Senior Network Security Engineer

Company Overview

Glass House Systems (GHS) is an enterprise systems, and managed services solutions provider that develops, designs and deploys solutions for leading enterprises in Canada and the US. For almost 33 years, GHS has delivered an enterprise level of service and support to clients and is recognized with industry‑leading awards each year.

As a S. Network Security Engineer, you will report to the Network Security Manager to implement and support a wide variety of network and security technologies, combining deep knowledge of technology infrastructure to provide a seamless experience for internal and external customers.

• Troubleshooting cloud network and security infrastructure solutions including hybrid cloud connectivity, firewalls, load balancers, IPSEC VPN, etc.
• Designing, deploying, configuring, maintaining and troubleshooting Palo Alto, Forti Gate, Cisco Firepower and Juniper firewalls.
• Designing, deploying, configuring, maintaining and troubleshooting IP networking (routing protocols such as OSPF and BGP, Segment Routing, QoS, IP VPN, VPLS, EVPN, VxLAN, NAT, etc.).
• Isolating and correcting service‑affecting issues on the network in areas such as routing protocols, routers, switches, firewall administration, MPLS, BGP, VPN, and load balancing.
• Building, interconnecting, and supporting networks with one of the cloud providers across regions and availability zones, including hands‑on experience with VPC connectivity, Transit Gateway, Direct Connect, and other connectivity methodologies.
• Researching, analyzing, recommending, implementing, and troubleshooting SDWAN infrastructure, including Fortinet and Zscaler products.
• Executing day‑to‑day networking operations to guarantee network availability, stability, and serviceability with minimal downtime.
• Designing, maintaining, and troubleshooting network infrastructure services, including installation, architecture, configuration, and maintenance of network and security hardware and software in mixed‑vendor environments.
• Reviewing assigned service requests daily, following up, and providing status updates to clients to maintain service delivery and backlog visibility.
• Leading the technical delivery of projects, including design, configuration, and testing of enterprise‑wide solutions.
• Working with vendors, customers, partners, providers, and peer technical staff on implementation, optimization, and security of network and security systems, troubleshooting infrastructure and services in on‑premises and cloud environments.
• Researching, analyzing, recommending, and implementing new software, hardware, tools, systems, and processes to improve efficiency, reduce total cost of ownership, and enhance performance.
• Performing infrastructure maintenance and upgrades to client environments.
• Providing incident management and support for critical issues escalated by Network Security Services Operations, including internal and external communications and root‑cause analysis.
• Creating and reviewing documentation of the current network architecture and developing solutions to enhance existing services.
• Performing technical assessments using industry‑standard toolsets for network, server, and security architectures.
• Communicating effectively with internal and external audiences at varying technical levels.
• Participating in the on‑call rotation and responding to critical or high‑severity alerts after hours using documented procedures.
• Implementing change requests during after‑hours for new initiatives or incident management.

• Bachelor’s degree or equivalent.
• 10+ years of experience in large enterprises implementing hybrid cloud connectivity and enterprise security in a network context.
• Extensive support of routing protocols/technologies such as BGP, OSPF, MPLS VPN, and multicast.
• Experience with LAN/WAN, MPLS, QoS, multicast, and core networking disciplines, including advanced routing protocols like BGP and OSPF.
• Experience with Palo Alto, Forti Gate, Cisco Firepower, and Juniper vSRX.
• Ability to perform TCP/IP network traces/packet captures and interpret results.
• Experience with firewall environments, IDS/IPS, NAC management, SD‑WAN,…