Network Security Architect / Montreal, QC (Onsite) - FTE

Role: Network Security Architect

Location: Montreal, QC

Work Model: Onsite

Experience: 15+ Years

Role Overview

We are looking for a Senior Network Security Architect with 15+ years of experience designing, implementing, and transforming enterprise network security environments. The ideal candidate will have strong hands-on expertise with Palo Alto, Fortinet FortiGate, network security architecture, firewall migrations, Zero Trust, network segmentation, VPN, and enterprise networking.

Key Responsibilities

• Design and deliver secure, scalable enterprise network security architectures aligned with business and security requirements.
• Lead Palo Alto and Fortinet FortiGate firewall architecture, deployment, migration, upgrades, and policy governance.
• Design and implement VPN, network segmentation, micro-segmentation, and Zero Trust security solutions.
• Perform security architecture reviews, network security assessments, threat assessments, and design validation.
• Lead firewall and VPN remediation, rule optimization, policy cleanup, and security hardening initiatives.
• Support large-scale firewall migrations and network transformation programs with minimal business disruption.
• Collaborate with network, infrastructure, cloud, and cybersecurity teams to develop secure enterprise solutions.
• Provide technical leadership for HA, routing, switching, and network security troubleshooting.
• Establish and maintain firewall governance, security standards, and best practices using tools such as AlgoSec.

Required Technical Skills

• Palo Alto Networks & Fortinet FortiGate – architecture, deployment, migration, configuration, and governance.
• Firewall Security – policies, NAT, VPN, HA, IDS/IPS, threat prevention, and remediation.
• Network Security Architecture – Zero Trust, segmentation, micro-segmentation, secure network design.
• Enterprise Networking – TCP/IP, DNS, BGP, OSPF, WAN, routing, switching, load balancing, and high availability.
• NAC & Network Access Control – strong experience with Cisco ISE.
• Security Technologies – Secure Web Gateways, proxies, DDoS protection, email security, IDS/IPS.
• Firewall Governance – AlgoSec or similar firewall policy management and compliance platforms.
• Network Observability & Monitoring – experience with enterprise monitoring, troubleshooting, performance analysis, and observability platforms.

Architecture & Leadership

• Lead enterprise security architecture reviews and technical design sessions.
• Evaluate existing environments and identify security gaps, risks, and remediation opportunities.
• Develop security architecture standards, patterns, and technical recommendations.
• Validate security designs against enterprise security, compliance, and operational requirements.
• Provide technical guidance to network and cybersecurity engineering teams.
• Drive complex security transformation initiatives from architecture through implementation.

Ideal Candidate

• 15+ years of enterprise IT/network security experience.
• Strong combination of security architecture and hands-on engineering expertise.
• Proven experience with large-scale firewall migrations, network transformations, and security remediation.
• Excellent troubleshooting, communication, documentation, and stakeholder-management skills.