPLS) and Software Defined Networking (SDN).
• Assess, evaluate, and recommend network platforms and appliances, hardware, and software solutions to meet business requirements.
• Represent the Network Engineering team by documenting and delivering network requirements to hardware and software development teams specifically in the areas of customer facing MEF 3.0 interface and networking design support requirements.

Security and Compliance

• Design and implement secure network solutions with a focus on firewall configurations, IPSEC VPNs, and deep packet inspection techniques.
• Ensure compliance with industry standards and best practices for network security.

Optimization and Performance

• Continuously monitor network performance, analyzing metrics and conducting assessments to identify bottlenecks, vulnerabilities, and areas for improvement. Develop strategies to optimize network performance, enhance security, and ensure high availability.
• Collaborate with cross-functional teams to enhance network performance and reliability.
• Experience with network automation and scripting using tools such as Python, Ansible, or similar.

Emerging Technologies

• Stay current with industry trends, emerging technologies, and best practices related to IP networking and network appliances.
  Proactively recommend and lead the adoption of new technologies that align with business goals.

Vendor Management

• Collaborate with vendors to evaluate products, negotiate contracts, and ensure the successful deployment and operation of network appliances.

Technical Leadership

• Provide mentorship and guidance to junior network engineers, sharing your expertise and promoting professional growth.

Troubleshooting and Support

• Lead in-depth troubleshooting and root cause analysis of network issues, providing timely and effective resolutions.

Test and Validate

• Lead the creation of test cases and validate by testing solutions around IP Routing, network appliances, firewalls, SASE, SDWAN and IPSEC VPN. Familiarity with test tools (Ixia and Spirent) is desirable.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Technology, or a related field or equivalent work experience.
• 10+ years of progressive experience in designing and architecting IP networks, with a focus on routing, firewalls, SDWAN, IPSEC VPNs, and deep packet inspection.
• Understanding of Metro Ethernet Forum (MEF) standards and objectives as they relate to Carrier Ethernet Services.
• Professional certifications such as CCIE, CCNP, CISSP, FCSS/NSE7 or equivalent are highly desirable.
• In-depth understanding and experience of direct Internet services to clients. This includes knowledge of best practices for IP transit, BGP peering, policies and DDoS.
• Expertise in network appliance evaluation, selection, testing and integration.
• In-depth understanding of security principles and practices as they relate to network architecture.
• Proven experience with network troubleshooting, performance optimization, and security enhancement.
• Strong knowledge of industry-leading routing protocols, firewall technologies, SDWAN solutions, IPSEC VPNs, and deep packet inspection methods. Experience with Fortinet FortiGate firewalls including SDWAN and IPSEC is highly desirable.
• Experience with network automation and scripting using tools such as Python, Ansible, or similar.
• Leadership experience and the ability to mentor junior team members.
• Excellent communication (verbal, written, presentation) and interpersonal skills.
• Comfortable leading meetings and able to communicate issues and trends to senior management and other groups at the appropriate level of detail.
• Communicate well with own team and across organizational boundaries to ensure the successful completion of shared goals.
• In this role, the incumbent will have significant influence on the architecture of the LEO network, vendors involved, and development and dissemination of reference materials for the LEO program. They will need to make recommendations and decisions based on their experience.

Working conditions are generally comfortable typical of an office environment.

Occasional international travel is anticipated.

Eligibility and Clearance

The successful candidate must be able to work in Canada and obtain clearance under the Canadian Controlled Goods program (CGP) and Reliability.

At Telesat, we take pride in being an equal opportunity employer that values equality in the workplace. We are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.

At Telesat, we are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.