Do not discuss your application with others (including on social media) besides your partner, or close family members - who should also be reminded about the need to be discreet.
Reference Number
26-968-09-012
Who Can Apply
Canadian Citizens
Status
Indeterminate (permanent)
Language Requirement
Various
Are you an IT professional who wants to make a real-world difference by helping to keep Canada safe? Are you someone who challenges the status quo and sees challenges as opportunities? At CSIS, our people are our strength. You can become part of a dynamic team of talented individuals working towards a common goal: leveraging technology to keep Canadians safe at home and abroad.
Our IT professionals across the organization are undertaking exciting and transformative initiatives that you can take a lead role on. We are seeking candidates with a passion for technology to embark on this journey. You will be working with industry experts and collaborating with various business areas within CSIS, and in other organizations within Canada and beyond.
We are hiring highly qualified individuals in the following specialized streams:
- Stream 1 – IT End User Systems
- Stream 2 – Data Management
- Stream 3 – Application Development, Integration and Verification
- Stream 4 – Network Technology and Security
- Stream 5 – IT / Cyber Security and Digital Forensics
- Stream 6 – Communication Technology
- Stream 7 – Technical Collection Operator
- Stream 8– Mechanical & Electronics Technologies
- Stream 9 – Artificial Intelligence / Machine Learning Developer
- Stream 10– ServiceNow Platform
If you have the technical experience to lead cross-functional and cross-domain teams and oversee the successful implementation of new systems or solutions, then you’re in the right place!
Senior Technical Advisor
The position is responsible to provide technical leadership, specialized domain expertise and guidance to deliver on architectural strategy/requirements to systems/software development teams.
- Lead and guide cross-functional/cross-domain development teams and oversee the completion of systems or solutions including design and related technical documentation.
- Plan, evaluate and conduct reviews of technical systems and/or new capabilities; research and analyze relevant policies, procedures and processes; recommend and implement solutions or improvements.
- Develop and provide assessments, briefing material, plans and other management documents in order to identify solutions for a range of business challenges.
- Provide technical advice and input to internal committees, key stakeholders and interdisciplinary working groups.
- Maintain in-depth knowledge of trends and developments in software and systems design, in project management and implementation of techniques and practices, as well as awareness of architectural strategies.
- Liaise with clients, senior management and/or technical domain advisors to align system or software solutions with business requirements and develop mitigation strategies as required.
- Ensure that methodologies comply with established industry standards and the Organization Software/System Development Lifecycle (SDLC) policies and governance requirements.
- Represent the Organization on departmental, interdepartmental, national or international technology standards, policies or development working groups
Senior Technical Officer
This position is responsible for providing specialized technical expertise and establishing new methodologies for the provision of technical collection on one or more technical platforms in support of investigations and operations.
- Deploy specialized operational solutions and provide technical expertise in the planning and conduct of technical operations.
- Advise and guide employees by recommending specialized training for special operations.
- Maintain technical knowledge and operational readiness; stay current on technical collection capabilities and best practices.
- Develop, update and refine capabilities, methodologies and operational security to keep pace with changes to the operational environment.
- Research, evaluate and test new technical capabilities and recommend applications for the purposes of intelligence collection and processing.
- Identify areas for development, provide advice on specialized technical requirements and partner with counterparts to deliver new capabilities.
- Design and deliver national training standards for Technology Operations in accordance with CSIS instructional standards.
- Build relationships with intelligence community and represent the Service in new technical collection requirements.
- Ensure that established standards and methodologies comply with policies and authorities governing conduct of operations.
Graduation from a two (2) year program of study from an accredited learning institution recognized in Canada with acceptable specialization in:
- computer science;
- information technology;
- data science;
- cognitive science;
- engineering;
- network security;
- cyber security;
- electronics;
- mathematics;
- another specialty relevant to the position to be staffed; or,
- an acceptable combination of education, training, and experience.
If you completed a program outside of Canada, you will be required to obtain proof of a Canadian equivalency at your expense from an accredited learning institution recognized in Canada.
Note: Any higher level of education (i.e., Masters, Doctorate) in a related field of study could be recognized as experience.
Five (5) years of recent* and significant** experience for all streams must include at least three (3) of the following:
- Designing, developing and/or evaluating & testing new technologies, tools and procedures/processes in order to support the development, evaluation, and planning of technical capabilities
- Providing expert advice and recommendations on complex technology issues to senior managers, and business and technical stakeholders through written and oral communications
- Providing training and operational support to clients and colleagues to leverage, maintain and improve technical capabilities
- Participating in cross-functional initiatives, and collaborating with stakeholders outside your work unit
- Providing technical leadership for complex infrastructure, software or systems, which may include producing design/test documentation, coordinating and leading the development/testing of technical solutions or enhancements, developing user training, and completing the analysis of client / business requirements
- Supporting, maintaining and/or performing troubleshooting activities related to software, hardware and/or infrastructure
- Employing offensive and / or defensive security capabilities of technologies
- Collection and/or analysis using technical tools and tradecraft
- Recent is defined as experience acquired within the last ten (10) years.
**Significant is defined as the depth and breadth of experience that would normally be acquired by a person in a position where the performance of these duties constitutes their main functions over that period.
Note: an acceptable combination of education, training, and experience may be considered.
An asset qualification is a qualification which can enhance the ability to perform the work based on current and future business requirements, but which is not strictly required. Assets can help determine right fit in certain circumstances.
Additional Stream-Specific Requirements
In addition to the generic requirements above, candidates must also have five (5) years of experience and skills in at least one (1) stream:
Stream 1: IT End User Systems
Experience designing, implementing, operating, configuring or troubleshooting in a multi-system traditional data center or private / public cloud environment a minimum of three (3) of the following:
- Network directory services
- Backup / restore applications, configurations and databases
- Monitoring and alerting software
- Email systems
- Desktop hardware
- Application software
- Office collaboration systems (SharePoint, Skype, M365)
- Webservers (e.g., Tomcat, Internet Information Services (IIS), WebSphere, Weblogic etc.)
- Server and desktop operating systems (Microsoft Windows, Red Hat Linux)
- Microsoft device management and installation tools (e.g., System Centre Configuration Manager (SSCM), Microsoft Installer (MSI), Flexera InstallShield, etc.)
- Mobile device management solutions (e.g., Intune, BES, UEM)
- Telephony systems
- Advanced scripting (e.g., PowerShell)
In addition to the above requirement, candidates must have experience dealing with manufacturers, sales representatives, services providers or customer support engineer teams.
Stream 2: Data Management
Experience administering, monitoring, analyzing, designing/developing, optimizing and supporting Database Management Systems (DBMS) in a corporate environment that utilizes multiple DBMS technologies.
In addition to the above requirement, candidates must possess all of the following:
- Performing technical consultations with other IT teams in a lead DBA or Data Engineer role to ensure best practices are followed
- Providing technical leadership in ensuring data integrity and availability in at least one of the following DBMS: SQL Server, Oracle, DB2 or MySQL
- Conducting investigations, troubleshooting and implementing strategies for solving complex data problems
- Designing and optimizing semantic models, data transformations, ETL operations and improving query performance
- Working hands-on with database design, structured query language such as T-SQL, stored procedures and shell scripting.
Asset(s):
- Experience in the implementation of data governance strategies, master data and reference data solutions.
- Experience in delivering data visually by using business intelligence tools
- Experience in the design and application of data management concepts including, but not limited to, management of data security, data lineage, data warehousing and metadata management
Stream 3: Application Development, Integration and Verification
Experience in programming with at least one language such as, but not limited to, Java, Javascript / Typescript, C, C++, C#, Python, or other modern language.
In addition to the above requirement, candidates must possess an experience in a lead role performing in at least three (3) of the following activities:
- Building rich web-based applications using React, Angular, NodeJS, .NET or other frameworks
- Performing system integration with COTS software
- Using at least one of the following technologies: Hadoop, Spark, HBase, Solr, TensorFlow, PySpark, Jupyter Notebook, AI Models and/or Scala
- Developing on mobile platforms (iOS/Android) with one or more mobile application focused programming languages (e.g., Java, Kotlin, Objective C, Swift)
- Storing and retrieving data from a relational database in a multi-tiered application or system following industry best practices
- Data design, data modeling, creation of ETL jobs
- Building web services and data integrations following the micro service design pattern
- Performing quality assurance of systems or software, by writing and executing test cases for functional requirements and regression testing, testing edge cases, critical / sensitive areas, and exploratory testing
- Automating manual testing scenarios in support of regression testing
- Implementing, configuring, supporting, maintaining, or administrating components of a development environment (e.g., Artifactory, Kubernetes, Jenkins, Team Foundation Server, Gitlab, Jira / Confluence)
- Cloud platform administration such as AWS or Microsoft Azure administration, implementing security controls, implementing IaaS or IaC tools (e.g., Terraform, Ansible)
- Working in an agile scrum methodology environment
Stream 4: Network Technology and Security
Experience leading the development of secure, high-performance, scalable network architectures and designing, supporting, maintaining, configuring, troubleshooting, or validating in at least three (3) of the following core technologies in an enterprise network:
- Secure networking infrastructure (switches, routers, firewalls, load balancers, and Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS))
- Networking and security protocols (including 802.1x with certificate-based authentication, Transport Layer Security (TLS), Secure Sockets Layer (SSL), and network access control protocols)
- Conducting network protocol analysis (including packet capture and analysis tools like Wireshark)
- Software encryption, Virtual Private Networks (VPNs), and Virtual Private Servers (VPS), including site-to-site and remote access VPNs
- Network management and automation, including network management platforms, network monitoring tools, automation platforms, scripting languages, configuration management tools, and IP Address Management (IPAM) (including IPv4 and IPv6)
- Network Access Control (NAC) (including Zero Trust Networking (ZTN) design concepts and applications, such as network segmentation, micro-segmentation, continuous authentication, Identity and Access Management (IdAM), Secure Access Service Edge (SASE), Cloud Access Security Broker (CASB), Multi-Factor Authentication (MFA), and 802.1x)
- Cross-Domain Solutions (CDS) (including solutions for secure data transfer and communication between different security domains, such as guards, data diodes, and cross-domain protocols)
- Linux administration (including installation, configuration, and management of Linux operating systems, such as Red Hat Enterprise Linux (RHEL) and CentOS, and scripting languages like Bash and Python)
Assets(s):
- Certification (e.g., Cisco, Juniper, RedHat, Cloud Solution Architect, Certified Information Systems Security Professional (CISSP), Cisco Certified Internetwork Expert (CCIE), CompTIA Security+, CompTIA Network+, CCNA, Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), GIAC, AWS, Azure Security Engineer Associate, Google Cloud - Professional Cloud Security Engineer)
- Hands-on experience with Software-Defined Networking (SDN), Network Functions Virtualization (NFV), and Software-Defined Wide Area Networking (SD-WAN)
- Advanced cryptographic technologies, including quantum-resistant encryption methods and protocols, and high-assurance cryptographic equipment and modules
- Public Key Infrastructure (PKI) and certificate management, including certificate issuance, revocation, and deployment
- Campus and Wide Area Networking (WAN) solutions, including campus access networks, Local Area Networking (LAN), Wireless Local Area Networking (WLAN), wireless networking (including multi-access point design and support based on site surveys to ensure seamless, interference-free wireless coverage), WAN routing, multi-tenancy, encryption, and Multiprotocol Label Switching (MPLS)
- Data Centre Networking (DCN), including data center switching and routing, high availability, scalability, data center interconnects, network virtualization, and secure data center design and implementation
Stream 5: IT / Cyber Security and Digital Forensics
Experience designing, implementing, operating, configuring or troubleshooting in a multi-system traditional data centre or private/public cloud environment in at least three (3) of the following:
- Identity Management
- Privileged Access Management
- Multi-factor Authentication
- Public Key Infrastructure
- Access Management
- Directory Services
- Desktop, server and mobile Operating Systems (Microsoft Window operating Systems, Red Hat Linux)
- Digital forensics analysis to locate, identify, extract and interpret artifacts and residue of information and computer systems
- Disk forensics and related software (AXIOM, Cellebrite, etc.)
- Encryption technologies (SSL, RSA, AES, etc.)
- Subscriber information / protocols (ICCID, IMEI, IMSI, etc.)
- Mobile file systems: Android / iOS (iPhones, iPads, etc.)
- Operating systems principles and technologies (Unix and Windows)
- Computer / digital media concepts and physical computer components
- Administration or remote network endpoints and servers
- Networking and network security (architecture, switches, routers, firewall, IDS / IPS, PSPs) and conducting network protocol analysis
Asset (s):
- ITSG-33
- Policy on Government Security
- Directive on Service and Digital
- Canadian SIGINT Security Standard on SIGINT Protection and Control (CSSS-100)
Stream 6: Communication Technology
Experience in at least three (3) of the following:
- Cellular communication systems such as CDMA, GSM, GPRS, UMTS, HSPA, LTE, or 5G
- Telephony communications systems such as PSTN, VoIP, IMS, RoIP, Satellite Communications
- Broadband networks technologies such as cable, HFC, ADSL, or PON
- Communication protocols and standards such as SIP, SCTP, DOCSIS, SS7, MPLS, Infrared, 802.X technologies such as Bluetooth, Wi-Fi
- COTS and open source communications solutions and internet-based communications services or methods
- Performing systems integration with communications across multiple transmission media, protocols or technologies
- Conducting risk assessments and evaluations of technical threats to operational environment
- Network Protocols such as TCP/IP, RADIUS / DIAMETER, DHCP, DNS, IPv4, or IPv6, and routing protocols such as BGP or OSPF
- Software Defined Radios (SDR)
- P25 Radios and Trunking Systems management and installations, Encryption Key Management, Frequency Allocation Management.
- Antennas and RF signal propagation
- Signal processing and analysis
Asset(s):
- Experience creating statements of work and managing vendors through development projects.
Stream 7: Technical Collection Operator
Experience in at least three (3) of the following:
- Computer security fundamentals and concepts
- Leading the development of standard operating procedures and methodologies for technical tools
- Conducting risk assessments
- Writing scripts (UNIX / Linux, MacOS, Windows)
- Operating systems principles and technologies (Unix and Windows)
- Mobile file systems: Android / iOS (iPhones, iPads, etc.)
- Programming with at least one language such as, but not limited to, Java, Javascript / Typescript, C, C++, Python, or other modern language
- Internet architecture (domain names, DNS, user agents)
- Internet protocols and communication technology (TCP/IP, UDP, IPv4, IPv6, etc.)
- Software encryption, VPNs and Virtual Private Servers (VPS)
- Networking and network security (architecture, switches, routers, firewall, IDS / IPS, PSPs) and conducting network protocol analysis
- Administration of virtualization technologies (e.g., VMWare ESX, VSphere, Hyper-V)
Stream 8: Mechanical & Electronics Technologies
Experience in at least three (3) of the following:
- Radio Frequency (RF) theory and practical applications
- Antennas and RF signal propagation
- RF signal processing and analysis
- Analytic and troubleshooting instruments in mechanical / electrical / electronic settings
- Examine building plans, electrical design drawings, and mechanical design drawings
- Understanding of electrical, schematics and installations
- Analog and digital circuits design
- Audio and video capture, processing, and distribution
- Analyzing and troubleshooting electronic hardware / software / firmware
- Using lab instruments such as a multi-meter, oscilloscope, spectrum analyzer, etc.
- Assembling, configuring and troubleshooting computer hardware and network infrastructure
- Knowledge and experience with physical security systems
- Industry experience in trades such as construction, electrical, vehicle mechanics, building maintenance, audio visual or electronic communications
- Fabrication of technical parts and equipment in a variety of materials (the experience does not need to have been acquired through formal work experience, however preference may be given to individuals who possess a “Red Seal” endorsement)
- Configuring networks and devices (routers, switches, etc.)
- Telecommunications networks (VoIP, Wi-Fi, Bluetooth, etc.)
- Internet protocols and communication technology (TCP/IP, UDP, IPv4, IPv6, etc.)
- Internet architecture (domain names, DNS, user agents)
- Web protocols (HTTP, HTTPS, REST APIs)
- Network packet analysis (e.g. Wireshark)
- Cellular communication standards (GSM, CDMA, LTE, etc.)
- Software Defined Radios (SDR)
- Subscriber information (ICCID, IMEI, IMSI, etc.)
Asset(s):
- Experience leading development of statement of works, contract requirements, obtaining proposals and managing budgets with suppliers
- Experience in IT project management
- Experience in engineering solutions to solve ambiguous technical problems
- Experience developing and executing test plans
- Reverse engineering
Stream 9 – Artificial Intelligence / Machine Learning Developer
Experience leading data science projects with a minimum of three (3) years in at least three (3) of the following areas:
- Developing or deploying machine learning models, natural language processing, computer vision, or data mining techniques to analyze and interpret complex, diverse data sets.
- Proficiency using machine learning libraries and frameworks such as scikit-learn, TensorFlow, or PyTorch
- Integrating with enterprise data repositories, designing and deploying data systems or pipelines to support data science projects.
- Experience with big data technologies such as Apache Spark, Hadoop, and/or other distributed computing frameworks
- Proficiency in programming languages such as Python, Go, R, or SQL with experience in developing software applications, data processing pipelines, and/or data analysis tools
Assets(s):
- Experience with data storage solutions such as S3, HDFS, or other distributed file systems
Stream 10 – ServiceNow Platform
Experience designing, implementing, operating, configuring, or troubleshooting in a multi-instance ServiceNow environment, with a minimum of three (3) of the following:
- ServiceNow platform administration (e.g., user management, role-based access control, data management)
- ServiceNow module implementation (e.g., IT Service Management, IT Operations Management, Strategic Portfolio Management, Vulnerability Response Management)
- ServiceNow integration with other systems (e.g., Active Directory, monitoring tools, Business Intelligence Tools, HR Tools, Finance Tools)
- ServiceNow scripting and automation (e.g., JavaScript, Business Rules, Workflow, Flow Design)
- ServiceNow reporting and analytics (e.g., Performance Analytics, Reporting)
- ServiceNow security and compliance (e.g., data encryption, access controls, audit logging)
- ServiceNow instance management (e.g., cloning, backups, restores)
- ServiceNow upgrade and patch management
- ServiceNow API management (e.g., REST, SOAP, XML)
- ServiceNow data management (e.g., data import, data export, data archiving)
Asset(s):
- Experience with IT service management principles and framework(ITIL)
- Knowledge of cloud- based technologies (e.g., AWS, Azure)
- Familiarity with agile development methodologies (e.g., Scrum, Kanban)
- Experience with creating and presenting technical briefings and proposals to stakeholders
- Experience representing the ServiceNow platform at review boards
- Collaboration
- Analytical Skills
- Behavioural Flexibility
- Innovation
- Communication
Some positions require flexible work hours that extend beyond core hours of work.
Some streams will require being comfortable working in confined spaces and lifting / carrying equipment or boxes that may weigh up to 25kgs (55 lbs.).
Some streams will require valid, permanent and full Canadian Driver’s License (no GDL)
Various Language Requirements:
- Bilingual Imperative CBC/CBC
- English Essential
This selection process may be used to staff anticipated vacancies or other similar positions with various language requirements. Therefore, we encourage all interested candidates to apply. Second language evaluations will be offered to candidates. For more information on language requirements: (external link www.canada.ca/en/public-service-commission/jobs/services/gc-jobs/language-requirements-candidates).
If you need accommodations during the recruitment process, please mention it to the HR representative.
Clearly articulate in your cover letter your education, experience, language skills, position and which stream(s) you would like to be considered for.
This position is eligible for the Technology Market Modifier, which is valued at 7% of the basic annual salary ($112,746 - $137,226).
Some relocation expenses may be reimbursed.
A written exam may be administered as a screening, selection and/or assessment tool to evaluate candidates’ relevant technical knowledge and/or relevant abilities. Successful candidates will be invited to a competency-based interview
Employment Equity Gaps have been identified among Indigenous Peoples, Persons with Disabilities, and Women for this position. You are invited to voluntary self-declare if you belong to any of these groups in your cover letter as it may be considered in the selection process.
In your cover letter, you have to demonstrate how you meet the Essential Qualifications (Education and all Essential Experiences).
It is not sufficient to say that you have the required qualifications or to list your current or past responsibilities. Rather, you must provide concrete examples of tasks you have accomplished with significant details to explain the WHAT, WHEN, WHERE and HOW you acquired each qualification.
For each experience criteria, please provide the following information:
- Name of the department or organization where the experience was acquired;
- Title of the position occupied, group and level and the period(s) in which you performed the functions (M-Y to M-Y);
- Specific details of tasks or projects demonstrating how the experience was acquired (Situation/Challenge, Tasks, Action and Result).
Should your responses to the screening questions contain insufficient details to demonstrate that you meet the screening criteria, your application will not be given further consideration in this process. Candidates will not be solicited for incomplete or possible missing information.
You are invited to visit Canada.ca for tips on how to submit a powerful application: www.canada.ca/en/security-intelligence-service/corporate/csis-jobs/how-to-submit-a-powerful-application
Candidates must be eligible to receive an Enhanced Top Secret security clearance. The process involves a security interview, a polygraph, and a background investigation that includes credit and financial verifications. The use of illegal drugs is a criminal offense. Drug use is an important factor considered in your reliability and suitability assessment during the selection process. Therefore it is important not to use any illegal drugs from the time you submit your application.
Applicants must clearly demonstrate in their application how they meet each Education and Experience criteria. Failure to do so will result in the applicant being screened out of the career opportunity.
CSIS is a separate employer and is not subject to the Public Service Employment Act (PSEA). CSIS has its own classification, compensation system, and a different staffing regime. As such, we use a different staffing process and terminology.
CSIS is committed to building a workforce that is truly representative of the Canadians it serves by cultivating a diverse and inclusive workplace environment. This will be achieved by increasing employment equity group representation (including persons with disabilities, visible minorities, Indigenous peoples, and women) at all levels within the organization through hiring and talent management practices. Gaps have been identified among Indigenous peoples and visible minorities for this position. We will also ensure that appropriate accommodations are made (e.g., specialized equipment, changes to physical workspace) to provide employment opportunities for all qualified candidates. In support of achieving a greater, diverse and skilled workforce, we strongly encourage those individuals who belong to one or more of the employment equity groups to self-identify when applying.
Should you require accommodation in relation to a disability, please tell us at the beginning of the selection process. This information will be kept confidential.
CSIS Offices in Canada are located on various ancestral and traditional lands. In the spirit of reconciliation, we acknowledge all Indigenous People across Canada and their connection to these lands.
The personal information provided in your application is protected under the Privacy Act and will be held in Personal Information Bank SIS/P-PU-025.
We thank all applicants for their interest in CSIS. However, only those who are selected for further consideration will be contacted.
