Senior Network Security Engineer – Palo Alto, Cloudflare & Automation - 3348

Duration:

16 Months

Hybrid 3x/week onsite (Toronto, London or Winnipeg)

The Senior Network Security Engineer is responsible for engineering new network security technologies and developing maturity and replacement roadmaps for existing security technologies.

A successful candidate will require a mindset focused on business value and continuous service improvement.

• Demonstrate solid security fundamentals while working hands-on with security technologies
• Complete deliverables and deliver high quality solutions in an efficient & effective manner
• Proactively identify and assess security risks to help promote a risk aware culture
• Design solutions that are “fit for purpose” (security function) and “fit for use” (enterprise grade)
• Ensure designs support solution architecture and are endorsed by technology vendor(s)
• Provide input to network security technology roadmaps that set the vision for security services / controls
• Continuous research and evaluation of new technologies
• Evaluate solution components and participate in appropriate functional and non-functional testing
• Work with internal and external stakeholder teams to implement / validate solution integration
• Provide technical consulting on capabilities and limitations of the security technologies

• Minimum of 10 years experience designing and implementing enterprise-grade network security solutions
• Strong network security background.
• Experience with Palo Alto NGFW, Cloudflare (DNS, WAF etc).
• Experience with Terraform/Ansible automation.
• Broad knowledge and best practices for infrastructure and security technologies including but not limited to workstations, servers, network, endpoint protection, and secure web gateway
• Attention to detail, effective planning, solid analytical and problem-solving skills, self-organized and a demonstrated self-starter with the ability to influence others with a strong focus on customer service
• Leadership, communication, negotiation, and interpersonal skills with demonstrated experience working in a team environment
• Demonstrated desire to continuous learning, implementing change and contributing to the organization and with a proven history of making appropriate decisions and recommendations

• Experience with enterprise-grade NGFW engineering and implementation.
  
  Experience with CheckPoint and Palo Alto preferred.
• Expert level technical knowledge in the areas of network segmentation, network routing, DNS and DHCP.
• Understanding of Secure Access Service Edge (SASE), Zero Trust and Defense in Depth engineering and architecture.
• Strong ability to read and interpret packet captures for troubleshooting and security forensics.
• In-depth understanding of Web Application Firewalls (WAF), Intrusion Prevention Systems (IPS), SSL inspection and DDoS and Bot mitigation.
• Experience with Gitlab, CI/CD pipelines, secure coding, security of SSDLC through Shift Left principles.
• Experience in systems and service automation and development using Python, Terraform, Power Shell, Ansible etc. and management of Infrastructure as Code (IaC) or Policy as Code (PaC).
• Understanding of enterprise IT security risk assessments and related frameworks (e.g., SOC2, ISO, NIST CSF, NIST 800-XX) and industry best practices

• A degree or equivalent education in a related discipline such as Computer Science, Business Computing, Engineering, or Commerce
• Microsoft Certified:
  Identity and Access Administrator Associate certification is an asset.
• Information security certifications such as CISSP, SANS or equivalent is an asset.

AI may be used in evaluating candidates.

This posting is for an existing vacancy.