Duration: 16 Months Location: Hybrid 3x/week onsite (Toronto, London or Winnipeg) Overview: The Senior Network Security Engineer is responsible for engineering new network security technologies and developing maturity and replacement roadmaps for existing security technologies.A successful candidate will require a mindset focused on business value and continuous service improvement.

Responsibilities

- Demonstrate solid security fundamentals while working hands-on with security technologies
- Complete deliverables and deliver high quality solutions in an efficient & effective manner
- Proactively identify and assess security risks to help promote a risk aware culture
- Design solutions that are “fit for purpose” (security function) and “fit for use” (enterprise grade)
- Ensure designs support solution architecture and are endorsed by technology vendor(s)
- Provide input to network security technology roadmaps that set the vision for security services / controls
- Continuous research and evaluation of new technologies
- Evaluate solution components and participate in appropriate functional and non-functional testing
- Work with internal and external stakeholder teams to implement / validate solution integration
- Provide technical consulting on capabilities and limitations of the security technologies Must haves:
- Minimum of 10 years experience designing and implementing enterprise-grade network security solutions
- Robust network security background.
- Experience with Palo Alto NGFW, Cloudflare (DNS, WAF etc).
- Experience with Terraform/Ansible automation.
- Broad knowledge and best practices for infrastructure and security technologies including but not limited to workstations, servers, network, endpoint protection, and secure web gateway
- Attention to detail, effective planning, solid analytical and problem-solving skills,



self-organized and a demonstrated self-starter with the ability to influence others with a strong focus on customer service
- Leadership, communication, negotiation, and interpersonal skills with demonstrated experience working in a team environment
- Demonstrated desire to continuous learning, implementing change and contributing to the organization and with a proven history of making appropriate decisions and recommendations Nice to have:
- Experience with enterprise-grade NGFW engineering and implementation.Experience with CheckPoint and Palo Alto preferred.
- Expert level technical knowledge in the areas of network segmentation, network routing, DNS and DHCP.
- Understanding of Secure Access Service Edge (SASE), Zero Trust and Defense in Depth engineering and architecture.
- Strong ability to read and interpret packet captures for troubleshooting and security forensics.
- In-depth understanding of Web Application Firewalls (WAF), Intrusion Prevention Systems (IPS), SSL inspection and DDoS and Bot mitigation.
- Experience with Gitlab, CI/CD pipelines, secure coding, security of SSDLC through Shift Left principles.
- Experience in systems and service automation and development using Python, Terraform, PowerShell, Ansible etc. and management of Infrastructure as Code (IaC) or Policy as Code (PaC).
- Understanding of enterprise IT security risk assessments and related frameworks (e.g., SOC2, ISO, NIST CSF, NIST 800-XX) and industry best practices Certifications/Education:
- A degree or equivalent education in a related discipline such as Computer Science, Business Computing, Engineering, or Commerce
- Microsoft Certified: Identity and Access Administrator Associate certification is an asset.
- Information security certifications such as CISSP, SANS or equivalent is an asset.

Senior Network Security

Engineer – Palo Alto, Cloudflare & Automation - 3348 Disclaimer: AI may be used in evaluating candidates. This posting is for an existing vacancy.

📌 Senior Network Security Engineer – Palo Alto, Cloudflare & Automation - 3348 (Toronto)
🏢 S.i. Systems
📍 Toronto