CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.
* CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*
As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.
KEY RESPONSIBILITIES- Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:
- Creation/Modification of firewall objects and policies.
- Establishing secured external connectivity with VPN technologies.
- Configuration and operation of firewall auxiliaries such as Panorama, User-s, etc.
- Configuration and maintenance of load balancers (Citrix ADC formerly known as Netscaler).
- The tasks include but not limited to:
- Creation/Modification and health checks of load balanced services, monitors, virtual servers, content switching, and ADC gateways.
- Defining rewrites and responders.
- SSL certificate installations and maintenance.
- Configuration and maintenance of proxy solutions (local open source
- Squid, SOCKS, FTP proxy; cloud
- Zscaler). The tasks include but not limited to: - Creation/Modification of security policies (firewall and web-content filtering)
- Whitelisting/blacklisting URL and IP addresses.
- Maintenance of user internet access policies and troubleshooting proxy-related internet connectivity issues.
- Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) operations and producing web usage reports.
- PKI / SSL certificates administration.
- Distributed Denial of Service Protection (DDoS) management
- Keeping up to date with information regarding firmware security vulnerabilities and bugs and ensuring firmware of security devices are secured and updated.
- Working side by side with Cybersecurity to help with incidents.
- Involvements in projects outside of daily operations to help with developments on technological solutions.
- Log investigation, debugging, and packet captures.
- Producing capacity planning reports.
- Daily health checks for devices and services.
- Making sure device inventory is updated and within standards.
- Creating documents such as SOP or basic network diagram and ability to suggest improvements in the policies and processes.
- License renewals and hardware refresh or replacements of devices.
- Other responsibilities as required
* CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*
Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.
Knowledge &Experience:
- At least 3-5 years of related experience.
- Strong knowledge and experience on the FF technologies:
- VPN Technologies (IPSEC S2S/Client SSL)
- Load balancers (F5 or Citrix ADC)
- Proxies (open source such as Squid, SOCKS, and FTP proxies; Cloud based proxy solutions – Zscaler ZIA)
- Zero Trust Network Access (ZTNA – Zscaler ZPA)
- Strong foundation on Networking (routing and switching).
- Basic knowledge and experience on DNS administration and PKI.
- Basic knowledge of Distributed Denial of Service (DDoS) Protection
- Preferred but not required:
- Security management tools such as Firemon, Algo Sec, Tuffin, or Red Seal.
- Scripting tools such as shell or Python.
- Strong work ethic, professional integrity and the ability to apply the appropriate level of judgement and maturity.
- Excellent interpersonal skills, and a strong ability to communicate, team player, and result oriented.
- Willing to work on shifting schedule.
We are an equal opportunity employer.
We offer:Job description:
CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.
* CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*
As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.
KEY RESPONSIBILITIES- Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:
- Creation/Modification of firewall objects and policies.
- Establishing secured external connectivity with VPN technologies.
- Configuration and operation of firewall auxiliaries such as Panorama, User-s, etc.
- Configuration and maintenance of load balancers (Citrix ADC formerly known as…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).