Senior Network Security Engineer – Palo Alto,Cloudflare & Automation Job Winnipeg area,Manitoba Canada,IT/Tech

Position: Senior Network Security Engineer – Palo Alto, Cloudflare & Automation - 3348

Senior Network Security Engineer – Palo Alto, Cloudflare & Automation -

Duration: 16 Months

Location: Hybrid 3x/week onsite (Toronto, London or Winnipeg)

Overview:

The Senior Network Security Engineer is responsible for engineering new network security technologies and developing maturity and replacement roadmaps for existing security technologies. A successful candidate will require a mindset focused on business value and continuous service improvement.

Responsibilities:

Demonstrate solid security fundamentals while working hands-on with security technologies

Complete deliverables and deliver high quality solutions in an efficient & effective manner

Proactively identify and assess security risks to help promote a risk aware culture

Design solutions that are “fit for purpose” (security function) and “fit for use” (enterprise grade)

Ensure designs support solution architecture and are endorsed by technology vendor(s)

Provide input to network security technology roadmaps that set the vision for security services / controls

Continuous research and evaluation of new technologies

Evaluate solution components and participate in appropriate functional and non-functional testing

Work with internal and external stakeholder teams to implement / validate solution integration

Provide technical consulting on capabilities and limitations of the security technologies

Must haves:

Minimum of 10 years experience designing and implementing enterprise-grade network security solutions

Strong network security background.

Experience with Palo Alto NGFW, Cloudflare (DNS, WAF etc).

Experience with Terraform/Ansible automation.

Broad knowledge and best practices for infrastructure and security technologies including but not limited to workstations, servers, network, endpoint protection, and secure web gateway

Attention to detail, effective planning, solid analytical and problem-solving skills, self-organized and a demonstrated self-starter with the ability to influence others with a strong focus on customer service

Leadership, communication, negotiation, and interpersonal skills with demonstrated experience working in a team environment

Demonstrated desire to continuous learning, implementing change and contributing to the organization and with a proven history of making appropriate decisions and recommendations

Nice to have:

Experience with enterprise-grade NGFW engineering and implementation. Experience with CheckPoint and Palo Alto preferred.

Expert level technical knowledge in the areas of network segmentation, network routing, DNS and DHCP.

Understanding of Secure Access Service Edge (SASE), Zero Trust and Defense in Depth engineering and architecture.

Strong ability to read and interpret packet captures for troubleshooting and security forensics.

In-depth understanding of Web Application Firewalls (WAF), Intrusion Prevention Systems (IPS), SSL inspection and DDoS and Bot mitigation.

Experience with Gitlab, CI/CD pipelines, secure coding, security of SSDLC through Shift Left principles.

Experience in systems and service automation and development using Python, Terraform, Power Shell, Ansible etc. and management of Infrastructure as Code (IaC) or Policy as Code (PaC).

Understanding of enterprise IT security risk assessments and related frameworks (e.g., SOC2, ISO, NIST CSF, NIST
-XX) and industry best practices

Certifications/

Education:

A degree or equivalent education in a related discipline such as Computer Science, Business Computing, Engineering, or Commerce

Microsoft Certified:
Identity and Access Administrator Associate certification is an asset.

Information security certifications such as CISSP, SANS or equivalent is an asset.