Montreal Qc_CAN Permanent contract Led by Rodolphe Saadé, the CMA CGM Group, a global leader in shipping and logistics, serves more than 420 ports around the world on five continents. With its subsidiary CEVA Logistics, a world leader in logistics, and its air freight division CMA CGM AIR CARGO, the CMA CGM Group is continually innovating to offer its customers a complete and increasingly productive range of new shipping, land, air and logistics solutions. Committed to the energy transition in shipping, and a pioneer in the use of alternative fuels, the CMA CGM Group has set a target to become Net Zero Carbon by 2050.

Through the CMA CGM Foundation, the Group acts in humanitarian crises that require an emergency response by mobilizing the Group’s shipping and logistics expertise to bring humanitarian supplies around the world. Present in 160 countries through its network of more than 400 offices and 750 warehouses, the Group employs more than 155,000 people worldwide, including 4,000 in Marseilles where its head office is located. CMA CGM Montreal is looking for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team. CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.

POSITION SUMMARY As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice. Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). Creation/Modification of firewall objects and policies.

Configuration and operation of firewall auxiliaries such as Panorama, User-ID agents, etc. Configuration and maintenance of load balancers (Citrix ADC formerly known as Netscaler). Creation/Modification and health checks of load balanced services, monitors, virtual servers,



content switching, and ADC gateways.

SSL certificate installations and maintenance. Configuration and maintenance of proxy solutions (local open source - Squid, SOCKS, FTP proxy; Creation/Modification of security policies (firewall and web-content filtering) Maintenance of user internet access policies and troubleshooting proxy-related internet connectivity issues.

Zscaler Internet

Access (ZIA) and Zscaler Private Access (ZPA) operations and producing web usage reports.

Distributed

Denial of Service Protection (DDoS) management Keeping up to date with information regarding firmware security vulnerabilities and bugs and ensuring firmware of security devices are secured and updated. Working side by side with Cybersecurity to help with incidents. Involvements in projects outside of daily operations to help with developments on technological solutions.

Producing capacity planning reports. Making sure device inventory is updated and within standards. Creating documents such as SOP or basic network diagram and ability to suggest improvements in the policies and processes.

License renewals and hardware refresh or replacements of devices.

QUALIFICATIONS CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.

Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.

Zero Trust Network

Access (ZTNA - Zscaler ZPA) Strong foundation on Networking (routing and switching). Basic knowledge of Distributed Denial of Service (DDoS) Protection Security management tools such as Firemon, AlgoSec, Tuffin, or Red Seal. Scripting tools such as shell or Python. Willing to work on shifting schedule. Join a global team of nearly 200 nationalities, shaping the future of global trade, moving essential goods, forging newpaths, and pushing boundaries to serve an ever-changing world.

📌 Network Security Specialist (Montreal)
🏢 American President Lines
📍 Montreal