Senior Network Security Engineer

Haventree Bank is a private Canadian Schedule 1 bank specializing in alternative mortgage programs and insured GIC deposits. We help hardworking Canadians from coast-to-coast achieve homeownership by offering flexible mortgage solutions. Our insured GIC deposits offer competitive rates and are available through a variety of wealth management platforms.

About Haventree Bank Headquartered in Toronto, Ontario, Haventree Bank (Haventree) is a mission driven alternative mortgage lender. The name Haventree is representative of the bank’s mission to help its customers find a place of refuge and to lay down new roots for the future. Haventree exists to be a catalyst of financial security and upward mobility for Canadians who are underserved by the traditional financial system.

Position Summary Reporting to the IT Technical Manager, the Senior Network Security Engineer works with internal IT, Managed Network Provider and MSSP, to promote secure practices and improve network resiliency. This position manages all technology and security related domains, resources and workflows related to WAN, LAN, Cloud, Firewalls, Routing and Switching. The position is responsible for technical and managerial guidance related to all core technology needs corporately as well as timely patch management and vulnerability remediation, investigating and defending against cybercrime incidents.

Major Duties & Responsibilities

Responsible for operational management of platforms such as Fortinet, Dell, Microsoft Azure and 365, AWS, and associated supporting services.

Design and configure network and security components in a cloud and on-prem environments.

Proactively ensure the highest levels of systems and infrastructure, confidentiality, integrity, and availability.

Maintain network uptime, security, and redundancy strategies.

Create and maintain up-to-date diagrams, as they are related to HTB network and system configurations.

Design, configure, and optimize cloud networking components across Azure Virtual Networks, AWS VPCs, hybrid connectivity (VPN, ExpressRoute, Direct Connect), and on-premises network infrastructures.

Architect and implement secure cloud network topologies, including subnets, routing tables, NSGs/ASGs, NACLs, firewalls, load balancers, and private endpoints.

Manage and maintain hybrid cloud connectivity, ensuring resilient IPsec VPN tunnels, SDWAN configurations, and secure site-to-site integrations.

Create and update network uptime reports, cloud monitoring dashboards (Azure Monitor, AWS CloudWatch), and operational analytics.

Analyze cloud and on-prem network architectures to identify weaknesses in infrastructure security.

Make recommendations to improve process efficiency and effectiveness; uphold architectural design standards and configurations to ensure consistency, maintainability, and flexibility with respect to overall system, technical and product roadmaps.

Develop and promote operational interaction within the Network & Security Managed Providers.

Analyze and create security procedures to determine weaknesses in infrastructure security.

Monitor & manage security systems and equipment servicing and/or maintenance in conjunction with other departments, as appropriate.

Collaborate with multiple teams to better protect and serve our clients and partners.

Sets an example for team members of commitment, network and security knowledge, work ethics and habits, as well as personal character.

Qualifications & Experience Degrees, Diplomas & Certifications

The position requires a bachelor’s degree in Information Technology related discipline, or equivalent experience.

Professional certifications or demonstrated experience.

CCNP, NSE4 and above, CCSP.

NSE 5 and above, AWS, Azure is an asset.

Years and Range of Experience Required to Perform the Job

The position requires at least 7 years’ experience working in an IT network security.

Familiar with commonly used information security frameworks such as CIS and NIST.

The position encounters multi faceted problems that require analysis and the modification of procedures.

Analyzes and creates security procedures to determine weakness in infrastructure security.

Makes recommendations to improve process efficiency and effectiveness.

The position focuses on developing and communicating best practice solutions based on sound knowledge of customer operations.

Internal Contacts: This position is required to work with all departments within Haventree. Example: Monitors & manages security systems and equipment servicing and/or maintenance in conjunction with other departments, as appropriate.

External Contacts: This position is required to work with third party vendors. Example: Develops and promotes operational interaction within the Network & Security Managed Providers.

Examples of work: Creates and updates network uptime reports, dashboards. Little or no physical effort is required. The position may be required to work afterhours as needed. 24/7 on call availability for escalation.

Additional Information While we thank everyone for their interest in Haventree Bank, please note that only candidates selected for an interview will be contacted. Haventree Bank is committed to providing accommodation when needed. If you require an accommodation, we will work with you to meet your needs.

As a job candidate, our recruitment process includes collecting personal information. Please click the link here to review our Privacy Policy. Privacy Statement | Haventree Bank

Stay in touch with us, if this position is not the right one for you – please click on this link for other roles at Careers | Haventree Bank or follow us on LinkedIn at www.linkedin.com/company/haventree-bank/

Haventree Bank embraces equal opportunity, diversity, and inclusion. Please let us know if you require any accommodations during the recruitment and selection process by contacting accessibility@haventreebank.com

#J-18808-Ljbffr