The Department of Foreign Affairs, Trade and Development (DFATD) has identified requirements for Infrastructure Services for Desktop Modernization and Endpoint Management Services. Resources specializing in various architecture services will be required to contribute to the IM/IT transformation initiatives for the Desktop Modernization program such as senior Informatics Professional resources with knowledge and experience supporting and assisting with Protected B compliant Cloud Engineering, Architecture, Deployment, Security and System Administration, in accordance with the Government of Canada Security Control Profile for Cloud-based GC Services.
The purpose of these services is to augment and advise departmental resources in the execution of departmental IM/IT Cloud initiatives.
These technical specialists will support major transformative initiatives that will changing both the landscape of the IM/IT ecosystem and DFATD’s ways of managing both information and assets. Such initiatives include but are not restricted to the implementation and ongoing maintenance of Windows 10/11, CM, the upgrade to Office365 and Cloud computing initiatives.
Contract duration
Initial: 1 year
Optional: 2 x 1 year
Mandatory requirements
1. 10 years working as a Technology Architect;
2. 10 years experience in installing, configuring, troubleshooting, supporting, and maintaining IT technology with the inclusion of Microsoft;
3. 5 years providing 2nd and 3rd level IT support for systems of 10000+ users;
4. Experience consolidating, in a geographically distributed stakeholder environment, at least 3 locations under one SCCM or MECM environment;
5. A post-secondary degree in Computer Science.
Rated requirements
1. 7+ years experience consolidating multiple locations under one SCCM environment, including:
- Architecting new improvements within the SCCM environment
- Designing and Architecting Windows 10 or higher In-Place Upgrade Solution
- Configuring WSUS and SCCM updates, and Windows 10 or higher Servicing
- Configuring MDT Integration with SCCM
- Configuring Windows 10 or higher Multi language Image solutions
2. 9+ years experience delivering and supporting IT systems of 10000+ users
3. Experience configuring most and ideally all of the following Windows 10 or higher configuration policies:
- Device Restriction Policies
- Custom Policies
- Software Update Policies
- Compliance Policies
- Bitlocker Policies
- Information Protection policies
- Team Device Restriction Policies for Surface Hub
4. 5+ years experience configuring Intune Autopilot profiles and importing pilot devices
5. 5+ years experience implementing Intune into a SCCM co-managed environment with Cloud management Gateway and Cloud distribution points
6. 5+ years experience designing and architecting Windows 10 or higher In-Place Solution and Desktop Imaging Solution
7. 5+ years experience in the following:
- Configuring Azure AD connect to sync with on-premise Active Directory
- Configuring Azure AD enrollment permissions
- Setting device restrictions
- Creating Azure AD Dynamic Groups
- Defining classifications and labels
8. 5+ years experience using Windows Defender (ATP) for all of the following:
- Intrusion Prevention Policies
- Antivirus Heuristics Policies
- File/Folder exemptions
- Scan schedules
- Quarantine rules
9. 5+ years configuring compliance policies for iOS and Android devices
General Tasks
- Develop and maintain systems for the management and control of IM/IT requirements on projects in a manner compatible with client standards and guidelines. This includes communications and consultations with various stakeholders in the process.
- Support the Technical Authority to oversee IM/IT Cloud initiatives and various IM/IT initiatives.
- Support the Technical Authority to oversee the Cloud change management process for IM/IT requirements.
- Track and update requests for changes, work orders, tasks and incidents using the Remedy Smart-IT and BMC Remedy Change Management System.
- Coach and mentor teams’ members and users on best practices.
- Conduct and/or participate in stakeholder meetings.
- Implement Innovation workspace (ULL) public Cloud environment, including all associated governance / policy documents.
- Implement and/or maintain a Production environment (PBMM), including all associated governance / policy documents.
- Provision of a stable, high-capacity site-to-site connectivity solution between legacy and the public Cloud environment.
- Develop and/or improve and/or support a business model and service units.
- Develop and/or maintain and/or support an infrastructure platform to support containerized application development.
- Develop, implement and/or support Cloud Identity, and Access Management (IAM) capabilities.
- Evaluate and document, as necessary, as-is architectures for systems being workload migrated, developed, or enhanced as part of the DFATD Cloud Program.
- Provide 3rd and 4th level engineering support for the endpoint management systems
- Meeting agendas, schedules and minutes, synthesis report of facilitated meetings.
- Conversation notes, design documentation, change management documentation, site inspection reports and other work requested under the Task Authorization.
- Prototypes, scripts, templates and code.
- Areas to focus (but not limited to) – networking, telecommunications, front-end, mid-tier, back-end systems (web services and databases), infrastructure (security, servers, etc.).
- Participate in the development of the transformation model and support its execution;
- Conduct in-depth research into technologies, architectures used by other organizations, solutions, design patterns, approaches, methodologies, frameworks, and standards.
- Share best practices and experiences in architecture while making recommendations that support both projects.