Full Job Description
We are looking for a Network Security Engineer to join our Toronto office. This is a full-time hybrid position.
The Network Security Engineer will support, implement, maintain, and troubleshoot network and security infrastructure across customer, data center, and cloud environments. The engineer will work closely with Senior Network Security Engineers on complex implementations, migrations, troubleshooting activities, and technical projects, while progressively developing the skills required to independently manage more complex network and security solutions. The role requires hands-on knowledge of enterprise networking and network security technologies, including routing, switching, firewalls, VPNs, and hybrid-cloud connectivity.
Responsibilities
. Configure, implement, maintain, and troubleshoot network and security solutions.
• Support Palo Alto, FortiGate, Cisco Firepower, and other firewall platforms, including security policies, NAT, security profiles, and high-availability configurations.
• Configure, maintain, and troubleshoot site-to-site IPsec VPNs and remote-access VPN solutions.
• Support enterprise LAN/WAN and data center networking, including VLANs, trunk, LACP/port-channels, STP, HSRP/VRRP, routing, and switching.
• Support routing protocols such as BGP and OSPF and assist Senior Engineers with more complex routing and connectivity issues.
• Perform TCP/IP troubleshooting, packet captures, traffic analysis, and problem determination using tools such as Wireshark and vendor diagnostic tools.
• Support hybrid-cloud connectivity and cloud networking environments, including VPC connectivity, transit connectivity, routing, VPNs, and secure connectivity between cloud and on-premises environments.
• Work closely with Senior Network Security Engineers on implementations, migrations, upgrades, maintenance activities, and complex troubleshooting.
• Execute approved changes following GHS change-management procedures, including pre-change validation, implementation, testing, rollback readiness, and post-change verification.
• Review assigned incidents, service requests, and project tasks; provide timely status updates and maintain accurate technical records.
• Create and maintain network diagrams, implementation documents, configuration records, standard operating procedures, and knowledge-base documentation.
• Work with customers, vendors, carriers, cloud providers, and internal technical teams to troubleshoot and resolve network and security issues.
• Participate in technical assessments and contribute to solution design and implementation planning under the guidance of Senior Engineers.
• Participate in the on-call rotation and respond to critical/high-severity incidents and approved after-hours changes as required.
• Continuously develop technical skills through hands-on work, vendor training, certification, and mentoring from Senior Network Security Engineers.
Requirements
. Bachelor's degree in computer networking or computer science is preferred
• Certifications - Cisco CCNP Enterprise/Security.
• Minimum 5+ years of hands-on experience in enterprise networking and/or network security environments.
• Solid understanding of TCP/IP, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, and common network services.
• Hands-on experience supporting enterprise firewall technologies; experience with Fortinet FortiGate, Firepower and/or Palo Alto.
• Practical experience configuring and troubleshooting firewall policies, NAT, IPsec VPNs, remote-access VPNs, and security profiles.
• Working knowledge of routing protocols, particularly BGP and OSPF.
• Experience troubleshooting network connectivity using packet captures, logs, CLI diagnostic tools, and Wireshark.
• Experience working with incident, request, problem, and change-management processes in production environments.
• Ability to follow technical procedures and change plans while recognizing when an issue requires escalation to a Senior Engineer.
• Strong written and verbal communication skills and ability to provide clear technical updates to internal teams and customers.
• Ability and willingness to participate in an on-call rotation and occasional after-hours implementation or incident activities.
Nice to Have:
• Experience in IT and Data Centre infrastructure strategies, solutions, and concepts
• Knowledge of Virtualization techniques (VMWare, Hyper-V)
• Exposure to SD-WAN/SASE or Zscaler technologies.
• Experience with IBM Cloud, Azure, AWS, or Google Cloud networking and hybrid-cloud connectivity.
• Experience applying ITIL best practices is an asset
• Experience in ITSM ticketing tool - Service Now
• Experience supporting multi-vendor environments and geographically distributed customers.
Personal attributes
• Excellent verbal and written communications skills
• Ability to manage priorities, commitments and projects
• Passionate about cybersecurity concepts and technologies
• Strong team player who collaborates effectively with Senior Engineers and other technical teams.
• Motivated to learn, develop technical depth, and progressively take ownership of more complex responsibilities.
• Strong troubleshooting mindset with attention to detail and a structured approach to problem solving.
• Ability to grasp new technologies and technical concepts quickly.
• Passionate about networking, cybersecurity, cloud technologies, and continuous professional development.
Disclaimer
The rate for this position is $90K-110K. The rate is subject to change and may be modified in the future.
What you'll get:
Competitive salary
Health benefits (medical, vision, dental)
Life insurance
Pension plan
Professional development
Amazing company culture
Free parking
Gym on-site
