Network Engineer

EllisDon; Mississauga; On-site; CAD 159,000 - 173,000; Full time

Job summary

EllisDon in Mississauga is seeking a Network Engineer to join our enterprise IT team. You will configure and maintain secure network infrastructures across offices, data centers, and job sites, including Palo Alto NGFWs, Zscaler, Cisco switching, WLAN/WLC, and Azure networking.

You will collaborate with Security Operations and Systems teams to implement resilient networks, monitor performance, and drive network modernization projects with a focus on inclusive diversity and learning.

Qualifications

• 3–5 years of hands-on experience in enterprise network administration or engineering.
• Working knowledge of Palo Alto NGFWs and centralized management (Strata Cloud Manager / Panorama).
• Solid Cisco switching experience — VLANs, trunking, QoS; familiar with OSPF/BGP.
• Experience with enterprise WLAN deployment and RF troubleshooting.
• Knowledge of Azure networking components (vNet, NSG, VPN, WAF).
• Vulnerability management experience with InsightVM in partnership with SecOps.

Responsibilities

• Configure and maintain Palo Alto NGFWs and manage SCM for segmentation and threat prevention.
• Administer Zscaler Private Access (ZPA) and related ZIA/ZDX tasks.
• Administer Cisco switching across offices, data centers, and job sites.
• Support enterprise WLAN (WLC, AP deployment, site surveys) for coverage and performance.
• Design and manage Azure networking (vNets, NSGs, VPN gateways, Load Balancers, WAFs).
• Implement SSL/TLS decryption on NGFWs for deep traffic visibility.
• Manage NAC with Aruba ClearPass (802.1X, TACACS+).
• Monitor network performance, troubleshoot, and resolve incidents within SLA.
• Onboard new job sites/offices with switch/firewall deployment and zero-touch provisioning.
• Collaborate with Systems, Cloud, Security, and Service Delivery teams on projects.
• Partner with SecOps on vulnerability remediation using InsightVM.
• Maintain network documentation and diagrams.

Skills

Palo Alto NGFWs

Zscaler ZPA

Cisco switching

WLAN/WLC

Azure networking

Aruba ClearPass

Rapid7 InsightVM

Security collaboration

Network monitoring

Documentation

Education

Bachelor’s degree in Computer Science/IT

Tools

Strata Cloud Manager

Panorama

SolarWinds

Wireshark

Zabbix

Rapid7 InsightVM

Aruba ClearPass

Job description

Connect with us LinkedIn, Instagram, Facebook, Twitter.

Thinking about a change?

We recognize that the construction industry is changing at a rapid pace and we continually strive to be at the forefront. Our core values empower people to deliver great careers to one another and develop creative solutions for complex problems on some of the most exciting projects. It doesn’t matter what your expertise and craft is – there are no boundaries. We are a group of professionals with a variety of expertise within pre-construction, construction, and post-construction. To learn more, check out our Cradle to Grave services and hear from our team directly about what a career at EllisDon could look like for you. As you can see, we are a diverse bunch.

Above all, we are a group of individuals with unique experiences and at EllisDon, we choose to celebrate the strength in our differences, every day. EllisDon’s commitment to Inclusive Diversity is to work together to create an environment where every employee feels safe to be their true and authentic self. Ultimately, EllisDon’s purpose is to provide people with similar values the opportunity to achieve to their full potential; to deliver that opportunity for great careers to one another; and to contribute meaningfully to the community we share with others.

In case you’re curious, here’s what the industry thinks of us and some of the impacts we’ve made to the communities we work in and our latest Impact Report, highlighting how we’re putting our values into practice in areas such as the climate & environment, inclusive diversity, indigenous relations, and health and safety.

You as a Network Engineer will:

• Configure and maintain Palo Alto NGFWs and manage branch and cloud firewall policy through Strata Cloud Manager (SCM), supporting segmentation, threat prevention, and secure traffic flow.
• Administer secure access with Zscaler — primarily Zscaler Private Access (ZPA) — including App Connectors, application segments, and access policy, with supporting work in ZIA and ZDX.
• Administer and optimize Cisco switching — including VLANs, trunking, QoS, and routing — across corporate offices, data centers, and job sites.
• Support enterprise wireless (WLAN) infrastructure, including WLC administration, access point deployment, and site surveys/troubleshooting for coverage and performance.
• Design, configure, and manage Azure cloud networking, including virtual networks (vNets), subnets, network security groups (NSGs), user-defined routes, private endpoints/DNS, VPN gateways, load balancers, Application Gateways and Web Application Firewalls (WAFs).
• Implement and manage SSL/TLS decryption and inspection policies on Palo Alto NGFWs to enable deep visibility and threat prevention on encrypted traffic, while accounting for certificate management and decryption exclusions.
• Manage network access control and device administration with Aruba ClearPass (NAC), including 802.1X, policy enforcement, and TACACS+ for device authentication and authorization.
• Monitor network performance, availability, and health; investigate and resolve incidents within SLA targets and elevate complex issues as needed.
• Support onboarding of new job sites and offices, including switch/firewall deployment, zero-touch provisioning, and standardized configuration templates.
• Collaborate with the Systems, Cloud, Security, and Service Delivery teams to support on-premises and cloud initiatives, and contribute to network transformation and migration projects.
• Partner with Security Operations (SecOps) on vulnerability remediation, leveraging Rapid7 InsightVM to identify, prioritize, and remediate vulnerabilities across network and firewall infrastructure and to track remediation progress.
• Maintain accurate documentation of configurations, diagrams, runbooks, change records, and incident resolutions.

This is the right role for you if:

• 3-5 years of hands-on experience in enterprise network administration or engineering.
• Working knowledge of Palo Alto NGFWs and centralized management (Strata Cloud Manager / Panorama), including security policy, NAT, and segmentation concepts.
• Solid Cisco switching experience — VLANs, trunking, spanning tree, QoS — and familiarity with routing protocols (OSPF, BGP), subnetting, DNS, and DHCP.
• Experience supporting enterprise wireless (WLAN/WLC), including AP deployment and RF troubleshooting.
• Working knowledge of Azure networking components: vNets, subnets, NSGs, UDRs, Azure DNS, Private Link/Private Endpoints, VPN Gateway, load balancers, Application Gateway, and Web Application Firewall (WAF).
• Hands-on experience with Zscaler ZPA; exposure to ZIA and ZDX is an asset.
• Experience with Network Access Control — Aruba ClearPass (or equivalent) — 802.1X, and TACACS+ for device administration.
• Experience with network monitoring and troubleshooting tools (e.g., SolarWinds, Wireshark, Zabbix) to proactively track performance, availability, and health.
• Familiarity with vulnerability management and remediation workflows, ideally using Rapid7 InsightVM, in partnership with Security Operations (SecOps).
• Strong troubleshooting, problem-solving, and documentation skills, with the ability to prioritize and manage multiple tasks.
• A collaborative team player who thrives in a fast-paced, enterprise-scale environment and is eager to keep learning.
• Relevant certifications are an asset — e.g., CCNA/CCNP, Palo Alto PCNSA/PCNSE, Aruba ACCP, or Microsoft AZ-700.
• Bachelor’s degree or college diploma in Computer Science, Information Technology, or a related field (or equivalent experience).
• The salary range for this role is $115,000 - $125,000.

EllisDon is proud to provide this unique career opportunity that provides continuous learning, opportunity for growth, and a competitive compensation package within an environment that is committed to inclusion and respects diversity.

Go ahead and be yourself. We'll pay you for it!

We are an equal opportunity employer. We welcome people of any age, culture, subculture, gender identity or expression, sexual orientation, nationality, ethnicity, race, size, mental or physical status, veteran status, religion, language, political opinion, working-style preference, family status, education, and socio-economic status. The EllisDon core values of Integrity and Mutual Respect welcomes everyone , at work and in the community, and our value of Mutual Accountability, means that we all have a role to play. As an EllisDon employee, this will ultimately be your commitment to Inclusive Diversity.

Accommodation for Applicants with disabilities will be made during the recruitment process when requested.

We are committed to providing a positive candidate experience and ensuring timely updates are provided to all candidates. If you haven't already, be sure to create a profile on our Careers page to remain up to date on the status of your application and learn about new career opportunities as they arise.

EllisDon uses AI tools to assist in screening and assessing applicants for this position.