The Department of National Defence (DND) requires the professional services of a Cloud Technical Architect with a focus on virtualization and cloud technologies to support the Exercise and Simulation (E&S) branch of the Royal Canadian Air Force (RCAF) Aerospace Warfare Centre (AWC), located on the Shirley’s Bay Campus in Ottawa, ON. They will support the design, development, operation and sustainment of the E&S-managed Defence Secure Simulation and Training Node infrastructure (DSSTNi) Information System (IS), specifically through the design, development, documentation and deployment of a Disaster Recovery Site capability for the system. The DSSTNi IS is an internal private cloud employing commercial technologies tailored to support modelling and simulation (M&S) efforts within the Air and Space domain.
Mandatory requirements
- Must have a Bachelor’s or higher in a Science or Engineering field.
- Must have 10+ years of experience performing each of the following:
- 1. Requirements analysis in a multi-tenant environment;
- 2. System architecture design, development and implementation, including network, computer and data storage components;
- 3. Design, development, installation, configuration and troubleshooting of virtualization solutions;
- 4. Design, development, installation, configuration and troubleshooting of cloud services, including software-as-a-service, platform-as-a-service, and infrastructure-as-a- service;
- 5. Design, development, installation and troubleshooting of secure network solutions to connect remote systems to a common network architecture;
- 6. Design, configuration, and troubleshooting of cross domain security solutions;
- 7. Integration and configuration of Commercial and/or Government Off-the-Shelf (COTS/GOTS) modelling and simulation tool sets including at least one of the following:
- XCITE
- AWSIM
- NGTS
- JSAF
- MaK One World Suite
- VBS
- Presagis Simulation Suite
- Plexsys ASCOT
- MetaVR
- MACE
- 8. Integration and configuration of command and control (C2) software components such as Battle Control System – Fixed (BCS-F) and NATO Integrated Command and Control (ICC) in a simulation system;
- 9. Integration of distributed simulation components via standard protocols (DIS, HLA);
- 10. Integration and configuration of COTS/GOTS communications tools, including voice and data protocols and components and
- 11. Developing documentation including drawing sets, manuals, parts lists, sparing analyses, budget estimates and schedule estimates.
- Must have 5+ years of experience in the following:
- 1. Providing expert analysis support in the area of cloud technology; and
- 2. Providing expert advice to senior leaders in the area of cloud technology.
- 5+ years of experience providing technical oversight and integration of the work produced by a minimum of 4 additional resources.
Optional requirements
- Should possess 2 or more of the following certificates or previously awarded equivalents:
- Dell Certified Expert – Cloud Architect (DCE-CA)
- Cisco Certified Network Professional (CCNP)
- Microsoft Certified Solutions Expert (MCSE): Core Infrastructure
- VMWare Certified Advanced Professional (VCAP)
- Should be a member of either the Professional Engineers of Ontario (PEO) or Ordre des Ingénieurs du Québec (OEQ).
- Should have 5+ years of experience employing 2 or more of the following core system technologies:
- VMWare vSAN
- VMWare vCenter Server
- VMWare Horizon solutions
- NVidia GRID vGPU
- Kubernetes
- Microsoft Server Datacenter
- Microsoft Active Directory
- Microsoft Windows Server Update Services (WSUS)
- Certificate server
- License servers
- Dell Wyse thin clients
- Should have 5+ years of experience employing 2 or more of the following network technologies:
- Static and dynamic routing
- Managed switch configuration
- Enhanced Interior Gateway Routing Protocol (EIGRP) and Open Shortest Path First (OSPF) protocols
- Network Time Protocol (NTP)
- Domain Name Service (DNS)
- Unicast, broadcast and multicast routing
- Switch virtual interfaces (VLANs)
- EtherChannel and Link Aggregation Control Protocol (LACP)
- Network Address Translation (NAT)
- Policy-Based Routing (PBR)
- Virtual Routing and Forwarding (VRF)
- Should have 5+ years of experience employing 2 or more of the following network security technologies:
- Cisco Firepower Series next generation firewall configuration
- Virtual Private Networks (VPNs)
- Access Control List (ACL)
- TACLANE encryption
- Internet Protocol Security (IPSec) encryption
- Generic Routing Encapsulation (GRE) tunnels
- Radiant Mercury Cross Domain Security filtering
- RSA Multi-Factor Authentication
- Should have 5+ years of experience employing 2 or more of the following storage technologies:
- Network Attached Storage (NAS)
- Direct Attached Storage (DAS)
- Redundant Array of Independent Disks (RAID)
- Network File System (NFS)
- Samba file sharing
- Veeam for ESXi
- VMWare Virtual Machine File System (VMFS)
- Should have 5+ years of experience employing 1 or more of the following collaboration technologies:
- Cisco Call Manager
- Cisco Unified Comms
- Secure File Transfer Protocol (SFTP)
- Microsoft SharePoint
- Microsoft Teams
General tasks
- The Cloud Technical Architect will design a DRS capability that utilizes and complies with the existing DSSTNi IS design. The design will be captured as a series of hardware and software specifications, as well as physical and logical drawing sets;
- The 3 Cloud Technical Architect will develop the DRS capability utilizing the DSSTNi Test and Evaluation Lab facilities at the RCAF AWC’s Shirley’s Bay location. The DRS will be demonstrated at the lab prior to deployment;
- The Cloud Technical Architect will document the DRS capability through the provision of installation, operations and maintenance instructions for the system;
- The Cloud Technical Architect will deploy the DRS capability to RCAF AWC HQ in 8 Wing Trenton, assisted by RCAF AWC personnel. Deployment planning will include identification of all parts required, on-site installation and capability verification, including system troubleshooting. Where the as-deployed system deviates from the design, the design will be updated post-deployment.
