Network Security Engineer

Duration: 12

Months (possibility of extension/conversion)

Location: Toronto, ON (2 days onsite/week)

The IT Security Delivery Specialist is responsible for provisioning security rules in support of business objectives while following the organization standards across on‑premises and cloud environments. This role plays a critical role in safeguarding the bank’s global security footprint.

The successful candidate will ensure the timely response to business application deployments via security policy adjustments, implementations, and assessments. The skills required to be effective in this role will include a deep understanding of firewall management using orchestration tools such as Tufin.

• Delivery of enterprise firewall solutions, including both physical and cloud‑based platforms, in alignment with security architecture and network standards.
• Develop and implement security‑driven firewall policies that protect critical assets while enabling business initiatives and application onboarding.
• Liaise with application teams, technical asset owners, and business requestors on the crafting and implementation of firewall, segmentation, and policy rules across platforms such as Palo Alto, Guardicore, Akamai, and related products.

• Ensure all firewall implementations meet internal security requirements, regulatory obligations, and audit expectations as set forth by Enterprise Protect.
• Enforce disciplined change management practices, ensuring solutions are fully documented, peer‑reviewed, and production‑ready.
• Act as a subject matter expert in firewall security, providing guidance on risk mitigation, exception handling, and compensating controls.

• Collaborate with security, network, infrastructure, and application teams across the bank to understand technical and business requirements and translate them into secure firewall designs.
• Partner with business stakeholders to balance security objectives with operational needs, clearly articulating risk, impact, and recommended solutions.
• Communicate effectively with senior technical leaders and delivery partners to ensure alignment and timely execution of initiatives.

• Provide senior‑level (Tier 3 / Tier
  4) support and consultation for complex firewall‑related incidents, deployments, and avoiding service disruptions.
• Support large‑scale initiatives with tight delivery timelines by ensuring firewall services are delivered reliably, consistently, and with a strong focus on quality.
• Contribute to continuous improvement of firewall delivery processes, standards, and operational readiness.
• Demonstrated expertise in enterprise firewall technologies and network security principles (Palo Alto, Guardicore, &/or Netskope experience highly preferred).
• Strong understanding of how different security devices integrate within a secure enterprise network environment.
• Proven ability to operate independently, exercise sound technical judgment, and influence positive outcomes across teams.
• Exceptional documentation, communication, and stakeholder‑management skills appropriate for a senior role in a regulated financial institution.
• Strong understanding of one or more of the core technologies and/or concepts:
• Palo Alto Firewall (with Panorama)
• Guardicore Firewalls
• Netskope
• Shape (F5)
• Tufin Policy Orchestration tool

• 5+ years of progressive responsibilities with Firewall Technologies
• Working knowledge of how different technologies mesh together in enterprise environments.
• Working knowledge of security implementation in a hybrid enterprise
• Problem solving and mentoring abilities are crucial to success

• Palo Alto Firewall management With Panorama (++)