Network Security Administrator (Check Point)

Brookfield Asset Management Inc; Outaouais; On-site; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Modern gym

Bike storage

Healthy snacks and drinks

Job summary

Brookfield Renewable is seeking a Network Security Administrator to manage Check Point firewalls, VPNs, SD-WAN, and secure connectivity across sites and cloud environments. You will work with internal teams and MSPs to ensure secure, reliable network services aligned to standards.

The role requires five years in IT infrastructure with three in enterprise security, strong TCP/IP knowledge, and excellent English communication. On-site presence is required to collaborate effectively with teams.

Qualifications

• Degree or diploma in Computer Science, Information Security, Networking, IT, or related field.
• Minimum five years of IT infra experience, with at least three years on enterprise network security.
• Strong experience with Check Point firewalls, management, and Threat Prevention.
• Knowledge of TCP/IP, WAN, BGP, VPNs, NAT, DNS, and SD-WAN.
• Excellent English communication; bilingual English/French is an asset.

Responsibilities

• Administer Check Point firewalls, policies, logging, and threat prevention.
• Support WAN, routing, BGP, VPNs, SD-WAN, and secure connectivity across sites.
• Monitor, troubleshoot, and coordinate upgrades and changes.
• Maintain accurate network diagrams and technical documentation.
• Provide MSP oversight and review implementation/testing plans.
• Assist in security investigations and vulnerability remediation.

Skills

Check Point firewalls

Threat prevention

Networking fundamentals

BGP/VPN/SD-WAN

TCP/IP

Analytical skills

English (written/verbal)

Education

Bachelor's degree in CS/IS/Networking

Tools

Check Point SmartConsole

Microsoft Sentinel

QRadar

PowerShell

APIs

Job description

Network Security Administrator (Check Point)

Brookfield Renewable, as one of the core businesses under Brookfield Corporation, is one of the world’s largest owners, operators, and developers of renewable power, with $125 billion power assets under management. Our diverse portfolio of hydro, wind, solar, distributed energy, storage, and sustainable solutions extends across five continents, totaling over 46,000 megawatts of generating capacity. We use our operating capabilities, scale and global reach to develop and operate a high-quality clean energy portfolio in a responsible manner, helping accelerate the global transition to net zero.

Come Join Us

At Brookfield Renewable, we attract and retain high-performing individuals who are interested in making an impact, driving meaningful change and being part of a fast-paced and collaborative environment. Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. Together, we contribute to the success of one of the fastest growing and largest publicly traded, pure play renewable power platforms in the world while supporting decarbonization and greater energy sustainability to facilitate the global transition to a net-zero.

About the Role

Reporting to the Manager, IT Infrastructure, the Network Security Administrator is responsible for the administration and operational oversight of network security and secure connectivity services, including Check Point firewalls, WAN, routing, BGP, VPNs, and SD-WAN. The role works closely with internal teams and managed service providers to ensure network services remain secure, reliable, and aligned with established technical standards.

Network Security and Connectivity

• Administer and oversee Check Point firewalls, policies, gateways, threat prevention, logging, and monitoring.
• Support WAN, routing, BGP, VPNs, SD-WAN, network segmentation, and secure connectivity across sites, cloud environments, and third parties.
• Monitor and troubleshoot network security, routing, VPN, failover, and connectivity issues.
• Coordinate upgrades, patching, backups, certificate renewals, lifecycle activities, and configuration reviews.
• Maintain accurate network diagrams, procedures, and technical documentation.

Technical and MSP Oversight

• Ensure network security services operate in accordance with established architecture and technical standards.
• Provide technical direction to managed service providers supporting network security and connectivity services.
• Review and validate implementation plans, testing, rollback procedures, and completed work.
• Escalate architectural decisions, risks, exceptions, and non-standard configurations as required.

Incident, Change and Problem Management

• Act as an escalation point for network security and connectivity incidents.
• Coordinate troubleshooting across internal teams, service providers, carriers, and technology vendors.
• Review changes within delegated authority, ensuring risks, impacts, testing, and rollback requirements are addressed.
• Support major incidents and root-cause analysis, ensuring corrective actions address underlying issues.
• Identify recurring issues and recommend improvements to security, resiliency, monitoring, and operational processes.

Cybersecurity Support

• Support security investigations, vulnerability remediation, audits, penetration testing, and network security control requests.
• Provide firewall logs, packet captures, routing information, and other technical evidence for investigations.
• Implement or coordinate approved security controls and containment actions.

Qualifications and Experience

• Degree or diploma in Computer Science, Information Security, Networking, IT, or a related discipline, or equivalent education and experience.
• Minimum five years of relevant IT infrastructure experience, including three years supporting enterprise network security technologies.
• Strong experience with Check Point firewalls , Security Management, SmartConsole, security policies, logging, and Threat Prevention.
• Strong knowledge of TCP/IP, WAN, routing, BGP, VPNs, NAT, DNS, network segmentation, and SD-WAN.
• Experience troubleshooting network security and connectivity issues using firewall logs, packet captures, routing information, and monitoring tools.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to work independently, manage competing priorities, and elevate technical or risk decisions as required.
• Strong written and verbal English communication skills; bilingual English/French is an asset.

Assets

• Check Point or Meraki SD-WAN experience
• Azure networking and hybrid cloud connectivity
• Cisco or Meraki networking
• SIEM platforms such as Microsoft Sentinel or QRadar
• PowerShell, APIs, or infrastructure automation
• Relevant Check Point, Microsoft, Cisco, or network security certifications

Note: Offices continue to be central to collaboration and Brookfield’s identity. This position requires the employee to be on-site for a minimum of 4 days to perform most effectively.

Working here, you will enjoy:

At Brookfield, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential.

• We thrive on the challenge to be our best and progressive thinking to keep growing. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
• We work to recognize you in meaningful, personalized ways including a competitive salary, bonus structure, a health benefits program, and defined contribution pension plan.
• Our spaces are open, dynamic, and collaborative, giving you access to different businesses and teams. For your well-being, our building is equipped with a modern gym, bike storage, and healthy snacks and drinks.
• We cultivate a culture where we invest in your growth and development.

Diversity & Inclusion

Brookfield Renewable embraces and promotes the principles of diversity, equity, and inclusion. We welcome and encourage applications from all qualified candidates, including women, Indigenous peoples and other persons of all races, ethnic origins, religions, abilities, sexual orientations, and gender identities and expressions. We also provide accommodation during all parts of the hiring process, upon request. If contacted to proceed to the recruitment process, please advise us if you require any accommodation.