Network Security Specialist

CMA CGM; Montreal (administrative region); On-site; CAD 85,000 - 120,000; Full time

Job summary

CMA CGM Canada is seeking a Network Security Specialist in Montreal to manage and optimize Network Security solutions. You will handle firewalls, VPNs, load balancers, proxies, and PKI, while collaborating with the Global Cybersecurity Team.

You will contribute to incident response, project work, and ongoing hardening efforts in a fast-paced environment. Requires 3–5 years of related experience and a bachelor's degree in IT/CS/engineering.

Qualifications

• Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.
• At least 3-5 years of related experience.
• Strong knowledge of firewall technologies (FF technologies).
• VPN Technologies (IPsec S2S/Client SSL).
• Load balancers (F5 or Citrix ADC).
• Proxies (open source such as Squid, SOCKS, and FTP proxies; Cloud based – Zscaler ZIA).
• Zero Trust Network Access (ZTNA – ZPA).
• Networking fundamentals: routing and switching.
• DNS administration and PKI basics.
• DDoS protection basics.
• Security tools such as FireMon, AlgoSec, Tuffin, Red Seal.
• Scripting tools such as shell or Python.

Responsibilities

• Configure and maintain firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet).
• Create/modify firewall objects and policies.
• Establish secured external connectivity with VPN technologies.
• Configure and operate Panorama and User-ID agents.
• Configure and maintain load balancers and related services.
• Health checks of load-balanced services and ADC gateways.
• Define rewrites and SSL certificate installations.
• Configure and maintain proxy solutions (Squid, SOCKS, FTP; Zscaler).
• Create security policies and URL/IP whitelisting/blacklisting.
• Maintain internet access policies and troubleshoot proxy issues.
• Operate ZIA and ZPA and produce web usage reports.
• Maintain firmware and perform capacity planning reports.
• Daily health checks, inventory updates, and SOP/diagram creation.
• License renewals and hardware refresh.
• Collaborate with Cybersecurity on incidents; participate in projects.

Skills

Strong work ethic

Excellent interpersonal skills

Team player

Communication skills

Education

Bachelor's degree in IT/CS/Engineering

Tools

Cisco ASA

Palo Alto

Checkpoint

Fortinet

Citrix ADC

Zscaler ZIA

Zscaler ZPA

Squid

Shell/Python scripting

Job description

CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

POSITION SUMMARY

As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.

KEY RESPONSIBILITIES

• Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:
• Creation/Modification of firewall objects and policies.
• Establishing secured external connectivity with VPN technologies.
• Configuration and operation of firewall auxiliaries such as Panorama, User-ID agents, etc.
• Configuration and maintenance of load balancers (Citrix ADC formerly known as Netscaler).
• The tasks include but not limited to:
• Creation/Modification and health checks of load balanced services, monitors, virtual servers, content switching, and ADC gateways.
• Defining rewrites and responders.
• SSL certificate installations and maintenance.
• Configuration and maintenance of proxy solutions (local open source - Squid, SOCKS, FTP proxy; cloud - Zscaler). The tasks include but not limited to:
• Creation/Modification of security policies (firewall and web-content filtering)
• Whitelisting/blacklisting URL and IP addresses.
• Maintenance of user internet access policies and troubleshooting proxy-related internet connectivity issues.
• Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) operations and producing web usage reports.
• PKI / SSL certificates administration.
• Distributed Denial of Service Protection (DDoS) management
• Keeping up to date with information regarding firmware security vulnerabilities and bugs and ensuring firmware of security devices are secured and updated.
• Working side by side with Cybersecurity to help with incidents.
• Involvements in projects outside of daily operations to help with developments on technological solutions.
• Log investigation, debugging, and packet captures.
• Producing capacity planning reports.
• Daily health checks for devices and services.
• Making sure device inventory is updated and within standards.
• Creating documents such as SOP or basic network diagram and ability to suggest improvements in the policies and processes.
• License renewals and hardware refresh or replacements of devices.
• Other responsibilities as required

QUALIFICATIONS

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

Education:

Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.

Knowledge & Experience:

• At least 3-5 years of related experience.
• Strong knowledge and experience on the FF technologies:
• VPN Technologies (IPSEC S2S/Client SSL)
• Load balancers (F5 or Citrix ADC)
• Proxies (open source such as Squid, SOCKS, and FTP proxies; Cloud based proxy solutions – Zscaler ZIA)
• Zero Trust Network Access (ZTNA – Zscaler ZPA)
• Strong foundation on Networking (routing and switching).
• Basic knowledge and experience on DNS administration and PKI.
• Basic knowledge of Distributed Denial of Service (DDoS) Protection
• Preferred but not required:
• Security management tools such as Firemon, AlgoSec, Tuffin, or Red Seal.
• Scripting tools such as shell or Python.

Other:

• Strong work ethic, professional integrity and the ability to apply the appropriate level of judgement and maturity.
• Excellent interpersonal skills, and a strong ability to communicate, team player, and result oriented.