Sr Network Security Engineer

• Hiring Manager Name:   Jason Nickel, DG2458
• Hiring Manager Location:   Winnipeg, MB
• Location city(s): Toronto, London, Winnipeg
• Role Title:   Sr Network Security Engineer (8yr +), CL 18
• Work Allocation: 100%
• Work Style: Hybrid – 3 days/week in office
• Number of Openings: 1
• Anticipated Start Date: 4 weeks from the official offer day
• End Date: 16 months from the start date
• Part-time or Full-time: full-time
• Potential convert to permanent : No
• Reason for role: (staff aug/replace vacancy): Staff Aug
• Contractor to work extra time or on-call:  No
• Enhanced Reliability Status: Required

Experience & Skills:

• Minimum of 10 years experience designing and implementing enterprise-grade network security solutions
• Strong network security background.
• Experience with Palo Alto NGFW, Cloudflare (DNS, WAF etc).
• Experience with Terraform/Ansible automation.
• Broad knowledge and best practices for infrastructure and security technologies including but not limited to workstations, servers, network, endpoint protection, and secure web gateway
• Attention to detail, effective planning, solid analytical and problem-solving skills, self-organized and a demonstrated self-starter with the ability to influence others with a strong focus on customer service
• Leadership, communication, negotiation, and interpersonal skills with demonstrated experience working in a team environment
• Demonstrated desire to continuous learning, implementing change and contributing to the organization and with a proven history of making appropriate decisions and recommendations

The following will set you apart:

• Experience with enterprise-grade NGFW engineering and implementation.  Experience with CheckPoint and Palo Alto preferred.
• Expert level technical knowledge in the areas of network segmentation, network routing, DNS and DHCP.
• Understanding of Secure Access Service Edge (SASE), Zero Trust and Defense in Depth engineering and architecture.
• Strong ability to read and interpret packet captures for troubleshooting and security forensics.
• In-depth understanding of Web Application Firewalls (WAF), Intrusion Prevention Systems (IPS), SSL inspection and DDoS and Bot mitigation.
• Experience with Gitlab, CI/CD pipelines, secure coding, security of SSDLC through Shift Left principles.
• Experience in systems and service automation and development using Python, Terraform, PowerShell, Ansible etc. and management of Infrastructure as Code (IaC) or Policy as Code (PaC).
• Understanding of enterprise IT security risk assessments and related frameworks (e.g., SOC2, ISO, NIST CSF, NIST 800-XX) and industry best practices

Certifications/Education:

• A degree or equivalent education in a related discipline such as Computer Science, Business Computing, Engineering, or Commerce
• Microsoft Certified: Identity and Access Administrator Associate certification is an asset.
• Information security certifications such as CISSP, SANS or equivalent is an asset.

Role Description:

The Network Security team resides within the Infrastructure and Operations department and works closely with Information Security and Application Technology teams to design and help deploy a broad scope of network security services.

Our security services defend our global enterprise, including business units, customers and shareholders from external and internal security threats.

Our team consists of highly motivated, innovative, and tech-savvy engineers that design and mature security technologies using agile delivery methods and automation.

What you will do

The Senior Network Security Engineer is responsible for engineering new network security technologies and developing maturity and replacement roadmaps for existing security technologies.  A successful candidate will require a mindset focused on business value and continuous service improvement. 

The following describes the key expectations and responsibilities for this role:

General:

· Demonstrate solid security fundamentals while working hands-on with security technologies

· Complete deliverables and deliver high quality solutions in an efficient & effective manner

· Proactively identify and assess security risks to help promote a risk aware culture

· Design solutions that are “fit for purpose” (security function) and “fit for use” (enterprise grade)

· Ensure designs support solution architecture and are endorsed by technology vendor(s)

· Provide input to network security technology roadmaps that set the vision for security services / controls

· Continuous research and evaluation of new technologies

· Evaluate solution components and participate in appropriate functional and non-functional testing

· Work with internal and external stakeholder teams to implement / validate solution integration

· Provide technical consulting on capabilities and limitations of the security technologies

· Actively set personal smart goals and understands how their performance impacts the team

· Participate in meetings and training with a willingness to share knowledge and learn from others

· Demonstrate commitment to respectful workplace and workplace diversity initiatives

· Foster the department’s culture with a focus on teamwork and stewardship with business units

· Support continual improvements of IS methods, tools and techniques