Network Security Specialist

CMA CGM; Montreal (administrative region); On-site; CAD 85,000 - 120,000; Full time

Benefits offered by this job

20 days paid time off

Tuition reimbursement

Professional development

International mobility

RRSP program

Full benefits plan

Job summary

CMA CGM Canada is seeking a Network Security Specialist in Montreal to join the GLOBAL CYBERSECURITY Team. You will own and operate network security solutions and implement industry best practices.

You will configure firewalls, VPNs, proxies, and load balancers; manage PKI/DDoS protections; collaborate with Cybersecurity on incidents; participate in projects to advance secure networking solutions. Fluency in English and French is preferred, and legal work authorization in Canada is required.

Qualifications

• Bachelor's degree in IT, CS, CE, or related field.
• 3–5 years of related experience.
• Strong knowledge of firewall and network security technologies including VPNs, load balancers, proxies and ZTNA.
• Fluent in English and French; ability to communicate across teams.
• Authorized to work in Canada (citizen, permanent resident or work permit).

Responsibilities

• Configure and maintain firewall platforms and policies.
• Establish secure external connectivity with VPN technologies.
• Manage load balancers and proxy solutions (including Zscaler).
• Operate DNS, PKI, and DDoS protection measures.
• Collaborate with Cybersecurity on incidents and projects.
• Produce capacity planning reports and maintain device inventories.

Skills

VPN Technologies

Load balancers

Proxies

ZTNA

Networking basics

DNS administration

PKI

Education

Bachelor's degree in IT, Computer Science, Computer Engineering, or related field

Tools

FireMon

AlgoSec

Tuffin

Red Seal

Job description

CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

POSITION SUMMARY

As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.

KEY RESPONSIBILITIES

• Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:
• Creation/Modification of firewall objects and policies.
• Establishing secured external connectivity with VPN technologies.
• Configuration and operation of firewall auxiliaries such as Panorama, User-ID agents, etc.
• Configuration and maintenance of load balancers (Citrix ADC formerly known as Netscaler).
• The tasks include but not limited to:
• Creation/Modification and health checks of load balanced services, monitors, virtual servers, content switching, and ADC gateways.
• Defining rewrites and responders.
• SSL certificate installations and maintenance.
• Configuration and maintenance of proxy solutions (local open source - Squid, SOCKS, FTP proxy; cloud - Zscaler). The tasks include but not limited to:
• Creation/Modification of security policies (firewall and web-content filtering)
• Whitelisting/blacklisting URL and IP addresses.
• Maintenance of user internet access policies and troubleshooting proxy-related internet connectivity issues.
• Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) operations and producing web usage reports.
• PKI / SSL certificates administration.
• Distributed Denial of Service Protection (DDoS) management
• Keeping up to date with information regarding firmware security vulnerabilities and bugs and ensuring firmware of security devices are secured and updated.
• Working side by side with Cybersecurity to help with incidents.
• Involvements in projects outside of daily operations to help with developments on technological solutions.
• Log investigation, debugging, and packet captures.
• Producing capacity planning reports.
• Daily health checks for devices and services.
• Making sure device inventory is updated and within standards.
• Creating documents such as SOP or basic network diagram and ability to suggest improvements in the policies and processes.
• License renewals and hardware refresh or replacements of devices.
• Other responsibilities as required

QUALIFICATIONS

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

Education:

Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.

Knowledge & Experience:

• At least 3-5 years of related experience.
• Strong knowledge and experience on the FF technologies:
• VPN Technologies (IPSEC S2S/Client SSL)
• Load balancers (F5 or Citrix ADC)
• Proxies (open source such as Squid, SOCKS, and FTP proxies; Cloud based proxy solutions – Zscaler ZIA)
• Zero Trust Network Access (ZTNA – Zscaler ZPA)
• Strong foundation on Networking (routing and switching).
• Basic knowledge and experience on DNS administration and PKI.
• Basic knowledge of Distributed Denial of Service (DDoS) Protection
• Preferred but not required:
• Security management tools such as Firemon, AlgoSec, Tuffin, or Red Seal.
• Scripting tools such as shell or Python.

Other:

• Strong work ethic, professional integrity and the ability to apply the appropriate level of judgement and maturity.
• Excellent interpersonal skills, and a strong ability to communicate, team player, and result oriented.
• Willing to work on shifting schedule.

We are an equal opportunity employer.

We offer:

Job description:

CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

POSITION SUMMARY

As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.

KEY RESPONSIBILITIES

• Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:

• • Creation/Modification of firewall objects and policies.
  • Establishing secured external connectivity with VPN technologies.
  • Configuration and operation of firewall auxiliaries such as Panorama, User-ID agents, etc.

• Configuration and maintenance of load balancers (Citrix ADC formerly known as Netscaler).
• The tasks include but not limited to:

• • Creation/Modification and health checks of load balanced services, monitors, virtual servers, content switching, and ADC gateways.
  • Defining rewrites and responders.
  • SSL certificate installations and maintenance.

• Configuration and maintenance of proxy solutions (local open source - Squid, SOCKS, FTP proxy; cloud - Zscaler). The tasks include but not limited to:

• • Creation/Modification of security policies (firewall and web-content filtering)
  • Whitelisting/blacklisting URL and IP addresses.
  • Maintenance of user internet access policies and troubleshooting proxy-related internet connectivity issues.
  • Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) operations and producing web usage reports.

• DNS management (zones, records, GeoDNS, etc.)
• PKI / SSL certificates administration.
• Distributed Denial of Service Protection (DDoS) management
• Keeping up to date with information regarding firmware security vulnerabilities and bugs and ensuring firmware of security devices are secured and updated.
• Working side by side with Cybersecurity to help with incidents.
• Involvements in projects outside of daily operations to help with developments on technological solutions.
• Log investigation, debugging, and packet captures.
• Producing capacity planning reports.
• Daily health checks for devices and services.
• Making sure device inventory is updated and within standards.
• Creating documents such as SOP or basic network diagram and ability to suggest improvements in the policies and processes.
• License renewals and hardware refresh or replacements of devices.
• Other responsibilities as required

QUALIFICATIONS

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

Education:

Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.

Knowledge & Experience:

• At least 3-5 years of related experience.
• Strong knowledge and experience on the FF technologies:

• • Firewalls (Cisco ASA, Palo Alto, Checkpoint)
  • VPN Technologies (IPSEC S2S/Client SSL)
  • Load balancers (F5 or Citrix ADC)
  • Proxies (open source such as Squid, SOCKS, and FTP proxies; Cloud based proxy solutions – Zscaler ZIA)
  • Zero Trust Network Access (ZTNA – Zscaler ZPA)

• Strong foundation on Networking (routing and switching).
• Basic knowledge and experience on DNS administration and PKI.
• Basic knowledge of Distributed Denial of Service (DDoS) Protection
• Preferred but not required:

• • Security management tools such as Firemon, AlgoSec, Tuffin, or Red Seal.
  • Linux administration.
  • Scripting tools such as shell or Python.
  • Relevant certifications (CCNP Sec, PCNSE, etc.)
  • Knowledge in NAC appliances (Cisco ISE)

Other:

• Strong work ethic, professional integrity and the ability to apply the appropriate level of judgement and maturity.
• Excellent interpersonal skills, and a strong ability to communicate, team player, and result oriented.
• Willing to work on shifting schedule.
• Fluent in English & French.

We are an equal opportunity employer.

We offer:

Some of the great advantages we offer:

• A culture based on respect and focus on Better Ways for the employees
• 20 days of paid time off
• Tuition reimbursement
• Professional development opportunities
• International mobility
• RRSP plan - Max contribution of 12% and the company matches at 50%
• A competitive benefits plan -fully paid by the company. This includes:
  • Extended Health (for employee, spouse & children)
  • Dental (for employee, spouse & children)
  • Long Term Disability
  • AD&D
  • Critical Illness (for employee, spouse & children)
  • Life Insurance
  • Employee & Family assistance program
  • Health and Wellness site and Program