IT Senior Analyst, Network Security (NSPM)

Overview of The Role:

We are seeking a detail-oriented Senior Analyst IT Network Security to lead the deployment configuration and ongoing management of our Network Security Policy Management (NSPM) solution (e.g. Tufin Algosec Firemon). The successful candidate will ensure our network security controls are efficient compliant and aligned with business and regulatory requirements. This role will act as the subject-matter expert (SME) for NSPM and support broader network security operations. Knowledge of microsegmentation solution is a plus (ex: Illumio Guardicore).

How You Will Make Contributions That Matter:

NSPM Deployment & Management including Operations

• Lead the design implementation and optimization of the organizations NSPM platform (Tufin or equivalent). Develop and maintain network security policies rule bases and workflows within the NSPM solution.

• Integrate NSPM with firewalls routers switches and cloud platforms to achieve centralized visibility and control. Expertise in Cisco FTD/FMC and Palo Alto /Panorama is very important.

• Manage daily NSPM operations: policy reviews firewall rule cleanups access requests and rule lifecycle management. Troubleshoot NSPM-related issues and manage vendor performance.

• Liaise with vendors and partners for product upgrades patches and enhancements.

• Ensure all firewall and network security policies align with internal security standards industry best practices and regulatory frameworks (e.g. NIST ISO 27001 etc).

• Conduct periodic policy audits and risk assessments using NSPM reports.

• Provide recommendations for policy optimization segmentation and least-privilege access.

• Collaborate with IT security and compliance teams to integrate NSPM into security operations and change control processes.

Other responsibilities

• Microsegmentation: Design implement and manage microsegmentation policies. Analyze network traffic to identify and mitigate potential security threats. Onboard new applications and servers. Knowledge of Illumio software is a plus.

• Firewall Rule Management: Configure manage and maintain firewall rules to ensure secure and efficient traffic flow. Conduct regular reviews and audits of firewall rules to ensure compliance with security policies. Troubleshoot and resolve issues related to firewall configurations and traffic flow.

• Network Traffic Analysis: Continuously monitor and analyze network patterns and performance and make necessary recommendations & adjustments to ensure secure and efficient data flow. Identify and address anomalies or unusual traffic patterns that could indicate security breaches.

• Network security: Implement and maintain network security measures including firewalls Identity (ISE) web filtering VPNs IPS systems and other security technologies to protect the integrity and confidentiality of network data

• Collaboration: Works with different teams including security OT etc to deliver integrated change where appropriate and to ensure that our network infrastructure is secure and robust end-to-end

• Training and Mentoring: Mentor network team and provide training on best practices and new technologies to ensure a high level of expertise within the team.

• Documentation: Maintain detailed documentation of network configurations changes and procedures and provide regular reports on network performance security incidents and project progress.

You are best suited for the role if you have the following qualifications:

Required

• Bachelors degree in Computer Science Information Security or related field (or equivalent experience).

• 5-8 years of experience in IT network security with hands-on expertise in firewall administration and policy management.

• Practical experience with NSPM solutions (Tufin préférable AlgoSec or FireMon).

• Ability to work with NAC & Web filtering. Strong knowledge of network protocols (TCP/IP DNS VPN BGP OSPF etc.).

• Experience with firewalls from major vendors (Cisco Palo Alto).

• Solid understanding of security frameworks and compliance requirements.

• Experience in managing Firewall Policies : Access control policies NAT policies IPS Policies

• Ability to troubleshoot firewall related issue

• Experience in using packet capture tools

• Knowledge in Firewall and network security best practice

• Expertise in firewall rule base design and optimization.

• Strong analytical troubleshooting and problem-solving abilities.

• Ability to translate business requirements into technical security controls.

• Excellent communication and documentation skills.

• Proactive detail-oriented and capable of working independently as well as in a team.

Preferred

• Hands-on experience with cloud networking and security policies (Azure is a plus).

• Familiarity with scripting and automation (Python Ansible REST APIs).

• Relevant certifications: CCNA CISSP CCNP Security Palo Alto PCNSE Tufin Certified Security Expert (TCSE).

• Experience in a manufacturing environment is a plus

As part of their duties the incumbent will have to communicate and collaborate in English both orally and in writing with colleagues or other stakeholders in Quebec as well as in the rest of Canada or in North America.

We support and care for our employees and their families by providing:

• Competitive salaries

• A hybrid work environment with the possibility to work from home 2 days a week

• Advantageous corporate agreements

• Full range of group insurance benefits

• Group retirement pension plan with employer contribution

• Purchase option of company stocks

• Group RRSPHealth and wellness program in the workplace

• Assistance program for employees and their families

• Saputo products at a discounted price

Salary range: $78170 to $102 600

*Salary offers will vary commensurate with experience education skills and training.

We support employment equity. Saputo strives to embed diversity and inclusion in its operations and invites candidates from all horizons to join its family.

Saputo welcomes and encourages applications from people with disabilities. Accommodations may be available upon request for candidates taking part in all aspects of the selection process.