Network Security SME || Montreal, QC || Fulltime FTE

Job Title: Network Security SME

Location: Montreal, QC

Work Arrangement: Onsite

Employment Type: Full-Time FTE

Experience: 12+ Years

Job Summary:

We are seeking an experienced Network Security SME with 12+ years of IT experience and strong expertise in enterprise network security technologies. The ideal candidate will have extensive hands-on experience with Palo Alto and Fortinet FortiGate firewalls, VPN technologies, firewall lifecycle management, network security troubleshooting, NAC, security monitoring, and production support.

Key Responsibilities:

Design, deploy, administer, and support enterprise network security solutions across critical production environments.

Provide hands-on expertise with Palo Alto and Fortinet FortiGate firewalls, including deployment, configuration, administration, upgrades, migrations, and operational support.

Manage the complete Firewall Lifecycle, including new deployments, migrations, technology refreshes, remediation, upgrades, policy optimization, and decommissioning.

Configure, manage, troubleshoot, and remediate VPN technologies, including IPSec VPN, SSL VPN, Site-to-Site VPN, and Remote Access VPN.

Perform advanced firewall and VPN troubleshooting, including traffic analysis, packet capture/validation, connectivity analysis, root cause analysis, and resolution of security incidents.

Analyze network traffic and security events to identify connectivity, performance, and security issues across enterprise environments.

Support NAC (Network Access Control) solutions and integrate network security controls with enterprise authentication and access management platforms.

Work with Network and Security Monitoring and observability platforms to provide network visibility, performance monitoring, proactive issue detection, and troubleshooting.

Integrate and support firewalls with IDS/IPS, Secure Web Gateways, SIEM, Proxy, and Authentication solutions.

Participate in firewall and network security migrations, upgrades, remediation initiatives, and technology refresh projects.

Develop and optimize firewall security policies, rules, NAT configurations, objects, and access controls in accordance with security standards.

Collaborate with network, infrastructure, cloud, SOC, and application teams to resolve complex production security and connectivity issues.

Perform root cause analysis and provide technical recommendations for recurring network security issues.

Support security incidents involving firewalls, VPNs, network traffic, and other network security controls.

Maintain technical documentation, configuration standards, operational procedures, and troubleshooting guides.

Required Technical Skills:

12+ years of IT experience with strong enterprise Network Security expertise.

Strong hands-on experience with Palo Alto Networks firewalls.

Strong hands-on experience with Fortinet FortiGate firewalls.

Extensive experience in Firewall Lifecycle Management.

Strong experience with IPSec, SSL VPN, Site-to-Site VPN, and Remote Access VPN.

Strong knowledge of firewall policy/rule management, NAT, security zones, routing, and access controls.

Advanced experience in firewall and VPN troubleshooting.

Experience with packet capture, traffic analysis, packet validation, and root cause analysis.

Experience with NAC solutions.

Experience with Network/Security Monitoring and Observability platforms.

Experience integrating security infrastructure with IDS/IPS, Secure Web Gateway, SIEM, Proxy, and Authentication solutions.

Strong experience supporting high-availability and business-critical production environments.

Strong analytical, troubleshooting, communication, and stakeholder management skills.

Preferred Skills:

Palo Alto certifications such as PCNSA/PCNSE.

Fortinet certifications such as NSE/FCP/FCX.

Experience with enterprise-scale firewall migration and transformation projects.

Experience working in large banking, financial services, telecom, or other highly regulated environments.