Network Security Specialist securing firewalls, proxies, load balancers, and access systems for CMA CGM’s global shipping and logistics operations. Supporting cybersecurity incidents, infrastructure health, and technology projects.
Responsibilities
Configure and maintain firewall platforms including Cisco ASA, Palo Alto, Checkpoint, and Fortinet
Create and modify firewall objects and policies
Establish secure external connectivity using VPN technologies
Configure and operate firewall auxiliaries such as Panorama and User-ID agents
Configure and maintain Citrix ADC load balancers, including services, monitors, virtual servers, content switching, and ADC gateways
Define rewrites and responders
Install and maintain SSL certificates
Configure and maintain proxy solutions including Squid, SOCKS, FTP proxy, and Zscaler
Create and modify firewall and web-content filtering policies
Manage URL and IP whitelists and blacklists
Maintain user internet access policies and troubleshoot proxy-related connectivity issues
Operate Zscaler Internet Access and Zscaler Private Access and produce web usage reports
Manage DNS zones, records, and GeoDNS
Administer PKI and SSL certificates
Manage Distributed Denial of Service protection
Monitor firmware vulnerabilities and bugs and ensure security devices are updated
Work with Cybersecurity on security incidents
Participate in projects and technological solution development
Investigate logs, debug issues, and perform packet captures
Produce capacity planning reports and conduct daily device and service health checks
Maintain device inventory and create SOPs and basic network diagrams
Suggest improvements to policies and processes
Manage license renewals and hardware refreshes or replacements
Perform other responsibilities as required
Requirements
Candidates must be legally authorized to work in Canada with a valid work permit, permanent resident status, or citizenship
Bachelor's degree in IT, Computer Science, Computer Engineering, or related field
At least 3–5 years of related experience
Strong knowledge and experience with firewalls including Cisco ASA, Palo Alto, and Checkpoint
Experience with IPsec site-to-site and client SSL VPN technologies
Experience with F5 or Citrix ADC load balancers
Experience with open-source proxies such as Squid, SOCKS, and FTP proxies
Experience with cloud-based proxy solutions, including Zscaler ZIA
Experience with Zero Trust Network Access, including Zscaler ZPA
Strong foundation in networking, routing, and switching
Basic knowledge and experience in DNS administration and PKI
Basic knowledge of DDoS protection
Strong work ethic, professional integrity, judgement, and maturity
Excellent interpersonal and communication skills; team player and results-oriented
Willingness to work on a shifting schedule
Fluency in English and French
Preferred but not required: Firemon, AlgoSec, Tuffin, or Red Seal; Linux administration; shell or Python scripting; relevant certifications such as CCNP Sec or PCNSE; Cisco ISE NAC appliances
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.
Senior security advisor simulating and mitigating cyberthreats for Desjardins, North America's largest cooperative financial group. Leading offensive security methodologies, tools and strategic initiatives.
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy - now - pay - later platform. Designing secure, scalable CIAM backend systems and integrations.
Senior Security Engineer securing AWS infrastructure, production systems, and AI - driven workflows. Building guardrails, vulnerability remediation, monitoring, and incident response for a rapidly scaling platform.