Focus Systems is seeking an experienced Network Security Consultant to support Saskatchewan's Health Information Security Operations Team and strengthen enterprise network security across on-premises and hybrid cloud environments.

If you have senior-level experience in network security architecture, Cisco security platforms, enterprise firewalls, segmentation, zero trust, and hybrid cloud security, this is an prospect to contribute to the resilience and security of critical public-sector healthcare systems across Saskatchewan.

Key Details

- Location: Remote within Canada; regular work from the Regina, Saskatchewan, office, where feasible, is considered an asset
- Contract: Upon agreement execution to March 31, 2027 , with two optional one-year extensions
- Industry: Public Sector / Healthcare / Cybersecurity
- Work Arrangement: Remote , with full-time on-site or hybrid work as required
- Schedule: 8:00 AM to 5:00 PM CST , Monday to Friday
- Travel: Within Saskatchewan as required
- Eligibility: Must be located in and permitted to work in Canada

Role Overview The Network Security Consultant will serve as a senior subject matter expert responsible for the governance, architecture, and oversight of enterprise network security controls. The successful candidate will provide security guidance on network and application designs, with a focus on Cisco-based platforms, enterprise zoning and segmentation models, zero trust principles, and regulatory alignment. The Network Security Consultant will participate in Architecture Review Board processes, oversee firewall and remote access security controls, support hybrid cloud security initiatives, and contribute to incident response, vulnerability management, penetration testing, and disaster recovery planning. The role works closely with internal teams and external partners to strengthen and standardize network security capabilities across the organization.

Key Responsibilities

- Design, implement, and manage enterprise controls across Cisco FTD firewalls, FMC, IPS/IDS, Cisco Umbrella/OpenDNS, Cisco Web Security Appliances, and Cisco Secure Malware Analytics
- Provide governance and security expertise for Cisco FTD remote access and VPN services,



aligned with access control policies and zero-trust principles
- Troubleshoot and triage incidents, alerts, and anomalies involving firewalls, IPS, DNS, web security, and network traffic
- Continuously review and tune IPS/IDS signatures, firewall rules, and traffic inspection policies to improve detection and reduce false positives
- Represent network security in Architecture Review Board meetings and evaluate proposed network and application architectures
- Review and approve firewall rule changes, segmentation controls, and zone-based security configurations in datacenter and hybrid environments
- Provide secure design guidance for new and existing services in alignment with enterprise security standards and frameworks
- Design and secure hybrid environments integrating on-premises datacenters with Azure services, including VNets, NSGs, Azure Firewall, application gateways, IAM, PAM, Conditional Access, and RBAC
- Support security integration involving Broadcom VMware Cloud Foundation and associated virtualized networking and security stacks
- Evaluate emerging capabilities in automation, orchestration, and AI/ML-based threat detection
- Conduct deep traffic analysis, threat investigations, incident containment, root cause analysis, and remediation
- Identify security gaps, misconfigurations, risks, and vulnerabilities, and recommend practical remediation strategies
- Support penetration testing, disaster recovery, business continuity, resiliency, failover, and replication planning
- Review F5 load-balancing and traffic-flow configurations for alignment with enterprise security controls and design standards
- Develop high-quality network security architecture designs, standards, operational procedures, and decision documentation
- Act as a trusted advisor to infrastructure, cloud, architecture, security, and operational teams

Mandatory Qualifications





- Minimum 10 years of progressively responsible, hands-on information technology experience, including at least eight years of direct experience in network security engineering, architecture, operations, enterprise firewall engineering and administration, or secure network design and implementation
- At least one active professional-level or expert-level certification: CISSP, CISM, CCSP, CCIE Security, CCNP Security, JNCIP-SEC, JNCIE-SEC, CCSE, Palo Alto Networks Certified Network Security Professional, Palo Alto Networks Certified Network Security Architect, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Solutions Architect Expert, or Microsoft Certified: Azure Network Engineer Associate
- Ability to travel within Saskatchewan for site visits across multiple locations
- Willingness to work full-time on-site or in a hybrid arrangement as required while working from anywhere in Canada and aligning with eHealth Saskatchewan's 8:00 AM to 5:00 PM CST business hours, Monday to Friday
- Must be located in and permitted to work in Canada

Required Skills & Experience

- Network security architecture, design, and governance, including segmentation, zoning, and zero trust
- Hands-on experience with Cisco FTD, FMC, IPS/IDS, Cisco Umbrella/OpenDNS, and web security controls
- Strong understanding of firewalls, VPNs, encryption, URL/DNS filtering, routing, switching, and common protocols
- Network traffic analysis, threat detection, incident response, and forensic or monitoring tools
- Experience identifying security gaps, misconfigurations, and risks and recommending remediation
- Architecture review, security governance, risk assessment, and compliance alignment
- Hybrid cloud security knowledge, particularly Microsoft Azure networking and security controls
- Cross-functional collaboration and the ability to communicate as a senior subject matter expert and trusted advisor

Application Deadline Please complete your initial application by September 6 at 11:30 PM CST. Only candidates selected to proceed to the next stage will be contacted and invited to complete their application package.

📌 Network Security Consultant (Regina)
🏢 Focus Systems
📍 Regina