Infrastructure Security Specialist

Bombardier; Dorval; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive base salary

Retirement savings plan

Employee Assistance Program

Tele Health Program

Hybrid work policy

Job summary

Bombardier is seeking an Infrastructure Security Specialist to lead enterprise firewall and network security across a distributed environment. You will design, implement, and optimize security controls, VPNs, segmentation, and secure connectivity while aligning with enterprise standards.

A bachelor’s degree and 5+ years in firewall administration or security engineering are required, with hands-on experience on Palo Alto, Fortinet, Cisco, and cloud security in Azure or AWS.

Qualifications

• Bachelor degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or related field.
• 5+ years of professional experience in firewall administration or network security engineering.
• Hands-on experience with enterprise firewall platforms, including configuration, policy management, troubleshooting, upgrades, and lifecycle management.
• Strong knowledge of network security principles: firewalls, NAT, VPN, segmentation, DMZs, access control, and secure design.
• Experience designing, implementing, and troubleshooting complex firewall and network security solutions in large, distributed environments.
• Experience supporting security infrastructure across data centers, sites, remote locations, and cloud environments (Azure/AWS).
• Working knowledge of security automation and scripting; familiarity with IaC and DevOps.

Responsibilities

• Administer and maintain enterprise firewall and network security platforms, including policy management and upgrades.
• Design, configure, implement, and validate firewall, VPN, segmentation, and other security solutions per architectures.
• Develop, review, and optimize firewall rules, access controls, and security policies with least-privilege in mind.
• Implement and evolve network segmentation, secure connectivity, and cloud integration across hybrid environments.
• Lead investigations and resolve complex firewall/security incidents and performance issues.
• Provide senior technical guidance and contribute to standards, roadmaps, and automation opportunities.

Skills

Firewall administration

Network security engineering

Cloud security

Scripting (Python/PowerShell)

Communication skills

French & English bilingual

Education

Bachelor degree in CS/IT/Cybersecurity

Tools

Palo Alto

Fortinet

Cisco

Azure

AWS

Job description

When applicable, Bombardier promotes flexible and hybrid work policies.

Why join us?

At Bombardier, we design, build and maintain the world’s peak-performing aircraft for the world’s most discerning people and businesses, governments and militaries. We have been successful in setting the highest standards by putting our people at the heart of it all, and defining excellence, together.

Working at Bombardier means operating at the highest level. Every day, you are part of a team that delivers superior experiences and products, pushing the boundaries of what's possible in our industry and beyond. By prioritizing employee growth and development, we empower everyone to reach their full potential on their own terms, because the best work happens when you are free to be yourself and share your unique expertise.

Bombardier’s Benefits Program

With our employees’ well-being top of mind, we offer a comprehensive and competitive Benefits Program, which includes the following:

• Insurance plans (Dental, medical, life insurance, disability, and more)

• Competitive base salary

• Retirement savings plan

• Employee Assistance Program

• Tele Health Program

Role overview

The Infrastructure Security Specialist is responsible for the administration, implementation, technical evolution, and continuous improvement of enterprise network security infrastructure. The role provides senior technical expertise in firewalls, network security controls, secure connectivity, segmentation, VPN, and related security technologies across a geographically distributed enterprise environment. The role is expected to operate independently, provide technical guidance, and ensure network security solutions are secure, resilient, scalable, and aligned with enterprise security and technology standards

Working closely with Network, Infrastructure, Cloud, Cybersecurity, Architecture, and project teams, the position supports complex operational issues while leading or contributing to security infrastructure projects, technology upgrades, and modernization initiatives.

What are your contributions to the team?

• Firewall & Security Platform Administration: Administer and maintain enterprise firewall and network security platforms, including configuration, policy management, upgrades, patching, monitoring, and lifecycle activities.

• Security Implementation & Engineering: Design, configure, implement, and validate firewall, VPN, network access, segmentation, and other network security solutions in accordance with approved architectures and standards.

• Firewall Policy & Access Management: Develop, implement, review, and optimize firewall rules, access controls, NAT, application controls, and security policies while maintaining appropriate security, traceability, and least-privilege principles.

• Network Segmentation & Secure Connectivity: Implement and evolve network segmentation, DMZs, secure remote access, site-to-site connectivity, cloud connectivity, and other security controls supporting enterprise and hybrid environments.

• Operational Reliability & Troubleshooting: Lead investigation and resolution of complex firewall and network security incidents, connectivity issues, performance problems, and policy-related issues, including root-cause analysis and corrective actions.

• Security Infrastructure Projects & Evolution: Lead or provide senior technical expertise for security infrastructure projects, technology migrations, firewall replacements, platform upgrades, cloud security integration, and infrastructure modernization.

• Security Monitoring, Compliance & Resilience: Support security monitoring, vulnerability remediation, logging, configuration compliance, high availability, disaster recovery, and security control validation in collaboration with Cybersecurity and operational teams.

• Technical Leadership & Continuous Improvement: Act as the network security SME, provide technical guidance to Network, Cloud, Infrastructure, Cybersecurity, and project teams, contribute to standards and roadmaps, and identify opportunities for automation and continuous improvement.

How to thrive in this role?

Required Qualifications

• Bachelor degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline, or an equivalent combination of education and professional experience.

• 5+ years of professional experience in firewall administration, network security engineering, network infrastructure security, or a related enterprise technology discipline.

• Strong hands-on experience with enterprise firewall and network security platforms, including configuration, policy management, troubleshooting, upgrades, and lifecycle management.

• Strong knowledge of network security principles and technologies, including firewalls, NAT, VPN, IPS/IDS, network segmentation, DMZs, access control, and secure network design.

• Demonstrated experience designing, implementing, and troubleshooting complex firewall and network security solutions within large or geographically distributed enterprise environments.

• Experience supporting security infrastructure across data centers, corporate sites, remote locations, and cloud environments, preferably including Azure and/or AWS.

• Strong understanding of security architecture, least privilege, network segmentation, high availability, logging/monitoring, vulnerability management, and security compliance principles.

• Working knowledge of security automation and scripting, such as Python, PowerShell, Ansible, APIs, or equivalent technologies, with an understanding of Infrastructure-as-Code and DevOps practices.

• Strong analytical, communication, and collaboration skills, with the ability to independently resolve complex technical issues and act as a senior technical SME across Network, Infrastructure, Cloud, Cybersecurity, Architecture, and project teams.

• Fluency in English and French, both written and spoken.

Preferred Qualifications

• Experience with major enterprise security platforms such as Palo Alto, Fortinet, Cisco, Check Point, or equivalent technologies.

• Experience with cloud network security, hybrid/multi-cloud connectivity, SD-WAN security, Zero Trust technologies, and advanced network segmentation.

• Relevant professional certifications such as PCNSE, NSE/FCP, CCNP Security, CCIE Security, CISSP, or equivalent vendor/security certifications.

• Experience developing enterprise firewall/security standards, reference architectures, security implementation methodologies, automation, and multi-year network security technology roadmaps.

Bombardier is an equal opportunity employer and encourages persons of any race, religion, ethnicity, gender identity, sexual orientation, age, immigration status, disability or other applicable legally protected characteristics to apply.

Job

Infrastructure Security Specialist

Primary Location

Administrative Centre (CA)

Organization

Aerospace Canada

Employee Status

Regular

Requisition

16556 Infrastructure Security Specialist