Senior Security Engineer (Palo Alto)

goeasy Ltd.; Mississauga; Hybrid; CAD 133,000 - 150,000; Full time

Benefits offered by this job

RRSP matching and Employee Share Plan

On-site gym at head office

Volunteer days

Tuition Assistance Program

Job summary

goeasy Ltd. in Mississauga is seeking a Senior Security Engineer to lead hands-on security across on-prem, cloud, and hybrid environments.

You will own Palo Alto firewall operations, Cloudflare WAF, and Netskope SSE, while guiding certificate and key management and incident prevention. The role requires 5+ years in security engineering, a degree in IT/Cybersecurity, and strong collaboration with cross-functional teams.

Qualifications

• Five or more years of hands-on experience in network security engineering.
• Experience with NGFW architecture and security platforms across on-prem, cloud, and hybrid.
• Strong collaboration and stakeholder management skills.
• Knowledge of Canadian privacy requirements and related standards is a plus.
• Exposure to cloud platforms (Azure, AWS) is an asset.

Responsibilities

• Lead deployment, configuration, and administration of Palo Alto firewalls across environments.
• Lead Cloudflare WAF deployment, rule sets, DDoS protection, and SSL/TLS encryption.
• Lead Netskope SSE data protection and threat management implementations.
• Own certificate, secrets, and key management platforms; support web app security initiatives.
• Maintain technical documentation for troubleshooting and training.
• Lead security projects from planning to delivery and provide guidance to security staff.
• Communicate technical recommendations clearly to engineers and stakeholders.
• Partner with IT, legal, HR, and other teams to deliver security outcomes.
• Coach developers and engineers to strengthen capability and execution.
• Ensure controls supporting Bill 198, SOC 2, and PCI DSS are implemented.
• Improve security processes to detect and remediate security events.
• Manage vendor relationships and support evaluations/negotiations.

Skills

Palo Alto NGFW

Cloudflare WAF

Netskope SSE

Unix/Linux

Security architecture

Vulnerability management

Stakeholder communication

Education

Bachelor's degree in IT/Cybersecurity

Postgraduate degree asset

Tools

Veracode

Tenable

Azure/AWS

Job description

Join one of Canada’s fastest-growing companies and be part of something extraordinary – welcome to goeasy! At goeasy, our people and culture are at the heart of everything we do, and we’re proud to be recognized for it. We’ve earned prestigious accolades such as Waterstone Canada’s Most Admired Corporate Cultures, Canada’s Top Growing Companies, and the TSX30, highlighting us as one ofthe top performers on the TSX. We’re also honoured to be named a Greater Toronto Top Employer and recognized by Great Place to Work® as having the Best Workplaces for Women & Most Trusted Executive Teams, and included on TIME Magazine’s 2025 list of Canada’s Best Companies. These honours reflect our commitment to fostering an inclusive, high-performance culture where talent thrives and innovation drives us forward.

As one of Canada’s leading alternative consumer lenders, we’re passionate about helping everyday Canadians create a brighter future. Our vision is to provide a path to a better tomorrow, today. We offer a full range of products, including non-prime leasing, unsecured and secured loans, and point-of-sale financing through easyhome, easyfinancial, and LendCare.

If you're seeking an exciting, high-growth environment where your contributions truly matter, we want to hear from you! Join us, and together, let's create a future of financial empowerment.

The Senior Security Engineer is a hands-on technical role responsible for implementing, operating, and improving security platforms across on-premises, cloud, and hybrid environments. The role leads engineering and day-to-day management of Palo Alto Networks firewalls, Cloudflare WAF, and Netskope SSE, alongside certificate, secrets, and key management platforms. Working closely with infrastructure, application, and business teams, the Senior Security Engineer delivers security projects, strengthens threat protection, and owns assigned compliance controls. The role combines independent technical judgement with practical execution, clear stakeholder communication, and coaching to strengthen security capabilities and reduce risk.

What will you be doing?

• Lead Palo Alto Networks firewall deployment, configuration, and administration across on-premises, cloud, and hybrid environments, applying deep expertise in NGFW architecture, App-ID, User-ID, Content-ID, and Wild-Fire.
• Lead deployment, configuration, and management of Cloudflare WAF, including rule sets and customization, DDoS protection, bot management, and SSL/TLS encryption.
• Lead configuration, management, and optimization of Netskope solutions for data protection and threat management, applying deep knowledge of security service edge (SSE) architecture and deployment models.
• Own day-to-day operations of certificate, secrets, and key management platforms. Support web application security initiatives.
• Maintain technical documentation for troubleshooting, operational support, and training.
• Lead security projects from planning through delivery and provide technical guidance to security practitioners.
• Communicate technical recommendations clearly to engineering and business stakeholders.
• Partner with IT infrastructure, application delivery, support, legal, HR, and other stakeholders to deliver security outcomes.
• Coach developers, engineers, and security staff to strengthen technical capability and execution.
• Own assigned controls supporting Bill 198, SOC 2, and PCI DSS compliance within the role’s scope.
• Improve security processes and technologies to detect, deter, investigate, and remediate security events.
• Manage technical vendor relationships and support commercial evaluations and negotiations.

What experience do you have?

• Five or more years of hands-on experience in network security engineering, with a strong understanding of security architecture across on-premises, cloud, and hybrid environments.
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Hands‑on experience with Palo Alto Networks NGFW, Cloudflare WAF and security services, and Netskope SSE, with exposure to cloud environments such as Microsoft Azure and AWS considered an asset.
• Experience across broader cybersecurity areas such as vulnerability management, incident response, web application security, and security architecture; experience with Veracode and Tenable is an asset.
• Strong technical judgement and problem‑solving skills, with the ability to work independently and manage competing priorities in a fast‑paced environment.
• Strong collaboration, stakeholder management, and communication skills, with sound judgement when handling sensitive and confidential information.
• Knowledge of Canadian privacy requirements; familiarity with UK GDPR and California privacy requirements is considered an asset.
• Experience with UNIX, BSD, or Linux, as well as coaching or mentoring others, is considered an asset.
• A postgraduate degree in Information Technology, Cybersecurity, or a related field is considered an asset.

We offer a Flexible Work Program that provides you the ability to work three days onsite per week, from our Mississauga office.

Internal Applicants: please apply through thelinkand provide written endorsement from your current manager.

$132,500.00 – $149,500.00 CAD (includes base salary and bonus)

We’recommitted to attracting and rewarding top talent. Our compensation ranges are thoughtfully designed to reflect market competitiveness, internal equity, and the experience andimpacteach candidate brings to the role.

Atgoeasy, we believe transparency fosters trust — and that rewarding performance with fair, competitive pay and meaningful growth opportunities is key to our success.

Should your total compensation expectations fall above the posted range, we still encourage you to apply. If selected for an interview, you’ll have the opportunity to discuss this with our recruitment team, as there may be flexibility based on your background and overall fit.

Total compensation includes base salary and bonus.

This posting is for an existing vacancy within our team.

Why should you work for goeasy?

In keeping with our mission to create better tomorrows for our employees, each year goeasy commits to continuously enhancing its total rewards. Here are some of the perks we offer:

Financial Benefits:

• RRSP matching and Employee Share Purchase Plan programs.
• Annual bonus that rewards your hard work and dedication.
• Employee discounts on furniture, electronics, and appliances.
• MAT & PAT leave top-up.
• Expand your financial knowledge through engaging Financial Literacy Learning opportunities.

Health and Lifestyle:

• Enjoy company-paid volunteer days to give back to the community.
• Access 24/7 healthcare with Virtual Doctor Appointments.
• Personalize your benefits with a flexible modular benefits package.
• Stay fit and energized with exclusive access to our on-site private gym at our head office.

Employee Perks:

• Fuel your growth with the Tuition Assistance Program.
• Double the impact of your generosity with Company Matched Charitable Donations.
• Internal development training programs and platforms including job‑specific training, career coaching, leadership excellence, mentorship, and many others.
• Enjoy a state‑of‑the‑art office space with perks like a games room, a healthy snack program, a fitness studio, free gated parking, and more!

Diversity, Inclusion, and Equal Opportunity Employment:

At goeasy, we believe that we can only be the best when people are able to bring their best selves to work every day. goeasy is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. As an equal opportunity employer, we are committed to providing accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process. Please let the talent acquisition team know if you require an accommodation during any aspect of the recruitment process and we will work with you to address your needs.

Additional Information:

All candidates considered for hire must successfully pass a criminal background check, credit check, and validation of their work experience to qualify for hire.

We thank all interested applicants; however, we will only be contacting those for interview who possess the skills and qualifications outlined above.