The Opportunity

We are seeking a highly experienced Senior Network Engineer to design, implement, operate, and support a complex enterprise network environment. This role requires deep expertise in routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity, combined with strong troubleshooting skills, automation capabilities, and the ability to contribute to network architecture and long-term strategy. The successful candidate will be a key member of the Network Engineering team and will participate in an on-call rotation (weekly) to support production environments.

What to Expect

- Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on-prem, and hybrid environments

- Manage and support LAN, WAN, WLAN, and data center networks ensuring high availability, performance, and resiliency

- Provision, configure, and troubleshoot internet circuits including DIA, MPLS, VPN, and cloud connectivity

- Design and implement SASE (Secure Access Service Edge) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments

- Implement and support routing protocols (BGP, OSPF, EIGRP), VLANs, STP, VXLAN, and related technologies

- Design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments





- Lead advanced troubleshooting across layers 1–7 including packet capture and traffic analysis using tools such as Wireshark and tcpdump

- Participate in a weekly on-call rotation providing after-hours and weekend support for production environments

- Develop and maintain automation solutions using Python, Bash, APIs, and Ansible to improve operational efficiency

What you Bring

- 8+ years of hands-on experience in enterprise network engineering

- Robust expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls including Maestro

- Experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model

- Hands-on experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components

- Proven ability to migrate traditional VPN and perimeter-based architectures to Zero Trust / SASE models

- Deep understanding of TCP/IP, routing protocols, and network security principles

- Experience supporting 24x7 production environments with on-call rotation

- Strong knowledge of ITSM processes and tools such as ServiceNow

- Hands-on experience with automation, scripting, and Infrastructure as Code

- Experience with cloud networking across AWS, Azure, and GCP

- Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered an asset

Salary Range: $69,500-$119,500

📌 Senior Network Engineer (Toronto)
🏢 Definity
📍 Toronto