Senior Network Engineer

Definity Financial Corporation; Toronto; On-site; CAD 69,500 - 119,500; Full time

Benefits offered by this job

Share ownership

Incentive plans

RRSP matching

Volunteer days

Tuition assistance

Inclusion programs

Wellness programs

Product discounts

Job summary

Definity is seeking a Senior Network Engineer to design, implement, operate, and support a complex enterprise network across cloud, on‑prem, and hybrid environments. You will manage LAN/WAN, VPNs, and data centers while contributing to network architecture and long-term strategy.

The role requires 8+ years of hands-on experience with Cisco/Arista gear, Check Point maestro, and SASE/Zero Trust implementations, plus automation and cloud networking across AWS/Azure/GCP.

Qualifications

• 8+ years of hands-on enterprise network engineering experience.
• Strong Cisco/Arista expertise and Check Point Maestro.
• Experience with SASE, Zero Trust, and cloud connectivity.
• Knowledge of ZTNA, SWG, CASB, FWaaS components.
• Migration of VPN/perimeter architectures to Zero Trust/SASE.
• Solid TCP/IP and routing protocol understanding.
• Experience supporting 24x7 production environments with on-call rotation.
• Familiarity with ITSM and ServiceNow.
• Scripting/automation and IaC experience.
• Cloud networking across AWS, Azure, and GCP.

Responsibilities

• Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on‑prem, and hybrid environments.
• Manage LAN/WAN/WLAN and data center networks for high availability and performance.
• Provision and troubleshoot internet circuits (DIA, MPLS, VPN) and cloud connectivity.
• Design and implement SASE solutions and Zero Trust access for distributed environments.
• Implement routing protocols, VLANs, STP, VXLAN, and related technologies.
• Lead firewall policies, VPNs, and Maestro hyperscale environments.
• Lead advanced troubleshooting across layers 1–7 using Wireshark and tcPdump.
• Contribute to weekly on-call rotation and on-call production support.
• Develop and maintain automation using Python, Bash, APIs, and Ansible.

Skills

Cisco routers

Arista switches

Check Point firewalls

SASE architecture

ZTNA

VPN/Hybrid connectivity

Automation scripting

Cloud networking

On-call support

ITSM (ServiceNow)

TCP/IP routing

Education

CCNP/CCIE

Check Point CCSA/CCSE

Tools

Wireshark

tcpdump

Python

Ansible

Bash

Job description

Toronto, ONT, Canada and 1 more

Be the First to Apply

Definity is the parent company to some of Canada’s most long-standing and innovative insurance brands, including Economical Insurance, Sonnet Insurance, Family Insurance Solutions, and Petline Insurance. Our ambition is to be one of Canada’s leading and most innovative property and casualty insurers. We can’t do that without our people, so we embrace and encourage a culture that’s collaborative, ambitious, rewarding, and empowering.

We offer a flexible, hybrid work experience where employees work from the office and virtually depending on the type of work they are doing and who they are working with. Bring your true self and be a part of our journey. It’s better here.

The Opportunity

We are seeking a highly experienced Senior Network Engineer to design, implement, operate, and support a complex enterprise network environment. This role requires deep expertise in routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity, combined with strong troubleshooting skills, automation capabilities, and the ability to contribute to network architecture and long-term strategy. The successful candidate will be a key member of the Network Engineering team and will participate in an on-call rotation (weekly) to support production environments.

What to Expect

• Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on-prem, and hybrid environments
• Manage and support LAN, WAN, WLAN, and data center networks ensuring high availability, performance, and resiliency
• Provision, configure, and troubleshoot internet circuits including DIA, MPLS, VPN, and cloud connectivity
• Design and implement SASE (Secure Access Service Edge) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments
• Implement and support routing protocols (BGP, OSPF, EIGRP), VLANs, STP, VXLAN, and related technologies
• Design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments
• Lead advanced troubleshooting across layers 1–7 including packet capture and traffic analysis using tools such as Wireshark and tcpdump
• Participate in a weekly on-call rotation providing after-hours and weekend support for production environments
• Develop and maintain automation solutions using Python, Bash, APIs, and Ansible to improve operational efficiency

What you Bring

• 8+ years of hands‑on experience in enterprise network engineering
• Strong expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls including Maestro
• Experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model
• Hands‑on experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components
• Proven ability to migrate traditional VPN and perimeter‑based architectures to Zero Trust / SASE models
• Deep understanding of TCP/IP, routing protocols, and network security principles
• Experience supporting 24x7 production environments with on-call rotation
• Strong knowledge of ITSM processes and tools such as ServiceNow
• Hands‑on experience with automation, scripting, and Infrastructure as Code
• Experience with cloud networking across AWS, Azure, and GCP
• Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered an asset

Salary Range: $69,500-$119,500

Actual salary for the role may vary depending on work location of the successful candidate and other factors including but not limited to, skills, education, experience, working conditions and the local labour market.

This position is being posted to fill an existing vacancy.

Interested in this role, but don’t meet every requirement?We know from experience that a candidate doesn’t need 100% of the qualifications listed to bring incredible value to our team. We’re actively seeking diverse backgrounds and perspectives to help us make insurance better. At Definity, inclusion, diversity, and equity aren’t just “nice to have” — they’re essential to our success.

What’s in it for you?

• Company share ownership program
• Incentive Program - Eligible employees may participate in various incentive plans which are paid out at the discretion of the company and subject to individual and company performance.
• Pension and savings programs, with company‑matched RRSP contributions
• Paid volunteer days and company matching on charitable donations
• Educational resources, tuition assistance, and paid time off to study for exams
• Focus on inclusion with employee groups, support for gender affirmation surgery, access to BIPOC counsellors, access to programs for working parents
• Wellness and recognition programs
• Discounts on products and services

Go ahead and expect a lot — you deserve it.

It’s better here — but don’t take our word for it. Definity was named by Great Place to Work® as one of the Best Workplaces™ in Canada for women, for youth, and for inclusion.

Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know by [e-mail].

As part of Definity’s commitment to reconciliation, we acknowledge that our work, meetings, and travel take place on the lands now known as Canada, and recognize the enduring presence, wisdom, and stewardship of the First Nations, Métis, and Inuit peoples who have long cared for these lands.

Background checks

This role requires successful clearance of background checks (including criminal checks and leadership references).