Network Security Engineer

Tekshapers; Montreal (administrative region); On-site; CAD 90,000 - 130,000; Full time

Job summary

Tekshapers is seeking an experienced IT Security Engineer to support network security deployments and operations. You will coordinate with external vendors and internal teams, lead onboarding of Secure IoT firewalls, and provide L3 support for multiple security platforms.

The role requires strong English communication, cloud and on-prem security knowledge, and the ability to work in a fast-paced environment with potential on-call responsibilities.

Qualifications

• Experience with common network security solutions (firewalls, VPNs, NAT).
• Knowledge of packet filtering and stateful inspection.
• Experience in cloud environments and scripting.
• Strong networking fundamentals (routing, switching, VLANs).
• Experience with host security (iptables, host-based firewalls).
• Familiarity with Change Management and incident response techniques.
• Fluent English, excellent written and oral communication.

Responsibilities

• Communicate and coordinate designs and documentation with vendors and internal teams.
• Lead onboarding, deployment, and integration of Secure IoT firewalls into business processes.
• Lead operational support for multiple security solutions (e.g., GCP firewalls, Fortinet, Palo Alto).
• Provide L3 operational support, incident management, and troubleshooting with internal and external peers.
• Implement monitoring to ensure healthy and resilient infrastructure.
• Participate in on-call coverage as needed.
• Create and update operational runbooks.
• Assist in knowledge transfer through training and recordings.

Skills

Firewall expertise

VPN & NAT

Packet inspection

Cloud environments

Scripting (Python, Shell)

Networking fundamentals

Host security

Change management

Written & verbal comms

Education

Bachelor's Degree in Computer Science or IT

Tools

Ansible

Github

Job description

• Communicate and coordinate designs and documentation with external vendors and internal technology focused teams, including senior management
• Lead the onboarding, deployment, and integration of Secure IoT firewalls into business-as-usual Morgan Stanley systems and processes
• Lead operational support for multiple network security solutions (e.g. GCP cloud native firewalls and/or Fortinet / Palo Alto third-party vendor solutions)
• L3 operational support, including incident management and troubleshooting advanced issues and collaborating with technology peers internally and externally (e.g. vendors)
• Implement monitoring of products and services to ensure a healthy and resilient infrastructure
• Potential for off hour coverage via mobile phone (e.g. as part of an operational oncall system)
• Creation/supplementation of operational runbooks
• Assist in knowledge transfer (e.g. training global teammates via video recordings)

Skills

Technical skills

• Knowledge and experience with common network security solutions (e.g. firewalls, Virtual Private Networks (VPNs), Network Address Translation (NAT), etc.)
• Knowledge of packet filtering and stateful packet inspection
• Knowledge and experience in cloud environments
• Scripting in any of the popular languages or tools (e.g. shell scripts, Python, Ansible, Github, Data pipeline, integration with third party vendor APIs)
• Knowledge of fundamental on networking (e.g. routing, switching, VLANs, etc.)
• Experience with host security (e.g., iptables, host-based firewalls)
• Familiarity with Change Management and incident response techniques
• Active interest in IT Security and general knowledge of Information Security
• Excellent written and oral communication skills; fluent English is required
• Strong interpersonal and communication skills; capable of writing documentation, making presentations to internal audience, and interacting positively with management, colleagues and customers
• Independent problem-solving, highly motivated, and self-directing
• Comfortable working in an engineering and support team with potential for heavy end user interaction
• Ability to handle constantly changing flow of traffic; remain productive during slow times, be able to multitask effectively during busy times, exercise patience and professionalism during stressful situations.

Desired Skills

• Having skills and experience in the areas below is a major plus and will help the candidate integrate with the team and environment:
• Experience with any of the firewall platforms: Fortinet, Palo Alto, Juniper, etc.
• Understanding of networking and routing protocols (e.g. static routing, BGP, etc.)
• Strong understanding of networking fundamentals (OSI model, TCP Stack, network design)
• Experience in customer support and experience in interacting with business users
• Senior years of network security administration experience; preferably in the Financial Services sector.
• Bachelor's Degree in Computer Science or IT equivalent to the job description is required.

The firm require people to work in office at least 3 days a week, long term work from home is not an option.