L08 Technical Officer

The Canadian Security Intelligence Service (CSIS) is looking for technical professionals who thrive on tackling diverse challenges in a unique environment.  Working in teams, the ideal candidate will directly contribute to operations via the timely delivery of technical solutions in support of the CSIS mandate. 

You will have the opportunity to contribute and influence project deliverables that support technical operations, including the collection, processing, and analysis of data in support of CSIS’ investigations. 

Successful candidates will benefit from continuous learning where your technical skills will be developed, maintained and enhanced. In addition, you will be exposed to specialized security intelligence related technologies, systems and equipment. 

Once you have established yourself at CSIS, your experience can lead to unique and exciting opportunities not available in the private sector.  

If you are up to the challenge and join one of our high performing teams, there is no doubt that, your contributions to CSIS will have a meaningful and direct impact in our mission to keep Canada safe. 

We will be hiring highly qualified individuals in the following specialized streams:

• Stream 1 – Network Technology and Security
• Stream 2 – Communication Technology
• Stream 3 – IT / Cyber Security and Digital Forensics
• Stream 4 – Mechanical & Electronics Technologies
• Stream 5 – Technical Collection Operator
• Stream 6 – Regional IT Systems Support!

Graduation from a two (2) year program of study from a recognized post-secondary institution with acceptable specialization in 

• computer science;
• information technology;
• data science;
• cognitive science;
• engineering;
• network security;
• cyber security;
• electronics;
• mathematics;
• another specialty relevant to the position to be staffed; or,
• an acceptable combination of education, training, and experience.

The educational program must be obtained from an accredited learning institution recognized in Canada. If you completed a program outside of Canada, you will be required to obtain proof of a Canadian equivalency at your expense from an accredited learning institution recognized in Canada.

Any higher level of education (i.e.: Masters, Doctorate) in a related field of study could be recognized as experience.

• Undergraduate degree and three (3) years of relevant experience; or,
• Technologist diploma or professional technologist equivalency designation and four (4) years of relevant experience.

Relevant experience for all streams must include at least three (3) of the following:

• Designing, developing, evaluating and / or testing new technologies, tools and procedures/processes in order to support the development, evaluation, and /or planning of technical capabilities
• Providing advice and recommendations on complex technology issues with respect to the design, deployment, procedures and maintenance of technical solutions
• Providing training and operational support to clients and colleagues to leverage, maintain and improve technical capabilities
• Participating in cross-functional initiatives and collaborating with stakeholders outside your work unit
• Supporting, maintaining and/or performing troubleshooting activities for software and/or systems
• Employing offensive and defensive security capabilities of technologies.
• Collection and/or analysis using technical tools and tradecraft

An asset qualification is a qualification which can enhance the ability to perform the work based on current and future business requirements, but which is not strictly required.  Assets can help determine right fit in certain circumstances.

Additional Stream-Specific Requirements

In addition to the generic requirements above, candidates must have experience and skills in at least one (1) stream.

Stream 1 – Network Technology and Security

Experience designing, implementing, supporting, maintaining, configuring, and troubleshooting a minimum of three (3) of the following technologies in an enterprise network: 

• Secure networking infrastructure (switches, routers, firewalls, etc.)
• Virtualization, Docker and cloud application services
• Software encryption, VPNs and Virtual Private Servers (VPS)
• Network packet capture / analysis solutions (e.g., Wireshark)
• Networking and security protocols. SD-WAN and optical transport technologies
• Internet edge security solutions (Web filtering, proxy servers, IDS / IPS)
• IP-based networks, network security (switches, routers, firewall, IDS / IPS, PSPs) and conducting network protocol analysis
• Linux (such as CentOS and RedHat) installation, configuration and administration
• Cross-domain solutions

Assets:

• Certification (e.g., CCNA, CCIE, Juniper, RedHat)
• Hands-on experience with cloud-based networking
• Campus access network solutions (LAN switching and routing)
• Wide Area Network solutions (WAN routing, multi-tenancy and encryption)
• Data Centre Networking (DC switching and routing, high availability and scalability)
• Generating and maintaining design and build documentation including configuration files, network diagrams and procedures
• Network and application load balancing
• Network management solutions (Extreme Management Center, Cisco Prime)
• Network Access Control (Extreme Control, Cisco ISE)
• Assessing offensive and defensive security capabilities of technologies
• Writing scripts (UNIX / Linux, MacOS, Windows)
• Server and desktop operating systems (Microsoft)
• Administration of virtualization technologies (e.g., VMWare ESX, VSphere, Hyper-V)

Stream 2 – Communication Technology

Experience with a minimum of one (1) of the following:

• Analog / digital design and circuits
• Antennas and RF signal propagation
• Communications systems, protocols and/or propagation including both wired and wireless networks, audio and video data, installation, RF communication systems, mobile & satellite networks
• Telephony communications systems such as PSTN, VoIP, IMS, or satellite
• Communication protocols and standards such as SIP, SCTP, DOCSIS, SS7, MPLS, Bluetooth, Infrared
• Signal processing and analysis
• Voice / data communications (satellite, RF LMR, wireless and telecommunications networks)

Stream 3 – IT / Cyber Security and Digital Forensics

Five (5) years of experience designing, implementing, operating, configuring or troubleshooting in a multi-system traditional data centre or private/public cloud environment and/or a minimum of three (3) of the following:

• Identity Management
• Privileged Access Management
• Multi-factor Authentication
• Public Key Infrastructure
• Access Management
• Directory Services
• Desktop, server and mobile Operating Systems (Microsoft Window operating Systems, Red Hat Linux)
• Digital forensics analysis to locate, identify, extract and interpret artifacts and residue of information and computer systems
• Disk forensics and related software (AXIOM, Cellebrite, etc.)
• Encryption technologies (SSL, RSA, AES, etc.)
• Subscriber information / protocols (ICCID, IMEI, IMSI, etc.)
• Mobile file systems: Android / iOS (iPhones, iPads, etc.)
• Operating systems principles and technologies (Unix and Windows)
• Computer / digital media concepts and physical computer components
• Administration or remote network endpoints and servers
• Networking and network security (architecture, switches, routers, firewall, IDS / IPS, PSPs) and conducting network protocol analysis

In addition to the above requirement, candidates must possess three (3) years of experience in the last five (5) years interpreting and applying one or more of the following:

• ITSG-33
• Policy on Government Security
• Directive on Service and Digital
• Canadian SIGINT Security Standard on SIGINT Protection and Control (CSSS-100)

Stream 4 – Mechanical & Electronics Technologies

Candidates must have experience with a minimum of three (3) of the following: 

• Radio Frequency (RF) theory and practical applications
• Antennas and RF signal propagation
• RF signal processing and analysis
• Working with analytic and troubleshooting instruments in mechanical / electrical / electronic settings
• Examine building plans, electrical design drawings, and mechanical design drawings.
• Understanding of electrical code, schematics, and installations
• Analog and digital circuit design
• Audio and video capture, processing, and distribution
• Analyzing and troubleshooting electronic hardware / software / firmware
• Using lab instruments such as a multi-meter, oscilloscope, spectrum analyser, etc.
• Assembling, configuring and troubleshooting computer hardware and network infrastructure
• Knowledge and experience with physical security systems
• Industry experience in trades such as construction, electrical, vehicle mechanics, building maintenance, audio visual or electronic communications
• Fabrication of technical parts and equipment in a variety of materials (the experience does not need to have been acquired through formal work experience, however preference may be given to individuals who possess a “Red Seal” endorsement)
• Configuring networks and devices (routers, switches, etc.)
• Telecommunications networks (VoIP, Wi-Fi, Bluetooth, etc.)
• Internet protocols and communication technology (TCP/IP, UDP, IPv4, IPv6, etc.)
• Internet architecture (domain names, DNS, user agents)
• Web protocols (HTTP, HTTPS, REST APIs)
• Network packet analysis (e.g. Wireshark)
• Cellular communication standards (GSM, CDMA, LTE, etc.)
• Subscriber information (ICCID, IMEI, IMSI, etc.)

Assets:

• Industry experience in trades such as construction, electrical, vehicle mechanics, building maintenance, audio visual or electronic communications
• Fabrication of technical parts and equipment in a variety of materials (the experience does not need to have been acquired through formal work experience)
• Experience developing and executing test plans;
• Experience leading development of statement of works, contract requirements, obtaining proposals and managing budgets with suppliers;
• Experience in IT project management;
• Experience in engineering solutions to solve ambiguous technical problems;
• Working with a multi-disciplinary or multi-departmental project team to build and maintain partnership

Stream 5 – Technical Collection Operator

Experience with a minimum of three (3) of the following: 

• Computer security fundamentals and concepts
• Developing standard operating procedures and methodologies for technical tools
• Conducting risk assessments
• Writing scripts (UNIX / Linux, MacOS, Windows)
• Operating systems principles and technologies (Unix and Windows)
• Mobile file systems: Android / iOS (iPhones, iPads, etc.)
• Programming with at least one language such as, but not limited to, Java, Javascript / Typescript, C, C++, Python, or other modern language
• Internet architecture (domain names, DNS, user agents)
• Internet protocols and communication technology (TCP/IP, UDP, IPv4, IPv6, etc.)
• Software encryption, VPNs and Virtual Private Servers (VPS)
• Networking and network security (architecture, switches, routers, firewall, IDS / IPS, PSPs) and conducting network protocol analysis
• Administration of virtualization technologies (e.g., VMWare ESX, VSphere, Hyper-V)
• Administration of SIEM and/or monitoring systems for network and system health and/or security auditing purposes (e.g. Splunk, Kibana, Grafana, OpenView

Stream 6 – Regional IT Systems Support

Experience with a minimum of three (3) of the following: 

• Providing end user support in a multi-system environment
• Working in a client service environment and in dealing directly with employees of different levels
• Coordinating, implementing and maintaining technical modifications and installations of enterprise networks (telephony, computer, and telecommunications)
• Analyzing and resolving complex problems associated with communications networks
• Evaluating, recommending, and adapting commercial products according to security standards and best practices
• Managing or developing processes, procedures and / or standards related to IT systems, applications, databases and / or infrastructure
• Training and supporting users on information systems and equipment
• Facilitating the deployment of new systems (e.g., software patches, upgrades,  hardware and network management) by developing, designing, testing and implementing solutions
• Orchestrating the resolution of software / hardware issues by collaborating with stakeholders outside of your work unit

• Collaboration
• Behavioral Flexibility
• Organizational Skills / Multitasking
• Analytical Skills
• Innovation / Creativity / Ingenuity

Some positions may require flexible work hours that extend beyond core hours of work as well as shift work consisting of a rotating shift schedule.

Certain streams will require a valid, permanent and full Canadian Driver’s License (no GDL).

Some streams will require being comfortable working in confined spaces and lifting / carrying heavy items may be required (boxes of files, equipment, approximately 40 pounds/20 kg).

Official Language (OL) Proficiency

Various Language Requirements:

• Bilingual Imperative BBB/BBB
• English Essential

This selection process may be used to staff anticipated vacancies or other similar positions with various language requirements. Therefore, we encourage all interested candidates to apply. Second language evaluations will be offered to candidates. For more information on language requirements: (www.canada.ca/en/public-service-commission/jobs/services/gc-jobs/language-requirements-candidates).

This position is eligible for the Technology Market Modifier, which is valued at 7% of the basic annual salary ($99,392 - $120,917). The above compensation package includes the 7% market modifier.

Clearly articulate in your cover letter your education, experience, language skills and which stream(s) you would like to be considered for.

An exam may be administered as a screening, selection and/or assessment tool in order to evaluate the candidates’ relevant technical knowledge and/or other relevant abilities.

While we continue to explore opportunities for flexible work arrangements, the majority of work in our organization must be done in the office and cannot be performed at home.

Some relocation expenses may be reimbursed.

If you need accommodations during the recruitment process, please mention it to the HR representative.

Employment Equity gaps have been identified among Persons with Disabilities, Indigenous Peoples, and women for this position. You are invited to voluntarily self-declare in your cover letter if you belong to any of these groups, as this information may be considered in the selection process.