Job Description

Job Description

Job Description

Network Security Engineer (SASE)
On site 4 days a week in downtown Toronto

Summary
Own the design, rollout, and day-2 operations of secure internet and application access for a large, hybrid workforce. You’ll engineer and operationalize SASE controls (ZTNA, SWG, CASB), drive zero-trust adoption, and automate policy, logging, and change workflows across cloud and on-prem environments.
What you’ll do

• Design & implement SASE : Plan, deploy, and operate ZTNA, SWG, and CASB (e.g., Netskope or Zscaler) with strong identity integration (SAML/SSO), TLS inspection, policy baselines, and exception handling.
• Operationalize at scale : Lead phased endpoint rollout (Windows/macOS/ChromeOS), tune access policies per business unit/SaaS app, and build clean handoffs to support teams.
• Automate and integrate : Use vendor APIs/automation to manage URL categories, policies, and change workflows; integrate SASE logs with SIEM/SOAR and build actionable dashboards/playbooks.
• Firewall policy orchestration : Streamline change management (e.g., via AlgoSec) across multi-vendor firewalls (Palo Alto, Juniper, Check Point); enforce least-privilege and measurable SLAs.
• Troubleshoot deeply : Triage complex issues end-to-end (endpoint, proxy, network), analyze packet captures (Wireshark), and collaborate with vendors and internal teams to resolution.
• Governance & risk : Run secure-by-design reviews, document residual risks, and ensure compliance with internal standards and regulatory requirements.
• Documentation & enablement : Maintain runbooks and SOPs; deliver knowledge-transfer sessions to SecOps, networking, and support teams.
• Ways of working : Execute in an Agile environment, partner across security, network, and platform teams, and communicate clearly with technical and non-technical stakeholders.

What you’ll bring

• 7+ years in network/security engineering with hands-on SASE (ZTNA, SWG, CASB) at enterprise scale.
• Experience with Netskope or Zscaler , TLS/SSL inspection, policy design, and exception management.
• Strong networking fundamentals (TCP/UDP, DNS, endpoint proxy/PAC behavior, and packet-level troubleshooting.
• SIEM/SOAR integration experience and log pipelines (e.g., GCP/Google SecOps, syslog, webhooks/APIs).
• Firewall policy automation/orchestration and governance (e.g., AlgoSec) across multi-vendor estates.
• Identity and access concepts (SAML, SSO, RBAC), and zero-trust mindset.
• Clear documentation, stakeholder communication, and the ability to lead phased rollouts.
  #itacceljobs
  

Job Tags

Similar Jobs