Sr. Network Security Engineer

Job Title: Sr. Network Security Engineer

Job Location: Montreal, QC (3days onsite in a week) Job Duration: Long Term

Job Description:

We are seeking a hands-on Network Security Engineer with 5 10 years of experience to implement and support network security controls across on-premises and cloud environments. This role focuses on day-to-day security operations, policy enforcement, tuning, documentation, and ongoing improvement of network security capabilities.

The ideal candidate will have strong experience with next-generation firewalls, microsegmentation, AWS network security, and automation, and will work closely with Security, Cloud, Infrastructure, and DevOps teams.

Responsibilities:

• Configure and maintain network security controls across on-prem and cloud environments
• Manage NGFW policies, including VPNs, NAT, TLS/SSL inspection, and related features
• Implement and maintain microsegmentation controls using Guardicore Centra
• Support AWS network security, including Security Groups, NACLs, and VPC configurations
• Monitor and tune controls to improve effectiveness and reduce false positives
• Document configurations, changes, runbooks, and network diagrams
• Collaborate with DevOps and Security teams to automate routine tasks using Terraform, CloudFormation, Ansible, or scripting tools
• Support operational and project-based security initiatives.

Requirements:

• 5 10 years of experience in network security engineering or a related role
• Hands-on experience with enterprise next-generation firewall platforms such as Palo Alto, Fortinet, Check Point, or Cisco Firepower
• Experience with firewall policy implementation, VPNs, NAT, and TLS/SSL inspection
• Experience with Guardicore Centra or similar segmentation technologies
• Familiarity with AWS networking security, including VPCs, Security Groups, and NACLs
• Scripting experience in Python, PowerShell, or Bash
• Familiarity with Terraform, CloudFormation, or Ansible
• Strong communication, collaboration, and documentation skills
• Bachelor's degree in a related field or equivalent practical experience.
• Experience with Splunk, Elastic, or CloudWatch
• Familiarity with GuardDuty and Security Hub
• Experience in regulated environments
• Knowledge of CI/CD security and compliance frameworks such as NIST, CIS, HIPAA, or PCI-DSS
• Relevant certifications such as CISSP, CISM, CCNP Security, or AWS Security Specialty