Infrastructure Systems Analyst

Position Information

Posting Number: ROM26-172E Title: Infrastructure Systems Analyst (Network) (RFT 1.0 FTE) Position Status: Regular Full-time FTE: 1.0 Job Schedule: Days Department: Information Technology Union: Non-union Site: Royal Ottawa Mental Health Centre Number of Vacancies: 1 About The Royal

As one of Canada’s foremost mental health care and academic health science centres, The Royal has a clear purpose: to get more people living with mental illness into recovery faster. This is at the core of everything we do and it is driven by the passion, focus and dedication of our employees. Every day, the work that we do transforms the lives of people with mental illness through specialized mental healthcare, advocacy, research and education

About The Role

The Infrastructure Systems Analyst 3 is a senior technical specialist responsible for the design, implementation, optimization, security, and reliability of the organization’s enterprise network infrastructure. This role provides expert-level leadership across complex network, connectivity, wireless, firewall, VPN, and secure remote access services while maintaining a strong working knowledge of core infrastructure platforms. Our current hybrid model requires employees to work on-site three days per week. On-site requirements may change based on operational needs.

Key Responsibilities

Lead the design, implementation, and optimization of enterprise network services, including LAN/WAN, wireless, routing, switching, VPNs, firewalls, and secure remote access. Manage and support firewall policies (rules, NAT, VPNs, traffic analysis, troubleshooting, and policy optimization) and support cybersecurity investigations through analysis of firewall, VPN, and network activity logs. Design and maintain network segmentation (VLANs, zones, access controls) across clinical, administrative, wireless, guest, vendor, and server environments. Implement and support secure wireless networks (SSIDs, AP design, WPA2/WPA3-Enterprise, 802.1X, RADIUS, certificate-based authentication). Configure and troubleshoot enterprise switching (VLANs, trunking, LACP, spanning tree, port security, uplinks) and connectivity to enterprise systems. Design and support secure remote access solutions, including client and site-to-site VPNs, MFA, and vendor access. Act as a senior escalation point and lead incident response, root cause analysis, and service restoration for complex network and connectivity incidents. Provide expert guidance on network architecture, capacity planning, resiliency, and risk mitigation; collaborate with infrastructure teams across network, server, storage, virtualization, and cloud platforms. Contribute to infrastructure standards, roadmaps, and long-term technology planning; ensure alignment with security, compliance, and business continuity requirements. Maintain documentation (diagrams, standards, runbooks); support cloud connectivity, data centre modernization, and disaster recovery initiatives; provide mentorship, proactive monitoring, change execution, on-call support, and vendor coordination. Qualifications

College diploma or university degree in Computer Science, Information Technology, or related field. Minimum 5 years of progressive enterprise IT experience with a focus on networking in complex, multi-site environments. Advanced hands‑on experience with enterprise networking technologies: routing, switching, VLANs, trunking, spanning tree, LACP, firewall policies, NAT, VPNs, wireless, secure remote access, and troubleshooting. Strong experience with enterprise firewalls, including policy creation, NAT, VPNs, traffic analysis, rule review, and security‑focused management. Experience with enterprise wireless technologies: SSIDs, access points, controllers/cloud platforms, roaming, authentication, RF coverage, and VLAN integration. Strong knowledge of infrastructure platforms: Windows Server, Active Directory, virtualization, storage, backup, DNS, DHCP, and cloud‑connected services. Experience with certificate‑based authentication, PKI‑integrated services, and certificate lifecycle management. Experience with network segmentation, NAC, least‑privilege access, and zero‑trust‑aligned controls. Proven ability to troubleshoot and resolve complex, high‑impact technical issues independently. Excellent communication skills with the ability to translate technical concepts for non‑technical audiences. Experience with monitoring/diagnostic tools (e.g., Zabbix, SNMP, PRTG, Wireshark, packet analysis). Demonstrated ability to design, document, and maintain enterprise network architecture and standards. Experience supporting mission‑critical enterprise environments. Preferred

Experience leading or participating in infrastructure modernization, CAB processes, and incident/problem/root cause analysis. Experience collaborating with Infrastructure, Security, Clinical Applications, and vendors. Hybrid cloud networking (Azure, AWS), si