Job Summary The incumbent is responsible for providing technical leadership to the Network Security Management team. The role improves and maintains the cyber security posture of CN's networks enabling business functionality across all systems and environments by applying best practices and security solutions. Acting as a Subject Matter Expert (SME), the incumbent oversees development and integration of new network security functionality into CN's networks and collaborates with various relevant teams.

The role is accountable for assessing new projects and recommending solutions to surfacing issues. The position provides mentoring and training and acts as a third-level support.

Main Responsibilities

Operation Excellence

- Lead and execute installations, upgrades, configurations and maintenance of the network security infrastructure
- Perform a quality review of infrastructure changes and implementations
- Provide third-level support including detailed threat analysis of log data from security devices
- Lead life cycle project initiatives (analyze, test and deploy)
- Lead problem investigations and follow-up on resolutions
- Perform preventive maintenance tasks
- Monitor and maintain system availability and performance
- Identify Key Performance Indicators (KPIs) related to the capacity, performance of the service and network security
- Oversee gatherings of baseline data and ensure that it is assessed against current data for improvements
- Create and maintain operational documentation such as run books, diagrams and system layout
- Troubleshoot and correct defects with vendors
- Apply and ensure compliance with all appropriate CN Technology standards (Security, Architecture, Project Delivery Methodology, Sarbanes-Oxley Act (SOX))
- Respond to investigations and queries of InfoSec Team and Auditors related to breaches
- Assist with root cause analyses for events and incidents when underlying issues are unknown

Delivery
- Participate in project analysis and planning phase to estimate effort and build activity plan
- Collaborate with project team to deliver required infrastructure
- Participate in project transition and support strategies (T2C)
- Lead network security assigned strategies and projects




- Review and maintain Engineering standards and specification documents
- Create and maintain operational documentation (run books, how-to, diagrams, system layouts, standard operating procedure (SOPs))
- Assist on technical proposals, specifications, requirements and design documents
- Coordinate with internal and external stakeholders and vendors as necessary

Practice Evolution
- Engage with team to define, design, and implement network security solutions to enhance cyber security posture
- Participate in evaluation and recommendation of network security tools and technologies for existing and future business needs
- Collaborate with team members to develop and implement process improvements
- Communicate complex designs and information to peers
- Provide training to multiple teams
- Recognize and act on Operations and Business risks and recommend solutions

Working Conditions The role has standard working conditions in an office environment with a regular workweek from Monday to Friday and is eligible to participate in CN's hybrid work model. The role involves managing priorities and delivering work within established timelines, with support from the team to ensure sustainable and effective workload management. The position requires minimal travel (5%) to workshops and training.

Experience

Relevant Experience

- Minimum 10 years of overall work experience
- Minimum 5 years of demonstrated experience in providing hands-on technical expertise with network security solutions deployed in large corporate environments
- Advanced experience with Next Generation Firewall (NGFW) technologies and capabilities
- Experience with Wide-Area Networks (WAN) technologies
- Candidates with an equivalent combination of education, training, and experience will be considered

Education/Certification/Designation

- Bachelor's Degree in Computer Science,



Information Systems or equivalent
- Certification in Certified Information Systems Security Professional (CISSP), Cisco Certified Network Professional (CCNP) Security, Cisco Certified Internetwork Expert (CCIE) Security, Certified Network Security Administrator (PCNSA), Certified Network Security Engineer (PCNSE) or other security or network security related certification*
- Candidates with equivalent practical experience, education, or training will be considered
- Any requirement marked with (*) will be considered an asset (not mandatory)

Competencies

- We Care About Each Other
- We Strive for Excellence
- We Succeed Together
- We Lead Responsibly
- Compliance
- Build trust
- Reading the environment
- Political acumen
- AI Literacy and data orientation

Technical Skills/Knowledge

- Advanced understanding of core security technologies such as NGFW, Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Distributed Denial-of-Service (DDoS/DoS), Virtual Private Network (VPN), Network Access Control (NAC), Advanced Thread Prevention, Uniform Resource Locator (URL) filtering, Domain Name System (DNS) Security and Remote Access
- Deep understanding of common network and application stack protocols such as Transmission Control Protocol (TCP), Internet Protocol (IP), Internet Control Message Protocol (ICMP), Transport Layer Security (TLS), Hypertext Transfer Protocol Secure (HTTP/HTTPS) and Internet Protocol Security (IPSEC)
- Ability to analyze assembled network data to perform incident response and identify potential security issues
- Knowledge of policies, procedures, and protocols in use by the CN
- Knowledge in analyzing security risks and developing response procedures
- Strong working knowledge and troubleshooting of Border Getaway Protocol (BGP), Open Shortest Path First (OSPF) and Enhanced Interior Gateway Routing Protocol (EIGRP) routing protocols
- In-depth working knowledge and troubleshooting VPN technologies
- Advanced working knowledge and troubleshooting of authentication mechanisms
- Solid understanding of end-point platform such as Windows or Linux
- Knowledge of scripting languages

📌 Senior Specialist Cybersecurity Operations Center-CA (Montreal)
🏢 CN
📍 Montreal