IT Senior Analyst, Network Security (NSPM)

At Saputo we bring good to the table by making high-quality products investing in our people and supporting communities around the world . As a top 10 global dairy processor we value contributions that matter and strive to foster an inclusive growth-driven work environment. Ready to bring your best

Overview of The Role :

We are seeking a detail-oriented Senior Analyst IT Network Security to lead the deployment configuration and ongoing management of our Network Security Policy Management (NSPM) solution (e.g. Tufin Algosec Firemon). The successful candidate will ensure our network security controls are efficient compliant and aligned with business and regulatory requirements. This role will act as the subject-matter expert (SME) for NSPM and support broader network security operations. Knowledge of microsegmentation solution is a plus (ex : Illumio Guardicore).

How You Will Make Contributions That Matter :

NSPM Deployment & Management including Operations

Lead the design implementation and optimization of the organizations NSPM platform (Tufin or equivalent). Develop and maintain network security policies rule bases and workflows within the NSPM solution.

Integrate NSPM with firewalls routers switches and cloud platforms to achieve centralized visibility and control. Expertise in Cisco FTD / FMC and Palo Alto / Panorama is very important.

Manage daily NSPM operations : policy reviews firewall rule cleanups access requests and rule lifecycle management. Troubleshoot NSPM-related issues and manage vendor performance.

Liaise with vendors and partners for product upgrades patches and enhancements.

Ensure all firewall and network security policies align with internal security standards industry best practices and regulatory frameworks (e.g. NIST ISO 27001 etc).

Conduct periodic policy audits and risk assessments using NSPM reports.

Provide recommendations for policy optimization segmentation and least-privilege access.

Collaborate with IT security and compliance teams to integrate NSPM into security operations and change control processes.

Other responsibilities

Microsegmentation : Design implement and manage microsegmentation policies. Analyze network traffic to identify and mitigate potential security threats. Onboard new applications and servers. Knowledge of Illumio software is a plus.

Firewall Rule Management : Configure manage and maintain firewall rules to ensure secure and efficient traffic flow. Conduct regular reviews and audits of firewall rules to ensure compliance with security policies. Troubleshoot and resolve issues related to firewall configurations and traffic flow.

Network Traffic Analysis : Continuously monitor and analyze network patterns and performance and make necessary recommendations & adjustments to ensure secure and efficient data flow. Identify and address anomalies or unusual traffic patterns that could indicate security breaches.

Network security : Implement and maintain network security measures including firewalls Identity (ISE) web filtering VPNs IPS systems and other security technologies to protect the integrity and confidentiality of network data

Collaboration : Works with different teams including security OT etc to deliver integrated change where appropriate and to ensure that our network infrastructure is secure and robust end-to-end

Training and Mentoring : Mentor network team and provide training on best practices and new technologies to ensure a high level of expertise within the team.

Documentation : Maintain detailed documentation of network configurations changes and procedures and provide regular reports on network performance security incidents and project progress.

You are best suited for the role if you have the following qualifications :

Required

Bachelors degree in Computer Science Information Security or related field (or equivalent experience).

5-8 years of experience in IT network security with hands-on expertise in firewall administration and policy management.

Practical experience with NSPM solutions (Tufin préférable AlgoSec or FireMon).

Ability to work with NAC & Web filtering. Strong knowledge of network protocols (TCP / IP DNS VPN BGP OSPF etc.).

Experience with firewalls from major vendors (Cisco Palo Alto).

Solid understanding of security frameworks and compliance requirements.

Experience in managing Firewall Policies : Access control policies NAT policies IPS Policies

Ability to troubleshoot firewall related issue

Experience in using packet capture tools

Knowledge in Firewall and network security best practice

Expertise in firewall rule base design and optimization.

Strong analytical troubleshooting and problem-solving abilities.

Ability to translate business requirements into technical security controls.

Excellent communication and documentation skills.

Proactive detail-oriented and capable of working independently as well as in a team.

Preferred

Hands-on experience with cloud networking and security policies (Azure is a plus).

Familiarity with scripting and automation (Python Ansible REST APIs).

Relevant certifications : CCNA CISSP CCNP Security Palo Alto PCNSE Tufin Certified Security Expert (TCSE).

Experience in a manufacturing environment is a plus

As part of their duties the incumbent will have to communicate and collaborate in English both orally and in writing with colleagues or other stakeholders in Quebec as well as in the rest of Canada or in North America.

We support and care for our employees and their families by providing :

Competitive salaries

A hybrid work environment with the possibility to work from home 2 days a week

Advantageous corporate agreements

Full range of group insurance benefits

Group retirement pension plan with employer contribution

Purchase option of company stocks

Group RRSPHealth and wellness program in the workplace

Assistance program for employees and their families

Saputo products at a discounted price

Salary range : $78170 to $102 600

• Salary offers will vary commensurate with experience education skills and training.

We support employment equity. Saputo strives to embed diversity and inclusion in its operations and invites candidates from all horizons to join its family.

Saputo welcomes and encourages applications from people with disabilities. Accommodations may be available upon request for candidates taking part in all aspects of the selection process.

In Canada Saputo is a leading cheese manufacturer and fluid milk and cream processor with a portfolio of well-loved brands such as Dairyland Armstrong Neilson Alexis de Portneuf and many more. Whether your expertise lies in manufacturing operations supply chain management sales quality assurance or in any other function your role is integral to our success. You will make contributions that matter all while working alongside colleagues who genuinely care about your success and who will roll up their sleeves to help.

The material contained herein is provided for informational purposes only. All open jobs offered by Saputo Inc. and all companies corporations partnerships limited partnerships and other entities controlled by Saputo Inc. (collectively Saputo) on Saputos web site are subject to specific job skill requirements. The job skill requirements qualifications and preferred experience are determined by a Saputo subsidiary office or department and all positions are subject to local prevailing employment laws and restrictions. This would include immigration laws pertaining to work authorization requirements and any other applicable government permissions or compliance. The materials on this site are provided without warranties of any kind either expressed or implied including but not limited to warranties regarding the accuracy or completeness of the information contained on this site or in any referenced links. While Saputo attempts to update this site on a timely basis the information is effective only as of the time and date of posting. Strict confidentiality will be observed at all times. Saputo is an equal opportunity employer. The information on this site is for information purposes only and is not intended to be relied upon with legal consequence.

We support employment equity. Saputo strives to embed diversity and inclusion in its operations and invites candidates from all horizons to join its family. Saputo welcomes and encourages applications from people with disabilities. Accommodations up to the point of undue hardships are available on request for candidates taking part in all aspects of the selection process.

Required Experience :

Senior IC

Key Skills

Intelligence Targeting,Network Support,Solarwinds,Tcp / IP,Cybersecurity,LAN,Computer Networking,Signals Intelligence,TCP,Telephony,Cisco Routers,Dns

Employment Type : Full-Time

Experience : years

Vacancy : 1