Job DescriptionThe OpportunityWe are seeking a highly experienced Senior Network Engineer to design, implement, operate, and support a complex enterprise network environment. This role requires deep expertise in routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity, combined with strong troubleshooting skills, automation capabilities, and the ability to contribute to network architecture and long-term strategy. The successful candidate will be a key member of the Network Engineering team and will participate in an on-call rotation (weekly) to support production environments.
What to Expect- Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on-prem, and hybrid environments
- Manage and support LAN, WAN, WLAN, and data center networks ensuring high availability, performance, and resiliency
- Provision, configure, and troubleshoot internet circuits including DIA, MPLS, VPN, and cloud connectivity
- Design and implement SASE (Secure Access Service Edge) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments
- Implement and support routing protocols (BGP, OSPF, EIGRP), VLANs, STP, VXLAN, and related technologies
- Design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments
- Lead advanced troubleshooting across layers 1-7 including packet capture and traffic analysis using tools such as Wireshark and tcpdump
- Participate in a weekly on-call rotation providing after-hours and weekend support for production environments
- Develop and maintain automation solutions using Python, Bash, APIs, and Ansible to improve operational efficiency
What you Bring- 8+ years of hands-on experience in enterprise network engineering
- Strong expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls including Maestro
- Experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model
- Hands-on experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components
- Proven ability to migrate traditional VPN and perimeter-based architectures to Zero Trust / SASE models
- Deep understanding of TCP/IP, routing protocols, and network security principles
- Experience supporting 24x7 production environments with on-call rotation
- Strong knowledge of ITSM processes and tools such as ServiceNow
- Hands-on experience with automation, scripting, and Infrastructure as Code
- Experience with cloud networking across AWS, Azure, and GCP
- Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered an asset
Salary Range: $69,500-$119,500
Actual salary for the role may vary depending on work location of the successful candidate and other factors including but not limited to, skills, education, experience, working conditions and the local labour market.
This position is being posted to fill an existing vacancy.
Interested in this role, but don't meet every requirement? We encourage you to apply! We know from experience that a candidate doesn't need 100% of the qualifications listed to bring incredible value to our team. We're actively seeking diverse backgrounds and perspectives to help us make insurance better. At Definity, inclusion, diversity, and equity aren't just "nice to have" - they're essential to our success.
What's in it for you?- Hybrid work schedule for most roles
- Company share ownership program
- Incentive Program - Eligible employees may participate in various incentive plans which are paid out at the discretion of the company and subject to individual and company performance.
- Pension and savings programs, with company-matched RRSP contributions
- Paid volunteer days and company matching on charitable donations
- Educational resources, tuition assistance, and paid time off to study for exams
- Focus on inclusion with employee groups, support for gender affirmation surgery, access to BIPOC counsellors, access to programs for working parents
- Wellness and recognition programs
- Discounts on products and services
Go ahead and expect a lot - you deserve it.#LI-Hybrid
