Network Security Engineer

Enterprise Solutions Inc.; Mississauga; On-site; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Inclusive environment for all employees

Job summary

A technology solutions firm in Peel Region, Mississauga, is seeking a Network Security (L3) professional to manage and improve network security operations. The role requires a solid understanding of firewalls, NAC, and Cloudflare WAF, along with strong communication skills. Ideal candidates will have over 8 years of experience in Information Security and certifications like CCSA or CCIE. The position emphasizes leadership in security operations and collaboration with diverse teams.

Qualifications

• Minimum of 8 years' experience in Information Security.
• Experience running a Security Operations Center for a large organization.
• Industry-recognized certifications such as CCSA/CCSE, CCIE, or equivalent highly desirable.

Responsibilities

• Manage day-to-day Operations according to customer environment.
• Develop and implement network security architecture, policies, and procedures.
• Provide L3 level support on critical/Outage situations until resolution.

Skills

Firewall - Checkpoint

NAC - Aruba Clearpass

WAF - Cloudflare

Zscaler tools (ZIA, ZPA, ZDX)

Automation scripting (Python, PowerShell)

Education

Graduate with Science/Eng.

Tools

Checkpoint

Cloudflare

Abnormal AI

F5 BIG-IP

Job description

Job Description – Network Security (L3)

Mandatory skill set: Choice 1 - Firewall - Checkpoint

NAC - Aruba Clearpass

Mandatory skill set: Choice 2 - Firewall - Checkpoint

WAF - Cloudflare

Responsibilities

Manage day-to-day Operations according to customer environment

Organizational Functions

• Develop and implement network security architecture, policies, and procedures to protect against threats.
• Provide L3 level support on critical/Outage situations and drive end to end until resolution.
• Good understanding of network protocols (HTTP, HTTPS, DNS, TCP/IP).
• Strong expertise in:
  • Implementing and maintaining Checkpoint firewall and associated software module (VPN, URL Filtering, IPS etc.) infrastructure.
  • Checkpoint VPN (S2S & Remote access).
  • Deep understanding of Cloudflare CDN and security solutions, including WAF, bot management, and DDoS protection.
  • RADIUS, TACACS+, 802.1X, EAP methods, and networking protocols.
  • ClearPass Policy Manager (CPPM) installation and configuration, profiling, onboarding, guest services.
  • Resolve complex authentication failures, latency issues, and TACACS+ service issues.
  • Zscaler tools (ZIA, ZPA, ZDX), packet capture analysis, scripting languages (Python, PowerShell) for automation.
  • Design, implement, tune ZIA/ZPA policies for roaming, branch, and third-party users using Zscaler cloud security concepts.
  • Resolve complex L2/L3 connectivity, authentication (SAML, SCIM, Azure AD) and access flow issues.
  • Deep understanding of Zero Trust Network Access (ZTNA), Firewalls, IPSec/SSL VPNs.
  • Maintain email security gateway platforms for filtering.
  • Investigate, quarantine, remediate malicious or suspicious emails.
  • Build and maintain scalable infrastructure to analyze email patterns and detect anomalies in real time with Abnormal AI.
• Create and maintain comprehensive documentation related to network security infrastructure and procedures following NIST and CIS standards.
• Identify inefficiencies in operations and propose solutions to improve efficiency.
• Own and drive improvements in Operations, technology, advisory and customer satisfaction.
• Stay up to date on emerging security threats, technologies, and industry trends.
• Manage and mentor a team of network security engineers and analysts.
• Identify automation capabilities, their execution, within the network security products and processes and deliver across multiple customer environments.
• Cross-skill across multiple technologies covering products like Firewalls, Web-Proxies, cloud security products (AWS, Azure, GCP, etc.).
• Prepare weekly and monthly performance reports across multiple customer environments (people, technologies, Process Gaps, Risk, RAG status, etc.).
• Conduct internal training to address skill gaps and motivate the team to obtain technical certifications.

Core Functions

• Focus on technologies and bring automation capabilities.
• Regular reporting on the state of the customer delivery.
• Maintain KPIs for the teams and report on Service Improvement Areas to senior management.
• Identify risks and maintain compliance with submission of client-facing reports.
• Follow industry-based practices and configuration and guide the team to follow the same.

Individual Performance Measurement Criteria

• Bring quality in service delivery and work on cross killing people to increase productivity.
• Quality and effectiveness in communications and engagement with stakeholders.
• Low/Zero Escalation from the customers.
• Driving Innovation to improve Service standards & Quality.

Technical Skills

• Understanding of the different security technologies.
• Experience in deploying, configuring and troubleshooting:
  • 1. Firewalls (Checkpoint)
  • 2. NAC – Aruba Clearpass
  • 3. Web application Firewall – Cloudflare
  • 5. Email Security – Abnormal AI
  • 6. Load balancer – F5 BIG-IP
• Security Change Management
• Rule Base Reviews & Optimization
• Security Incident Management (Standard & Critical)
• Understanding of different Security Architectures.

Communication and Organizational Skills

• Good command of the English language, excellent written and verbal skills.
• Proactive in communication and appropriate selection of audience according to topic.
• Highly organized and capable of tracking a variety of tasks to closure.
• Good time management principles and effective in prioritizing workloads.

Cultural Requirements

• Works collaboratively with other teams and builds positive working relationships.
• Able to learn quickly and apply common sense to new situations, but understand when appropriate to engage others for advice.
• Open and transparent style and approach with others.
• Places a significant level of importance on personal & team development and understanding then improving upon weakness.
• Accepting feedback from managers, peers, and clients regarding work performance.
• Utilizes a goal-oriented approach, drives self-improvement personally and professionally and drives the teams.
• Takes initiative to work on tasks outside immediate scope and encourages others to do the same.

Experience Required

Minimum overall experience of 8-12 years.

• Minimum of 8 years’ experience in Information Security.

• Minimum of 6 years’ experience in running a Security Operations Center for a large organization.

Certifications Required

Industry-recognized certifications such as CCSA/CCSE, CCIE, or equivalent highly desirable.

Education Qualifications

Preferably Graduate with Science/Eng.

“We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.”