Description:

About us:

The Faculty of Arts & Science is the heart of Canada’s leading university and one of the most comprehensive and diverse academic divisions in the world. The strength of Arts & Science derives from our combined teaching and research excellence in the humanities, sciences and social sciences across 29 departments, seven colleges and 46 interdisciplinary centres, institutes and programs.

We can only realize our mission with the dedication and excellence of engaged staff and faculty. The diversity of opportunities and perspectives within the Faculty reflect the local and global landscape and the need for curiosity, innovative thinking and collaboration. At Arts & Science, we take pride in our legacy of innovation and discovery that has changed the way we think about the world.

Your opportunity:

The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs & Public Policy, University of Toronto, focusing on research, development, and high-level strategic policy and legal engagement at the intersection of information and communication technologies, human rights, and global security.

We use a “mixed methods” approach to research combining practices from political science, law, computer science, and area studies. Our research includes: investigating digital espionage against civil society, documenting Internet filtering and other technologies and practices that impact freedom of expression online, analyzing privacy, security, and information controls of popular applications, and examining transparency and accountability mechanisms relevant to the relationship between corporations and state agencies regarding personal data and other surveillance activities.

Under the direction of the Citizen Lab Director and the Manager, Citizen Lab the System and Security Administrator manages the security support needs of the Citizen Lab, carrying out a range of information technology-related responsibilities.

The System and Security Administrator is the primary network administrator for the Citizen Lab. The incumbent will manage and oversee the use of all information technology in the Citizen Lab; design UNIX and Linux network infrastructure; develop maintain, and monitor network security policies; ensure all workstations and related components are kept operationally effective and secure; oversee administration and security of on-site and off-site servers; administer and maintain security for websites and webservers; provide training in computer security tools and practices to staff; and collaborate on IT purchases by providing recommendations, cost estimates and tracking expenses.

The incumbent enumerates and classifies all digital assets in the Citizen Lab to identity those with internal information confidentiality, or availability requirements as per processes and procedures from the unit and department. Participates in planning component of projects. Must monitor and enforce information security policies to ensure all research data is properly secured as per research ethics protocol requirements as determined by the University of Toronto Research Ethics Board. The incumbent stays up to date with knowledge of developments with complex software, hardware, and technical tradecraft in a rapidly changing technical and research environment. The incumbent will monitor all network infrastructure and devices for security issues, provide monthly security reports. The incumbent acts as a resources to others on technology related issues, problems and information.

Your responsibilities will include:

Overseeing the daily operations of networks and systems administration; overseeing security and administration of all information technology in the Citizen Lab

Monitoring the performance and integrity of servers, executing security measures for network devices and introducing variations as required

Analyzing and monitoring vendor service and performance

Researching, analyzing and recommending solutions to project challenges

Keeping well-informed with knowledge of developments with complex systems, network and security tradecraft in a rapidly changing technical and research environment

Training staff on new system features, computer security tools and practices

Collaborating on cost estimates; obtaining quotations and issuing purchase orders within established limits

Serving as a resource to a group or on a function; delegating tasks to IT support staff when appropriate

Essential Qualifications:

Bachelor’s Degree in computer science or engineering, or an acceptable equivalent combination of education and experience

Minimum of 4 years experience in firewall administration and troubleshooting, network and system security, including demonstrated knowledge of network intrusion detection systems and end-point security monitoring and working with shell and perl programming

Experience planning project components such as Cisco ASM, iptables, pfilter, or similar, and with managing DNS nameservers, specifically BIND

Demonstrated experience inincident response and mitigation.

Advanced experience with UNIX and Linux. Experience with Python and Django and TCP/IP and networking

Specific knowledge regarding update cycle, security model, and theme system. Familiarity in at least one switch operating system like Juniper, Cisco IOS, 3COM OS, etc

Experience and comfort in analyzing packet capture data and diagnosing connection related network issues

Demonstrated experience collaborating on IT purchases by providing recommendations, cost estimates and tracking expenses

9.8. Demonstrated experience in interpreting, implementing, and enforcing information security policies. Experience with version and source control systems (e.g., git, subversion)

Experience and knowledge related to automating common systems tasks, configuration management, or staging software (e.g, Ansible, Chef, Puppet, etc.)

Experience in website administration (e.g. Apache setup, troubleshooting TLS issues, rotating TLS certificates, reviewing weblogs for security)

Familiarity in at least one switch operating system (e.g. Juniper, Cisco IOS, 3COM OS)

Advanced understanding of and demonstrated experience in Linux based systems administration (e.g., Debian, Ubuntu OpenBSD). Demonstrated experience related to scripting languages such as Perl, Python, or Ruby for system administration purposes (e.g., automating encrypted backup, auditing systems, and testing performance to predict hardware failure).

Strong knowledge of tools used for wireless, web application, and network security testing.

Excellent communication skill with the ability to communicate and document computer security best practices, and effective interpersonal skills to develop goodworking relationships among staff, clients, and peers

Excellent knowledge of workstation and server components. Strong knowledge of server administration, all major operating systems (OSX, Windows) and mobile devices (Android, iOS)

Excellent knowledge of workstation and server components, server administration, all major operating systems (OSX, Windows) and mobile devices (Android, iOS)

Demonstrated knowledge and experience working in virtualized environments (e.g., VMWare vCentre, Xen, or VirtualBox)

Highly engaged and aware of information security and best practices around these issues

Experience in website administration (e.g. Apache setup, troubleshooting TLS issues, rotating TLS certificates, reviewing weblogs for security)

Highly knowledgeable about SSH and its advanced use cases such as reverse SSH tunneling, key agent troubleshooting, X Forwarding, and security considerations