Choose a workplace that empowers your impact.Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and experience. A place where you can personalize your employee journey to be – and deliver – your best. We are a purpose-driven, dynamic and sustainable pension plan. An industry leading global investor with teams in Toronto to London, New York, Singapore, Sydney and other major cities across North America and Europe. We embody the values of our 665,000 members, placing their best interests at the heart of everything we do. Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work. Don’t just work anywhere — come build tomorrow together with us.Know someone at OMERS or Oxford Properties?Great! If you're referred, have them submit your name through Workday first. Then, watch for a unique link in your email to apply.Core ResponsibilitiesPalo Alto Firewall (Primary Skill)End to end ownership of Palo Alto firewalls (physical & virtual), managed via Panorama, including operations, engineering, upgrades, refreshes, and migrationsDesign, implement, and maintain firewall policies, NAT, routing, VPNs, and traffic flows using Panorama based centralized managementStrong hands‑on expertise with Palo Alto security profiles, including Antivirus, Antispyware, Vulnerability Protection, URL Filtering, File Blocking, Wildfire, DoS Protection, and Security Profile Groups, with experience tuning and optimizing policiesTroubleshoot complex firewall and connectivity issues across on prem and cloud environments using Panorama and device level analysisSecurity Policy Management & AutomationHands‑on experience with security policy management and automation platforms, with AlgoSec preferredPerform firewall change automation, policy analysis, and governance using enterprise security policy management toolsSupport policy optimization, cleanup,



and recertification to reduce risk and improve firewall postureConduct risk analysis and rule impact assessments as part of change and compliance processesExperience with equivalent platforms such as Tufin, FireMon, or similar tools is acceptableCloud Networking & SecurityStrong understanding of multi cloud networking principlesHands‑on experience with Azure networking, including VNETs, NSGs, UDRs, routing, and hybrid connectivityWorking knowledge of Azure application security, including: Azure WAF (OWASP rule sets, exclusions, WAF log analysis), Application Gateway, and Front DoorUnderstanding of GCP networking and security, including VPCs and Cloud ArmorSecurity OperationsMonitor firewall health, logs, and alerts, support security incident responseMaintain change records and compliance documentationCollaborate with SecOps and Cyber teams on investigations and remediationRequired Experience5+ years of hands‑on experience with Palo Alto Networks firewalls, covering operations, engineering, upgrades/refreshes, Panorama administration, and implementation of security profilesHands‑on experience with firewall security policy management and automation platforms, with AlgoSec strongly preferred; experience with Tufin, FireMon, or similar tools is acceptableWorking knowledge of Azure Web Application Firewall (WAF), including OWASP rule sets, managing exclusions, and WAF log analysisExperience supporting cloud networking and security in Azure and/or GCPStrong network security fundamentals, including routing, security controls,



and enterprise traffic flowsAbility to work independently in an operational and engineering environmentPreferred CertificationsPalo Alto Networks (PCNSE / NSE / NSA)AlgoSec (AFA / AFF Expert)Azure Network Engineer Associate (or equivalent)We believe that time together in the office is important for OMERS and Oxford, the strength of our employees, and the work we do for our pension members. In delivering on our pension promise, keeping us connected to our work and each other, our versatile hybrid work guideline requires teams to come in to the office4 daysper week.This posting is for an existing vacancy.The expected salary range for this position is $86,000.00 - $130,000.00 per year, prorated based on the term of the contract.You may also be eligible to receive an annual Incentive Award pursuant to our Short-term Incentive plan and our Long-Term Incentive plan (if applicable), and to participate in our group benefits and retirement plans – details on these elements of compensation are included within OMERS & Oxford offer letters.As one of Canada’s largest defined benefit pension plans, our people-first culture is at its best when our workforce reflects the communities where we live and work — and the members we proudly serve. From hire to retire, we are an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our Purpose@Work committee and employee recognition programs.Artificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision-making remain central to our candidate experience.#J-18808-Ljbffr

📌 Senior Network Security Engineer (15 Months Contract) - $86,000 - $130,000 A Year (Toronto)
🏢 OMERS
📍 Toronto