OnX Canada is working with a major health insurance company seeking a Senior Network Engineer to join their growing team.

This is a hybrid environment, requiring the candidate to work 2 days onsite per week in Toronto.

Reporting to the Manager, Network Operations, the Network Engineer plays a lead role in the Network Administration team responsible for the design, implementation, and operational support of our client's enterprise and cloud networking environment—including switching, routing, firewall/IPS, and hybrid connectivity across on-premises and public cloud platforms.

Lead and/or assist in the engineering (planning, design, implementation, and operation) of complex network infrastructure systems, including:

Enterprise networking environments including Data Centre, Campus, and Cloud/Hybrid networks (AWS, Azure, GCP) including virtual networks (VPC/VNet), subnets, routing, and segmentation

Hybrid and cloud connectivity services including site-to-site VPN (IPsec), private connectivity (e.g., Campus Wired & Wireless environments

Platform administration for wired/wireless access and secure remote access, including ZTNA (replacing legacy VPN) platforms and control planes

Accountable for the ZTNA platform lifecycle and operations (availability, performance, upgrades, connectors, troubleshooting, monitoring, and vendor engagement), while partnering with Security who owns and administers access policy (identity context, least privilege, and enforcement rules)

Network-based security appliances such as firewalls & intrusion prevention system (IPS)

Network services automation and Infrastructure as Code (IaC) to standardize, deploy, and operate network configurations (e.g., Terraform), including version control, reusable modules, and automated validation to reduce configuration drift





Apply NetDevOps practices for network changes: use CI/CD pipelines for plan/review/apply, infrastructure code peer review, secrets management, and automated rollback where applicable

Engineer network security controls across on-premises and cloud environments, including firewall policy, segmentation, secure remote access, and alignment to Zero Trust principles

app segmentation, connector placement, routing/DNS considerations, and logging), and support policy automation/guardrails by providing the technical patterns and platform capabilities required by Security

Customer Engagement - IP telephony & Contact Center services

Room-based video collaboration endpoints and video interoperability systems

Monitor network performance and capacity in the areas of response, throughput, availability, and capacity.

Leads change, incident, and problem management tasks with production network team.

Conduct performance monitoring and baseline analysis, with a keen focus on improving service robustness, resilience, and stability.

Responsible to comply with corporate IT and Security policies.

Collaborate closely with other IT and business teams in the development and implementation of new solutions following the project delivery processes.

Provide mentorship within the Team as a Senior technical resource.

The ability to work occasional early or late shifts to support changes.





Occasional travel will be required.

A university degree or college diploma in Computer Science or a related discipline.

Minimum of 8 years’ experience engineering and supporting enterprise network infrastructure, including cloud and hybrid connectivity.

Zero Trust and ZTNA concepts, including a shared-responsibility model where Security owns access policy and the Network team operates the underlying access platform

Cloud networking: AWS/Azure/GCP virtual networks (VPC/VNet), route tables, network security constructs, load balancing, and DNS integration

IPsec site-to-site VPN, BGP routing, and private cloud connectivity services (e.g., Automation and Infrastructure as Code for networking: Python) with Git-based workflows and CI/CD pipelines for repeatable deployments and change control

API-driven automation: ability to use cloud and platform APIs/SDKs to provision and manage networking (e.g., security rules, routes, connectivity), and to implement automated checks (linting/policy guardrails) before changes are applied

TCP/IP, DNS and web-based technologies

Wireless network (Cisco/Meraki)

Network Analysis Tools (Viavi/PRTG)

Clear and effective written and oral communication skills with the ability to communicate to all levels of internal and external customers.

Excellent planning, organizing, and time management skills with robust attention to detail.

Candidates must currently hold or be eligible to obtain a Goverment of Canada Relibaility Status security clearance.

Experience with the following will be an asset:

Video Conference

Experience supporting Intel servers, AIX servers, and Pure Storage are a definite asset.

Bilingual French/English would be an asset

#

📌 Network Engineer Senior (IT) (Toronto)
🏢 OnX
📍 Toronto