Role: Network Security Architect
Location: Montreal, QC
Work Model: Onsite
Experience: 15+ Years
Role Overview
We are looking for a Senior Network Security Architect with 15+ years of experience designing, implementing, and transforming enterprise network security environments. The ideal candidate will have strong hands-on expertise with Palo Alto, Fortinet FortiGate, network security architecture, firewall migrations, Zero Trust, network segmentation, VPN, and enterprise networking.
Key Responsibilities
- Design and deliver secure, scalable enterprise network security architectures aligned with business and security requirements.
- Lead Palo Alto and Fortinet FortiGate firewall architecture, deployment, migration, upgrades, and policy governance.
- Design and implement VPN, network segmentation, micro-segmentation, and Zero Trust security solutions.
- Perform security architecture reviews, network security assessments, threat assessments, and design validation.
- Lead firewall and VPN remediation, rule optimization, policy cleanup, and security hardening initiatives.
- Support large-scale firewall migrations and network transformation programs with minimal business disruption.
- Collaborate with network, infrastructure, cloud, and cybersecurity teams to develop secure enterprise solutions.
- Provide technical leadership for HA, routing, switching, and network security troubleshooting.
- Establish and maintain firewall governance, security standards, and best practices using tools such as AlgoSec.
Required Technical Skills
- Palo Alto Networks & Fortinet FortiGate – architecture, deployment, migration, configuration, and governance.
- Firewall Security – policies, NAT, VPN, HA, IDS/IPS, threat prevention, and remediation.
- Network Security Architecture – Zero Trust, segmentation, micro-segmentation, secure network design.
- Enterprise Networking – TCP/IP, DNS, BGP, OSPF, WAN, routing, switching, load balancing, and high availability.
- NAC & Network Access Control – strong experience with Cisco ISE.
- Security Technologies – Secure Web Gateways, proxies, DDoS protection, email security, IDS/IPS.
- Firewall Governance – AlgoSec or similar firewall policy management and compliance platforms.
- Network Observability & Monitoring – experience with enterprise monitoring, troubleshooting, performance analysis, and observability platforms.
Architecture & Leadership
- Lead enterprise security architecture reviews and technical design sessions.
- Evaluate existing environments and identify security gaps, risks, and remediation opportunities.
- Develop security architecture standards, patterns, and technical recommendations.
- Validate security designs against enterprise security, compliance, and operational requirements.
- Provide technical guidance to network and cybersecurity engineering teams.
- Drive complex security transformation initiatives from architecture through implementation.
Ideal Candidate
- 15+ years of enterprise IT/network security experience.
- Strong combination of security architecture and hands-on engineering expertise.
- Proven experience with large-scale firewall migrations, network transformations, and security remediation.
- Excellent troubleshooting, communication, documentation, and stakeholder-management skills.
