Network Security Engineer (x2) # of positions: 2 Duration: until Oct 30th Extension possible: Possible Location: Toronto, ON Selling Points of Position: Cutting edge project, major implementation with chances of extension/permanency Best Vs Average Candidate: Job Description The Network Engineering – Security team is part of ITS Core Infrastructure Services Engineering. The Network Engineering – Security team is responsible for the Review & Validation of all Engineering Requests, the Creation of Product & Service Designs; Establishment of Partnerships with Business Facing Technology teams for strategic initiatives and working closely with the Technology Risk Management Teams to identify solutions required for Perimeter network. This role will be responsible for the design of security solutions for the bank’s internal and perimeter networks and requires broad in-depth understanding of Routing & Switching, Perimeter (DMZ) Network Controls, Firewalling, and Network Access Control and the management and automation of these solutions. The successful candidate must have demonstrated ability to engineer, design and document solutions in these areas of Network Security working and an ability to work closely with business partners, Technology Risk Management, and other relevant Infrastructure teams. Roles and Responsibilities • Deliver datacenter network designs and security solutions to business and risk management partners • Evaluation, recommendation and testing of technical solutions, network performance monitoring and tuning • Engineer & design, configuration, validation and Level 3 support of Network Security solutions, including firewalls • Creation of datacenter network design diagrams, network security build standards and technical specifications • Development and maintenance of up-to-date documentation of security systems, sub-systems and other technology solutions • Establishing partnerships with technology teams for organizational strategic initiatives • Identifying and actualizing opportunities for improvement to the management and automation of network security solutions • Proactive engagement to promote technology ideas that can add value or reduce costs to each of BANK’s core businesses Job Requirements – Must Haves: 1. Working in large complex enterprise network infrastructures (large enterprise organizations) – 5+ years 2. Engineer & design, configuration, validation and Level 3 support of Network Security solutions, including firewalls – 8+ years 3. Experience with Palo Alto Network Firewalls and Panorama Management is required; core networking, routing design – 8+ years 4. Strong experience with designing and implementing Next Generation Firewall solutions, is required – 8+ years 5. Strong understanding of network communications (e.g. IPSEC, GRE, HSRP, BGP, OSPF, 802.11, Qos) is required – 8+ years 6. Excellent communication skills 7. Vendor management experience – 5+ years of experience 8. Experience with ensuring that network solutions and firewall solutions adhere to controls, regulation and policies – 5+ years of experience 9. Cisco CCNP, CCIE, Data center certification Nice to Have: 1. CISSP, CISM, PCNSA, PCNSE or other security industry certifications is preferred 2. Experience with regulatory / compliance requirements 3. Experience with firewall audit and automation tools, such as Tufin Orchestration Suite and AlgoSec Security Management

Qualification	Rating
Must Have
Short-listing Questions
Has your candidate worked at BANK as a Full Time employee?	No
Skills
Designing and implementing Next Generation Firewall solutions,	8 years
Engineer, configuration, validation and Level 3 support of Network Security solutions (firewalls)	8 years
Ensuring that network and firewall solutions adhere to established controls/regulations/policies	5 years
Experience with Network communications (e.g. IPSEC, GRE, HSRP, BGP, OSPF, 802.11, Qos)	8 years
One of the following: CISSP, CISM, CCNA, CCNP, PCNSA, PCNSE	Yes
Palo Alto Network Firewalls and Panorama Management – core networking, routing design	8 years
Vendor Management Experience	5 years
Working in large complex enterprise network infrastructures (large enterprise organizations)	5 years
Nice to Have
Skills
CISCO CCNP or CCIE certification	Yes
Firewall audit/automation tools – Tufin Orchestration Suite and/or AlgoSec Security Management	1 years
Strong understanding of Regulatory and compliance obligations for fin institutions	Yes