Job Description:

About the Job:
Sr. Analytics and Automation Engineer - Focus on Micro segmentation Policy-as-a-Code.

Department and Role Summary:

Analytics and Automation Centre of Excellence is a focused Network Services group responsible in advancing Network Services' capabilities in automation, orchestration, data analytics, tooling, artificial intelligence, and all aspects of functionality integrations within SLF ecosystem of tools and their capabilities in support of and in accordance with the guardrails set forth for Sunlife Digital Enterprise journey.

This role reports and operates under the general direction of the Director, Analytics and Automation Centre of Excellence. Successful Candidate will be working on several automation code development primarily for network services, with initial focus on micro/macro segmentation. This person will also play a major role in integrating a few digital platforms for tooling and analytics to increase operational efficiency in management of the enterprise network ecosystem, on-premises and in cloud.

What will you do?

Main Accountabilities:

• Design and implement automated workflows for micro-segmentation policy creation, validation, and deployment across Sunlife's hybrid environments.
• Build and maintain CI/CD pipelines for policy-as-code to ensure consistent, auditable deployments.
• Develop automation for continuous policy compliance monitoring and configuration drift detection.
• Contribute to advancing technologies for Automation, Data & Analytics, DevOps, API, and Platform Integration, within Network Services' and business partners.
• Contribute and promote knowledge sharing, knowledge transfers, providing workshops and trainings.

What do you need to succeed?

Deep micro segmentation & Security architecture knowledge.

• Platform Experience: Hands-on expertise with Guardicore.
• Zero Trust Principles: Strong understanding of Zero Trust, least-privilege access, and reducing lateral movement.
• Network Fundamentals: Solid grasp of TCP/IP, DNS, routing, firewalls, L3/L4 ACLs, and Traffic Flow Analysis.

Automation & Software Engineering.

• Scripting & Programming: Proficiency is Python and/or Powershell is must
• Policy-as-Code: Mandatory Ansible, Terraform, and CI/CD working experience
• API Mastery: Strong ability to work with REST APIs and JSON to integrate Guardicore with CMDBs, ServiceNow, and ticketing systems.
• AI/ML Integration: Experience using AI to analyze traffic flows and auto-generate policies is a huge plus.

Policy Compliance & Policy Lifecycle Management

• Continuous Compliance: Experience building pipeline for automated evidence collection, configuration baselines, and audit reporting
• Policy Lifecycle: Skills in managing the full lifecycle-discovery, testing, validation, enforcement, and reporting.
• Auditing: Ability to perform firewall rule-base / ACL reviews to identify gaps and redundancies.

Integration & Soft Skills

• Cross-functional Collaboration: Ability to work with Network, Security, App Teams, ITSM, to translate business needs into technical policies.
• Tooling and CMDB Integration: Experience integrating segmentation with Enterprise monitoring tools, CMDB, and user-facing portals.
• Certifications: While not mandatory, CISSP, GCSA, GCSE, CCNP Security, CCSM are strong indicators of expertise.

Education and Experience.

• Bachelor's degree in computer science, Information Technology, Cyber Security, Computer Engineering or closely related technical field
• Five (5) + years coding and development using one or more programming languages in Python, PowerShell, Bash, (others are advantage)
• Two (3) + years progressive experience in PaC and IaC (Policy/Infrastructure as Code) development using tools like, Ansible, Terraform, etc.
• At least Five (5) + years in networks, security, IT, data analysis and visualization.
• Expertise in Network Programmability and integration with YANG, YAML, XML, JSON, NETCONF, RESTCONF.

Technological Skills.

• Advanced Networking
• Automation, PaC, IaC, DevOps
• Cybersecurity Principles
• Identity & Access Management
• Cloud Infrastructure Competencies

Competencies:

• Cross-Functional Diplomacy: The successful candidate must act as a bridge between the Network team, Security compliance team and the Application owners.
• Clear Documentation: Must document complex architectural labels and automation workflows for compliance and so they can be easily audited.
• Risk-Management Mindset: Purposeful but careful approach to automation, understanding the importance of "visibility/alerting mode" before transitioning automated policies to "enforcement/blocking mode."
• Advanced reasoning skills with the ability to define problems, evaluate trends in analytical data, establish facts, and draw supportable valid conclusions.
• Thrives in an Agile and fast-paced environment, with the ability to stay calm in high-risk, high-pressure situations.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:
90,000/90 000 - 140,000/140 000

Job Category:
IT - Technology Services

Posting End Date:
02/10/2026