Firewall Specialist

Position Description

Secret clearance required (must reside in Canada 10+ years to be eligible). The nature of this work will require additional paid on‑call support on a rotational basis as well as potentially paid overtime.

• Configure, patch, and maintain firewalls to ensure network security
• Work with team to implement new firewall and proxy rules, ensuring they meet security standards
• Troubleshoot network connectivity issues with clients by analyzing firewall logs
• Assist team in making recommendations for improvements to network security infrastructure
• Resolve complex network issues and resolve them within a defined SLA
• Other related activities and deliverables, as required

• Minimum of five (5) years of experience supporting firewalls and troubleshooting network issues
• Minimum of three (3) years of experience with cloud‑based secure web gateway or CASB solutions
• Minimum of two (2) years of experience with protecting workloads in a Hybrid or Public Cloud
• Minimum of two (2) years of experience with secure application delivery solutions
• Minimum of two (2) years of experience with modern network security architectures
• Demonstrated knowledge of various firewall technologies, such as packet filtering, stateful inspection, and proxy firewalls

• Demonstrated knowledge of:
  • Cloud networking concepts such as VPC, VPN, and peering
  • Security best practices for cloud environments, including IAM, security groups, and network ACLs
  • Application security best practices such as OWASP Top 10 and SANS 25
  • SDI and micro‑segmentation concepts and their role in network security
• Demonstrated experience of:
  • At least one of the following cloud platforms: AWS, Azure, or Google Cloud Platform
  • Implementing security solutions such as IDS/IPS, encryption, and DLP in cloud environments
  • Configuring WAFs, IPS, and DDoS solutions at scale
  • At least one of the following networks: VMware NSX, Cisco ACI, or Juniper Contrail
  • IT Security Risk Management
  • Scripting with provisioning and automating infrastructure changes
  • Configuring remote access (VPN), network access control (NAC) and Zero Trust architecture
  • Any relevant Cyber Security and industry certifications (Checkpoint, Cisco, CISSP, etc.)

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $75,000–$125,000. This role is an existing vacancy.

As an equal‑opportunity employer, CGI is committed to fostering a workplace where everyone belongs. If you require an accommodation, please inform your recruiter.

CGI values the strength that diversity brings and is committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. We provide support for accessibility requests; contact us via email for accessibility, not for application status inquiries.