Duration: 16 Months
Location: Hybrid 3x/week onsite (Toronto, London or Winnipeg)
Overview: The Senior Network Security Engineer is responsible for engineering new network security technologies and developing maturity and replacement roadmaps for existing security technologies.A successful candidate will require a mindset focused on business value and continuous service improvement.
Responsibilities: Demonstrate solid security fundamentals while working hands-on with security technologies
Complete deliverables and deliver high quality solutions in an efficient & effective manner
Proactively identify and assess security risks to help promote a risk aware culture
Design solutions that are “fit for purpose” (security function) and “fit for use” (enterprise grade)
Ensure designs support solution architecture and are endorsed by technology vendor(s)
Provide input to network security technology roadmaps that set the vision for security services / controls
Continuous research and evaluation of current technologies
Evaluate solution components and participate in appropriate functional and non-functional testing
Work with internal and external stakeholder teams to implement / validate solution integration
Provide technical consulting on capabilities and limitations of the security technologies
Must haves: Minimum of 10 years experience designing and implementing enterprise-grade network security solutions
Strong network security background.
Experience with Palo Alto NGFW, Cloudflare (DNS, WAF etc).
Experience with Terraform/Ansible automation.
Broad knowledge and best practices for infrastructure and security technologies including but not limited to workstations, servers, network, endpoint protection, and secure web gateway
Attention to detail, effective planning, solid analytical and problem-solving skills,



self-organized and a demonstrated self-starter with the ability to influence others with a strong focus on customer service
Leadership, communication, negotiation, and interpersonal skills with demonstrated experience working in a team environment
Demonstrated desire to continuous learning, implementing change and contributing to the organization and with a proven history of making appropriate decisions and recommendations
Nice to have: Experience with enterprise-grade NGFW engineering and implementation.Experience with CheckPoint and Palo Alto preferred.
Expert level technical knowledge in the areas of network segmentation, network routing, DNS and DHCP.
Understanding of Secure Access Service Edge (SASE), Zero Trust and Defense in Depth engineering and architecture.
Strong ability to read and interpret packet captures for troubleshooting and security forensics.
In-depth understanding of Web Application Firewalls (WAF), Intrusion Prevention Systems (IPS), SSL inspection and DDoS and Bot mitigation.
Experience with Gitlab, CI/CD pipelines, secure coding, security of SSDLC through Shift Left principles.
Experience in systems and service automation and development using Python, Terraform, PowerShell, Ansible etc. and management of Infrastructure as Code (IaC) or Policy as Code (PaC).
Understanding of enterprise IT security risk assessments and related frameworks (e.g., SOC2, ISO, NIST CSF, NIST 800-XX) and industry best practices
Certifications/Education: A degree or equivalent education in a related discipline such as Computer Science, Business Computing, Engineering, or Commerce
Microsoft Certified: Identity and Access Administrator Associate certification is an asset.
Information security certifications such as CISSP, SANS or equivalent is an asset.
Senior Network Security Engineer – Palo Alto, Cloudflare & Automation - 3348 Disclaimer: AI may be used in evaluating candidates.
This posting is for an existing vacancy.

#J-18808-Ljbffr

📌 Senior Network Security Engineer – Palo Alto, Cloudflare & Automation - 3348 (Ontario)
🏢 S.i. Systems
📍 Ontario