Firewall Specialist

Position

Description:

Secret clearance required (must reside in Canada 10+ years to be eligible)

The nature of this work will require additional paid on-call support on a rotational basis as well as potentially paid overtime.

Your future duties and responsibilities:

The Firewall Specialist will:
. Configure, patch, and maintain firewalls to ensure network security
. Work with team to implement new firewall and proxy rules, ensuring they meet security standards
. Troubleshoot network connectivity issues with clients by analyzing firewall logs
. Assist team in making recommendations for improvements to network security infrastructure
. Resolve complex network issues and resolve them within a defined SLA
. Other related activities and deliverables, as required

Required qualifications to be successful in this role:

. Minimum of five years of experience supporting firewalls and troubleshooting network issues
. Minimum of three years of experience with cloud-based secure web gateway or CASB solutions
. Minimum of two years of experience with protecting workloads in a Hybrid or Public Cloud
. Minimum of two years of experience with secure application delivery solutions
. Minimum of two years of experience with modern network security architectures
. Demonstrated knowledge of various firewall technologies, such as packet filtering, stateful inspection, and proxy firewalls

The following will also be considered:
. Demonstrated knowledge of:
. o Cloud networking concepts such as VPC, VPN, and peering
. o Security best practices for cloud environments, including IAM, security groups, and network ACLs
. o Application security best practices such as OWASP Top 10 and SANS 25
. o SDI and micro-segmentation concepts and their role in network security

. Demonstrated experience of:
. o At least one of the following cloud platforms: AWS, Azure, or Google Cloud Platform
. o Implementing security solutions such as IDS/IPS, encryption, and DLP in cloud environments
. o Configuring WAFs, IPS, and DDoS solutions at scale
. o At least one of the following networks: VMware NSX, Cisco ACI, or Juniper Contrail
. o IT Security Risk Management
. o Scripting with provisioning and automating infrastructure changes
. o Configuring remote access (VPN), network access control (NAC) and Zero Trust architecture
. . Any relevant Cyber Security and industry certifications (Checkpoint, Cisco, CISSP, etc.)

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $75,–$,. This role is an existing vacancy.
#LI-KM1

Skills: