About Malleum Malleum is at the forefront of next-generation cyber defense, partnering with marquee clients across government, defense, financial services, and critical infrastructure. We're experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security, allied intelligence cooperation, and enterprise resilience. Our consultants embed directly with clients to design, secure, and operate the networks and systems behind cutting-edge defensive technologies and programs with national and allied security impact.
If you take pride in being the trusted technical hands clients rely on to keep mission-critical environments running and to help them recover when things go wrong, Malleum is where your craft meets purpose.
The Opportunity We're seeking a client-facing Network & Security Consultant to deliver hands-on design, administration, hardening, and operational support across client network and security infrastructure, and to play a critical supporting role in active incident response (IR) engagements. In this role you'll work remotely and at times on-site, within client environments including sovereign, regulated, and cleared settings providing the technical expertise, composure, and professionalism that define the Malleum delivery experience.
What You'll Do Administer, monitor, and maintain client network infrastructure including routers, switches, firewalls, VPNs, and wireless systems
Operate and tune client security tooling such as EDR/XDR, SIEM, email security, vulnerability scanners, and identity platforms (Entra ID, Okta)
Design, deploy, and operate Zero Trust Network Access (ZTNA) solutions, including Cloudflare edge, access, and tunnel services, to enable secure remote access, identity-aware policies,



and contemporary perimeter strategies
Support Microsoft 365, Azure, AWS, and hybrid environments within each client's security baseline and compliance posture
Implement and enforce hardening standards aligned with CIS Benchmarks, NIST 800-53/171, ITSG-33, and client-specific frameworks
Lead patch management, vulnerability remediation, and configuration management across client servers, endpoints, and network devices
Support active incident response engagements — deploying and tuning tooling, isolating systems, preserving evidence, rebuilding infrastructure, and assisting with containment, eradication, and recovery activities
Work odd hours, evenings, weekends, and extended shifts during active IR engagements, including rapid mobilization with little notice when clients are under attack
Partner with Malleum's IR consultants, forensic analysts, and threat hunters to execute response playbooks under pressure
Maintain client backup, disaster recovery, and business continuity systems with regular testing
Produce high-quality client deliverables: network diagrams, configuration documentation, runbooks, SOPs, IR action logs, and status reports
Standardize provisioning, onboarding/offboarding, and access control workflows within client environments
Serve as a trusted technical point of contact,



communicating clearly with client stakeholders ranging from end users to executive leadership during both steady-state and crisis operations
Contribute to scoping, estimation, and continuous improvement of Malleum's managed, project-based, and IR service offerings
Participate in an on-call rotation supporting critical client infrastructure and security events
What You Bring 7+ years of hands-on experience designing, deploying, troubleshooting, and optimizing enterprise network and security infrastructure across multi-vendor environments. Deep expertise in routing, switching, network segmentation, and firewall policy management, with robust proficiency in Fortinet, Palo Alto, and/or Cisco technologies
Demonstrated success working directly with clients - clear communication, professionalism, and stakeholder management, including explaining technical risk and decisions to non-technical leadership
Significant progressive experience blending network and cybersecurity responsibilities, ideally in a consulting, MSP, MSSP, or IR setting
Strong working knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS, DHCP, and segmentation
Solid understanding of Zero Trust Network Access (ZTNA) fundamentals: identity-centric access, least privilege, micro-segmentation, device posture, and continuous verification
Hands-on ZTNA delivery experience is a significant asset
Hands-on experience with wireless controllers and NAC solutions
Demonstrated ability to perform under pressure during incidents: calm, methodical, and effective during long, high-intensity engagements
Willingness and availability to work odd hours, weekends, and extended shifts when supporting active IR matters
Working knowledge of Windows Server, Active Directory, Group Policy, and Microsoft 365 / Azure administration
Familiar

📌 Senior network (Quebec City)
🏢 Malleum
📍 Quebec City