IT Senior Network Security Engineer

Onex is an investor and asset manager that invests capital on behalf of Onex shareholders and clients across the globe. Formed in 1984, we have a long track record of creating value for our clients and shareholders. Onex became a public company in 1987 and is listed on the Toronto Stock Exchange under the symbol ONEX.

Onex’ two primary businesses are Private Equity and Credit. In Private Equity, we raise funds from third-party investors and invest them, along with Onex’ own investing capital, through the funds of our private equity platforms: Onex Partners and ONCAP. Similarly, in Credit, we raise and invest capital across several private credit, liquid credit and public equity strategies. Our investors include a broad range of global clients, including public and private pension plans, sovereign wealth funds, insurance companies, family offices and high net worth individuals.

Onex has $48.7 billion in assets under management (“AUM”), of which $32.9 billion is fee-generating and $8.5 billion is Onex’ own investing capital. We generate value for our shareholders through two segments: Investing and Asset Management. Our Investing segment includes gains on our invested capital. Our Asset Management segment generates revenues from the recurring fees clients pay us to manage their capital and includes carried interest from our private equity and private credit funds.

THE OPPORTUNITY:

Based in our Toronto offices, this is an exciting opportunity to lead the IT security team at Onex. Reporting to the Director, Infrastructure and Service Delivery, you will manage the overall day-to-day security operations at Onex and its businesses. This includes investigations, remediations, improvements, policies, application/cloud applications, alerting, reporting, and metrics.

WHAT YOU WILL DO:

Strategic Network Leadership

• Develop and execute a network strategy aligned with Onex’s global infrastructure and cloud transformation initiatives.
• Design and optimize secure, high-performance network architectures across on-premises and Azure cloud environments.
• Lead the implementation of Zero Trust Network Access (ZTNA) and SD-WAN solutions to enhance security and connectivity.

Network Security & Cloud Integration

• Oversee firewall, VPN, and cloud networking policies, ensuring compliance with security best practices and regulatory requirements.
• Enhance Azure networking, including ExpressRoute, VPN connectivity, and firewall security to support hybrid cloud operations.
• Implement advanced network segmentation and access control policies to protect corporate and cloud resources.

Optimization & Performance Management

• Lead initiatives to improve network performance, redundancy, and scalability, ensuring seamless connectivity across global locations.
• Monitor network health, security posture, and operational metrics to proactively identify and resolve performance issues.
• Drive automation and network orchestration strategies to improve efficiency and reduce operational overhead.
• Partner with infrastructure, security, and cloud teams to deliver integrated solutions that support business growth and technology innovation.
• Provide technical leadership and mentorship to internal teams, ensuring best practices in network design, security, and cloud integration.
• Stay ahead of emerging technologies, evaluating new networking and security solutions to enhance Onex’s digital capabilities.

WHAT YOU BRING:

• Degree in Information Technology, Information Security/Assurance, Engineering or related field of study; or at least eight years of prior relevant experience.
• Over 8 years of experience in designing and managing hybrid and multi-cloud connectivity solutions, including VPNs, Direct Connect, ExpressRoute, and inter-cloud connectivity.
• Proven experience as a Network Security Engineer or similar role, with a focus on Azure networking technologies.
• Strong proficiency in Palo Alto, Juniper, and Cisco devices, with the ability to design, deploy, and troubleshoot complex network infrastructures.
• Experience with Cloud Native Networking technologies and knowledgeable of cloud and hybrid-cloud implementations including IaaS, PaaS, and SaaS.
• Strong proficiency in designing and implementing hub-and-spoke network architectures in Azure.
• Good working knowledge of vulnerability remediation practices.
• Experience with network security protocols, firewall technologies, VPNs, and intrusion detection/prevention systems.
• Excellent analytical and problem-solving skills, with the ability to identify and resolve complex network security issues.
• Industry certifications such as CISSP, CCNA, CCNP, Azure Security Engineer Associate, or equivalent.
• Solid understanding of network protocols, firewall technologies, VPNs, and intrusion detection/prevention systems.