Network security engineer Jobs in Toronto, ON

Pay at Intact is about much more than just salary.

• Flexible work arrangements and a hybrid work model

• Possibility to purchase up to 5 extra days off per year

• Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more

• Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)

Salary range (but not limited to):

109,900 - 134,300

Annual bonus target, based on the base salary, with a potential payout of up to double the target (subject to personal and company performance):

15%

As part of our commitment to Win As A Team, we share our success with employees through our annual bonus plan and Employee Share Purchase Plan (ESPP) – with Intact matching 50% of your net shares.

Our pension offerings provide flexibility and long-term security for our employees beyond their careers. We are one of the few companies offering the opportunity to receive guaranteed income for life via our defined benefit pension plan.

Salary for the candidate will be determined taking into consideration a number of factors including: experience, skills, qualifications, anticipated contribution to role, internal equity, etc. The salary range presented above is based on a 35-hour workweek and would represent a majority of different candidate profiles. However, we encourage candidates who may fall outside of this range to apply as well.

About the role

The Network team is responsible for the evolution, support, and governance of our global network infrastructure. The criticality of our network and the accelerating growth of our systems lead to complex challenges. Through innovation and agility, the team ensures our infrastructure and services stay at the forefront of the company’s needs.

As a Network Specialist with strong hands-on experience across Cisco infrastructure, ACI, wireless, identity services, DDI, cloud networking, and application delivery/load balancing, you will drive the advancement, performance, and stability of our enterprise network and application connectivity. You will focus on scalable design, automation, and operational excellence across campus, data center, and cloud environments.

What you'll do here:

• Provide high-level technical expertise to support network operations across LAN, WAN, data center, campus, and cloud environments.

• Design, implement, and support Cisco enterprise routing (BGP, EIGRP) and switching, including Cisco Catalyst and 9k series platforms.

• Architect, deploy, and operate Cisco ACI (single site and multisite), including Nexus Dashboard and Nexus Dashboard Orchestrator.

• Lead enterprise wireless design and operations leveraging Cisco APs and 9300 series wireless controllers; optimize coverage, capacity, and performance.

• Operate and enhance Cisco Catalyst Center for network assurance, automation, and lifecycle management.

• Implement and administer Cisco Identity Services Engine (ISE) for TACACS+, RADIUS, and 802.1X network access control across wired and wireless.

• Manage Infoblox DDI services (DNS, DHCP, IPAM) and integrate with network provisioning workflows.

• Provide guidance and best practices for networking in major cloud platforms (GCP, AWS, Azure), including hybrid connectivity, routing, and segmentation.

• Design, implement, and optimize application delivery and load balancing solutions using NetScaler ADC or F5 BIG-IP (or similar), ensuring high availability, performance, resiliency, and security for web and application services.

• Configure L4/L7 policies: content switching, persistence, health checks, SSL/TLS offload, certificate lifecycle, ciphers, and security hardening.

• Implement and tune advanced features such as GSLB, HA, responder/rewrite policies, caching, compression, and rate limiting; integrate with authentication and SSO (LDAP/AD, SAML, OAuth).

• Monitor and troubleshoot performance using platform analytics (e.g., AppFlow/HDX Insight), logs, and external APM/NPM tools; drive root cause analysis for incidents.

• Develop and maintain network and application delivery automation using Python and Ansible; leverage REST APIs/CLI, version-controlled templates, and CI/CD pipelines for repeatable deployments.

• Ensure engineering patterns meet SLA/availability, performance, and resiliency requirements; contribute to capacity planning and lifecycle refresh.

• Write and review change requests and methods of procedure (MoPs); conduct impact analysis, staged testing, and post-implementation verification.

• Produce and maintain documentation (network and ADC diagrams, standards, inventories, runbooks) and leverage monitoring/resource management tools.

• Collaborate with application, security, and cross-functional teams to plan changes, enforce standards, and execute releases with low risk.

• Participate in an on-call rotation to ensure 24x7x365 coverage for critical infrastructure; overtime may be required during emergencies.

What you bring to the table:

• Degree or Diploma in Networking or Technology.

• 10+ year experience in IP-based environments; exposure to mission-critical enterprise networks.

• Hands-on experience with Cisco routing and switching (BGP, EIGRP), Cisco Catalyst and 9k series switches.

• Experience with Cisco ACI (single site and/or multisite), Nexus Dashboard, and Nexus Dashboard Orchestrator.

• Experience with enterprise wireless (Cisco APs, 9300 series controllers), RF design principles, and performance optimization.

• Familiarity with Cisco Catalyst Center for assurance, automation, and configuration management.

• Practical experience with Cisco ISE (TACACS+, RADIUS, 802.1X) and NAC policy deployment.

• Experience with Infoblox DDI (DNS, DHCP, IPAM) administration.

• Working knowledge of cloud networking (GCP, AWS, Azure): VPC/VNet design, routing, hybrid connectivity (VPN/Direct Connect/ExpressRoute), and segmentation.

• Strong expertise in L4–L7 load balancing and application delivery with NetScaler ADC (MPX/VPX/CPX) or F5 BIG-IP (LTM/GTM/ASM), including SSL/TLS, WAF features, and traffic steering.

• In-depth understanding of TCP/IP, HTTP/HTTPS, DNS, TLS, and related network services.

• Coding and network automation experience (Python, Ansible) for templating, compliance, orchestration, and configuration deployments.

• Relevant certifications are an asset (e.g., CCNP, CCIE, Citrix CCE–App Delivery, F5 CA/CTS, ACI/Wireless Specialist).

• Experience with automation frameworks and CI/CD for network and ADC changes is an asset.

• For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English speaking colleagues across the country.

• No Canadian work experience required however must be eligible to work in Canada

#LI-Hybrid

Il s'agit d'un nouveau rôle au sein de notre équipe en plein croissance | This role is a new member of our growing team.