Senior Network and Security Engineer
Join a ChallengerBeing a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing things. If you’re not afraid of taking on big challenges and redefining the future, you belong with us. You’ll get to work with people who will encourage you to reach new heights. We like to keep things fun, ask questions and learn together. We are a big (and growing!) family. Overall we serve more than 370,000 people across Canada through Equitable Bank, Canada's Challenger Bank™, and have been around for more than 50 years. Equitable Bank's wholly-owned subsidiary, Concentra Bank, supports credit unions across Canada that serve more than 5 million members. Together we have over $100 billion in combined assets under management and administration, with a clear mandate to drive change in Canadian banking to enrich people's lives. Our EQ Bank platform (eqbank.ca) has been named the top Schedule I Bank in Canada on the Forbes World's Best Banks 2023, 2022, and 2021 lists. Job PurposeThe Senior Network and Security Engineer holds a key position within the Network Engineering and Operations team and reports directly to the Manager of Network Engineering and Operations. In this role, you will be responsible for managing network-related infrastructure, encompassing both on-premises and cloud environments. Your duties will include overseeing network equipment such as Routers, L2/L3 Switches, Firewalls, Load Balancers, Servers, Proxy Servers, and other relevant components.As a Senior Network and Security Engineer, you will collaborate with Managed Service Providers (MSPs), External Service Providers, and vendors to design, install, implement, manage, and maintain the company's network security infrastructure and technologies. In addition to providing technical expertise, you will participate in rotational on-call support, which may include weekends.You will collaborate closely with the team's Network and Security Lead to ensure that network design and topology align seamlessly with the company's strategic goals. This collaborative effort will involve assessing and refining network architectures to support the overall business objectives, enhancing the efficiency and security of the network infrastructure. Together with the lead, you will contribute to shaping a robust and strategic network environment that aligns with the company's long-term vision and technological advancements.Your role involves mentoring and guiding intermediate and junior staff to foster their technical growth and enhance their knowledge, efficiency, and effectiveness. You will actively consult with various departments within the Bank's Technology team, contributing as a network and security expert partner.One of the key projects you will contribute to is the Firewall Consolidation initiative. This project requires planning, designing, and migrating from the current data center and Azure-hosted firewalls to a single FW vendor's product to replace the existing firewalls. You will collaborate with cross-functional teams, including Technical Staff, Managers, Directors, and Business Stakeholders, on both on-premises and cloud-based network and security projects or initiatives.Your responsibilities will extend to troubleshooting complex networking issues, documenting existing infrastructure, and capturing any physical and logical changes in the network and systems topology and components. Coordination with MSPs to achieve business and technical objectives is also a crucial aspect of your role. Please note that some implementations and changes to networking technologies may require off-hours support and activities.
Main Activities
- Designing, implementing, and maintaining network and security infrastructure in on-premises data centers and Microsoft Azure.
- Cisco ISE administration.
- Evaluating project requirements and designing network security systems architecture.
- Maximizing network performance by monitoring activity, troubleshooting, scheduling hardware and firmware upgrades, and collaborating with impacted stakeholders before and during a change window.
- Designing, implementing, and maintaining VPN Tunnels and their respective documentation.
- Day-to-day administration, monitoring, and support of network security equipment and Azure-hosted security appliances/firewalls.
- After-hours on-call support (rotational) to support the networking issues as they arise.
- Provide guidance and act as an escalation point for network analysis and issues.
- Analyzing, designing, and implementing Azure VNets/Subnets/UDRs.
- Managing Azure ExpressRoute Circuits
- Maintain network devices and services using a combination of tools to ensure high availability and adherence to required Service Level Agreements.
- Technical representative on projects from a networking and network security perspective.
- Ensuring IT policies and procedure checks are met for a clean audit report.
- Working with IT Security Engineers to remediate network-related security vulnerabilities.
- Collaborating with vendors and MSPs to manage EQB's WAN and Internet links/circuits.
- Attending workshops and on-the-job technical training sessions.
Required skills and qualifications
- Completion of Post-Secondary Education (Focus on Computer Networks, Computer Science or Cyber Security preferred). Experience Requirements
- Minimum of 5+ years of experience in networking with a focus on Routing and Switching and Network Security Engineering.
- Minimum of 2+ years of experience in Microsoft Azure Networking or administration. Hard Skills Requirements
- Expert-level knowledge and experience of
- Fortigate Network Firewalls (Physical and Virtual – NVA)
- Routing and Switching protocols (EIGRP, OSPF, BGP, VSS, vPC, StackWise, StackWise Virtual, etc.)
- Proficient understanding of the BGP protocol.
- Cisco ISE administration – for NAC and AAA functionalities
- Site-to-Site VPN Connections
- VPN / LAN / WAN troubleshooting
- WAN technologies and Internet connectivity methods
- Proven knowledge and experience of
- Cisco Meraki
- Microsoft Azure Networking
- General Microsoft Azure Administration
- VMWare vSphere Networking
- AAA Protocols (RADIUS, TACACS+)
- Nice to have experiences
- CheckPoint, SonicWall and Azure Firewalls working experience.
- SASE and ZTNA Understanding
- ZScaler Private Access (ZPA)
- ZScaler Internet Access (ZIA)
- Basic understanding of the following Operating Systems and their features and services
- Microsoft Windows Server
- RedHat and CentOS Linux
- in PowerShell or CLI scripting to automate network and security administration tasks