Senior Network Security Engineer

Glass House Systems (GHS) is an enterprise systems and managed services solutions provider that develops, designs and deploys solutions for leading enterprises in Canada and the US. For almost 33 years, GHS has delivered an enterprise level of service and support to clients. Recognized with industry‑leading awards each year, GHS translates this differentiation into positive client experiences.

As a S. Network Security Engineer, you will be reporting to the Network Security Manager to implement and support a wide variety of network and security technologies, combining deep knowledge of technology infrastructure to support a seamless experience for internal and external customers. This will include participating in the design, deployment, configuration and troubleshooting of Network Security technologies such as NGFW, IPS/IDS, NAC, LAN, WAN, WLAN, Data Center, and Cloud networking technologies within Information Technology.

• Bachelor’s degree or equivalent.
• Must have 10+ years experience working in large enterprises implementing hybrid cloud connectivity and enterprise security needs in the network context.
• Extensive support of Routing Protocols/Technologies such as BGP, OSPF, MPLS VPN, Multicast.
• Demonstrated experience in LAN/WAN, MPLS, QoS, multicast and core networking discipline, including advanced routing protocols like BGP and OSPF.
• Experience with technologies such as Palo Alto, Forti Gate, Cisco Firepower and Juniper vSRX.
• Ability to perform TCP/IP Network traces/packet captures with solid experience interpreting results.
• Experience with Firewall environments, IDS/IPS, NAC Management, SD-WAN, VPN, Firewalls etc.
• Vendor certifications:
  • Cisco (CCNP) – A Must!
  • Fortinet (FCA, FCP)
  • Palo Alto (PCNSE)

• Experience in IT and Data Centre infrastructure strategies, solutions, and concepts.
• Knowledge of Virtualization techniques (VMWare, Hyper‑V).
• Scripting
  
  Languages:
  
  Python.
• Advanced Configuration of Juniper vSRX Firewall and Zscaler SDWAN.
• Experience in ITSM ticketing tool – Service Now.
• Vendor certifications:
  • Cisco (CCIE)
  • Fortinet (FCSS)
  • Juniper (JNCIA-SEC/ JNCIS-SEC)

• Troubleshooting cloud network and security infrastructure solutions, including hybrid cloud connectivity, firewalls, load balancers, IPSEC VPN, etc.
• Responsible for designing, deploying, configuring, maintaining and troubleshooting Palo Alto, Forti Gate, Cisco Firepower and Juniper firewalls.
• Responsible for designing, deploying, configuring, maintaining and troubleshooting IP Networking. Routing protocols (OSPF, BGP), Segment Routing, QoS, IP VPN, VPLS, EVPN, VxLAN, NAT, etc.
• Responsible for troubleshooting, isolate and correct service‑affecting issues on the network in areas including but not limited to: routing protocols, routers, switches, firewall administration, MPLS, BGP, VPN, load balancing.
• Responsible for building, interconnecting, and supporting networks with one of the cloud providers - Regions and Availability Zones. Including working knowledge and hands‑on experience of VPC connectivity, Transit Gateway, Direct link/connect methodologies.
• Conduct research, analyze, recommend, implement, troubleshoot for SDWAN infrastructure (implementation and troubleshooting) (Fortinet and Zscaler products).
• Perform the execution of day‑to‑day networking operations to guarantee network availability, stability, and serviceability with the least amount of downtime possible.
• Design, maintain the network infrastructure services, including the installation, architecture, design, setup, troubleshooting, and maintenance of network and security software and hardware in a mixed vendor environment.
• Review assigned service requests daily, follow up and provide status updates to clients; effectively maintain service delivery status and backlog.
• Lead the technical delivery of projects, including design, configuration, and testing of technical solutions for enterprise‑wide projects.
• Work with vendors, customers, partners, providers, and peer technical staff on implementation, optimization, and security of Network and Security system. This includes, but is not limited to, troubleshooting infrastructure and services including routers,…