Network Security Consultant

Swim Recruiting; Regina; Hybrid; CAD 124,000 - 207,000; Full time

Job summary

Swim Recruiting seeks a senior Network Security Consultant to provide governance, architecture oversight and hands-on security across on-premises and hybrid-cloud Cisco environments for a Saskatchewan health-care organization.

The role supports remote work from anywhere in Canada during Saskatchewan business hours, with Regina availability as an asset. Initial term through Mar 31, 2027, with two possible one-year extensions. Travel within Saskatchewan may be required.

Qualifications

• 10+ years of IT experience with a focus on network security.
• 8+ years in network-security engineering, architecture or operations.
• Active certification such as CISSP, CISM, CCSP, CCIE/CCNP Security, or similar.
• Hands-on Cisco FTD/FMC/IPS/IDS, VPN and firewall-rule experience.
• Experience with Cisco Umbrella/OpenDNS and Web Security Appliance.
• Knowledge of zero-trust, segmentation, encryption and governance.

Responsibilities

• Review and enforce security governance across Cisco-based networks.
• Oversee architecture designs and support modernization, incident response and disaster recovery planning.
• Provide hands-on oversight of firewall/VPN tuning and security controls implementation.
• Collaborate with architecture, infrastructure, cloud, application, operations and security teams.

Job description

Network Security Consultant contract opportunity providing enterprise security governance, architecture and hands-on oversight across Cisco-based on-premises and hybrid-cloud environments for a Saskatchewan public-sector healthcare organization.

• Remote work from anywhere in Canada during Saskatchewan business hours
• Regular Regina availability is an asset
• Initial term through March 31, 2027, with two possible one-year extensions

What & Why:

Our client is seeking an experienced Network Security Consultant to join its Information Security Operations team. The consultant will strengthen enterprise network-security controls, review solution and application designs, support infrastructure modernization and ensure that operational configurations align with security standards, segmentation models, regulatory obligations and zero-trust principles. The assignment also covers remote-access security, firewall and IPS tuning, penetration-testing support and disaster-recovery planning.

Who:

You will collaborate with architecture, infrastructure, cloud, application, operations and security teams. The environment includes Cisco security platforms, datacentres, Microsoft Azure, VMware Cloud Foundation and enterprise services that require resilient, recoverable and well-governed network controls.

You:

You are a senior, hands-on network-security professional who can move between architecture, governance, troubleshooting and implementation oversight. You can assess complex designs, investigate incidents, recommend practical controls and communicate effectively with both technical teams and decision-makers.

Critical Experience Requirements:

• Minimum 10 years of progressively responsible, hands-on IT experience.
• At least eight years in network-security engineering, architecture or operations, enterprise firewall administration or secure network design.
• One active qualifying certification, such as CISSP, CISM, CCSP, CCIE/CCNP Security, JNCIP/JNCIE-SEC or CCSE.
• Palo Alto Networks Certified Network Security Professional or Architect, or Microsoft Azure security, architecture or network certification, also qualifies.
• Hands-on Cisco FTD, FMC, IPS/IDS, VPN and firewall-rule experience.
• Cisco Umbrella/OpenDNS, Web Security Appliance or malware-analysis experience.
• Network segmentation, zoning, encryption and zero-trust expertise.
• Azure VNets, NSGs, Firewall, application gateways, IAM, PAM, Conditional Access and RBAC.
• Traffic analysis, threat investigation, vulnerability remediation and incident response.
• Architecture-review, security-governance and risk-assessment experience.
• Ability to produce clear architecture designs, standards and operational procedures.
• Ability to work 8:00 a.m. to 5:00 p.m. Saskatchewan time.
• Ability to attend onsite or hybrid work and travel within Saskatchewan when required.
• Canadian work authorization and three professional references.

Nice to Have:

• Bachelor’s degree in Computer Science, Engineering, Information Security or a related field.
• SIEM, SOAR, NDR, EDR and vulnerability-management platforms.
• VMware Cloud Foundation security integration.
• F5 load-balancing and traffic-flow review.
• Penetration testing and security validation.
• Disaster recovery and business-continuity planning.
• Public-sector, healthcare or regulated-environment experience.
• Security automation, orchestration or AI-enabled threat detection.

Compensation:

Competitive hourly contract rate based on experience, engagement structure and overall alignment. The consultant must provide required equipment and account for travel associated with remote or hybrid arrangements.