Senior Security Engineer

Mozaik Ict; Waterloo; On-site; CAD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company as a Senior Security Engineer, where you will play a crucial role in enhancing cybersecurity measures. This position offers a balanced mix of operational and project-based tasks, allowing you to engage in complex cybersecurity implementations and continuous improvement initiatives. You will manage firewall lifecycles, optimize security configurations, and lead projects that strengthen the organization's security posture. With access to the Mozaïk Academy, you'll have the opportunity to enhance your skills and stay ahead in the ever-evolving field of cybersecurity. If you're passionate about security and eager to make a difference, this role is perfect for you.

Benefits

Access to Mozaïk Academy

Networking Opportunities

Skill Development Programs

Flexible Work Options

Qualifications

• In-depth knowledge of firewall management, especially Palo Alto and AlgoSec.
• Strong skills in network segmentation and access control using Cisco ISE.

Responsibilities

• Oversee lifecycle management of firewalls and optimize firewall rules.
• Create low-level designs and implement solutions based on high-level designs.

Skills

Technical Leadership

Firewall Expertise (Palo Alto, AlgoSec)

Network Security (Cisco ISE)

Risk Assessment

Continuous Improvement

Advanced Scripting and Automation

Cloud-based Security Solutions

Zero Trust Architecture

Threat Hunting and Incident Response

AI-driven Security Analytics

Tools

Palo Alto Firewalls

AlgoSec

Cisco ISE

Infoblox

Job description

For one of our clients, we are currently looking for a Senior Security Engineer for a long-term mission.

This role is divided equally between operational and project-based tasks. Responsibilities include assisting with complex cybersecurity implementations, continuous improvement initiatives, and advancing the organization's cybersecurity posture. Project work may involve the lifecycle management of firewalls, security service edge (SSE) implementation, and various other improvement projects.

Technical Activities

1. Firewall Management (Palo Alto)
   - Oversee the lifecycle of Palo Alto firewalls and manage the installation of new firewalls.
   - Develop and configure firewall rules, supporting deployment from a network security perspective.
2. Network Segmentation and Access Control
   - Manage wireless and wired NAC configurations and establish secure network zones.
   - Implement network access control through Cisco ISE, including profiling and TrustSec integration.
3. Firewall Rule Optimization (AlgoSec)
   - Use AlgoSec for firewall analysis, focusing on identifying risky, unused, or duplicate rules.
   - Implement security matrices and conduct risk assessments to optimize firewall policies.
4. IP and DHCP Management (Infoblox)
   - Fine-tune existing Infoblox implementations for DHCP and IP management.
   - Maintain the system to enhance its reliability and security.

Other Responsibilities

1. Project Management
   - Create low-level designs (LLD) and implement solutions based on high-level designs (HDL) provided by network architects.
2. Documentation and SOPs
   - Develop and maintain Standard Operating Procedures (SOPs) to standardize operations and improve security practices.

Skills and Competencies

1. Technical Leadership: Drive new initiatives, support the team in areas where they lack expertise, and provide guidance on complex security configurations.
2. Firewall Expertise: In-depth knowledge of Palo Alto and AlgoSec for firewall rule management, analysis, and optimization.
3. Network Security: Strong skills in NAC, network segmentation, and access control using Cisco ISE.
4. Risk Assessment: Ability to conduct risk assessments and implement improvements in security configurations and protocols.
5. Continuous Improvement: Foster a culture of continuous improvement, identifying and implementing technological and procedural enhancements.

Growth and Skill Enhancement Opportunities

Technical Skills

1. Advanced scripting and automation for firewall and NAC management.
2. Enhanced proficiency in cloud-based security solutions.
3. Expertise in Zero Trust architecture.
4. Knowledge of threat hunting and incident response tools.
5. Familiarity with AI-driven security analytics.

Soft Skills

1. Leadership and mentorship for junior engineers.
2. Improved cross-departmental communication.
3. Strategic planning and decision-making.
4. Adaptability to evolving cybersecurity threats.
5. Strong documentation and procedural writing skills.

Why join Mozaïk ICT?

Whether you are a freelancer or an employee, in addition to having access to our network of experts, you have permanent access to the Mozaïk Academy.

The Mozaïk Academy is a platform available 24/7 that allows you to acquire new skills and stay up-to-date. It’s also an opportunity to integrate AI into your daily life thanks to our exclusive partnerships. Want to learn more?