Cybersecurity Specialist (Network & Firewall Change Governance)
- Vancouver, BC, Canada
Pay Rate: $70.48/hour, depending on experience · Full-time
Applications open in a new tab.
Job details
- Pay
- Pay Rate: $70.48/hour, depending on experience
- Job type
- Full-time
- Apply by
- Experience
- Raise is an established hiring firm with over 65 years of experience.
- Posting language
- English
- Posted
Original job description
- Pay Rate: $70.48/hour, depending on experience
- Contract: Start Date 2026-12-14 End Date 2027-12-11 (1year)
- Location: Vancouver, British Columbia
Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.
Description
The Cybersecurity Specialist (Network & Firewall Change Governance) will join our clients Cybersecurity Operations & Infrastructure team. In this role, you will be responsible for reviewing, evaluating, and governing network security change requests - including firewall rule changes and internet proxy configurations - across enterprise and operational technology environments.
You will act as a key liaison between system requestors, network engineering teams, and cybersecurity experts, ensuring that all network modification requests align with ’s security policies, hardening standards, and zero-trust principles.
Responsibilities
- Security Change Request Review & Governance
- Intake & Triage: Perform intake, triage, and detailed technical reviews of incoming security change requests (e.g., Firewall Requests, Internet Proxy Requests) for completeness, necessity, and risk.
- Rule & Architecture Validation: Review proposed firewall rules (source, destination, ports, protocols) and validate them against technical design documents, network architecture patterns, and segmentation boundaries.
- Compliance & Standards Enforcement: Ensure all requests adhere to internal cybersecurity policies/standards and external regulatory frameworks (e.g., NIST, NERC CIP, ISO 27001).
- Stakeholder Collaboration: Identify missing, ambiguous, or risky request details and collaborate directly with requestors (both technical and business stakeholders) to resolve gaps.
- Process Optimization: Participate in continuous process improvements for firewall change request workflows, request templates, and governance automation.
- A minimum five (5) years of working experience in Information Technology with at least three (3) years in cyber security or equivalent.
- Technical Skills
- In-depth knowledge of TCP/IP, UDP, routing protocols, IP addressing, and subnetting.
- Solid understanding of VPNs, NAT, network segmentation, security zoning, SSL/TLS inspection, and IPsec tunnels.
- Strong background in firewall security best practices, access control lists (ACLs), rule base cleanup, and enterprise hardening standards.
- Good understanding of Zero Trust Architecture (ZTA) principles, micro-segmentation, and hybrid cloud identity/security frameworks.
- Practical exposure to enterprise firewalls and network security platforms is a strong asset.
- Soft Skills & Competencies
- Strong problem-solving capabilities with high attention to detail when analyzing complex firewall rule sets and system dependencies.
- Ability to translate complex cybersecurity concepts into clear guidance for non-technical requestors while engaging effectively with senior technical architects.
- Excellent organizational skills to manage high-volume change request queues and prioritize critical business needs effectively.
- Education and Certifications
- Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- An equivalent combination of education, relevant technical certifications, and extensive industry experience will also be considered.
- Preferred Certifications (Nice-to-Haves)
- Security & Governance: CISSP (Certified Information Systems Security Professional), CompTIA Security+, GIAC Firewall (GCFW), or other GIAC security designations.
- IT Service Management: ITIL Foundation or higher (for IT change management processes).
- Vendor Certifications: Certifications from leading network security vendors (e.g., Palo Alto Networks PCNSA/PCNSE, Fortinet NSE, Cisco CCNA/CCNP Security, Check Point CCSE).
- Every contractor must supply their own Windows 11 Laptop computer for the duration of the assignment.
- Every contractor must supply their own “Smart Phone”. This is needed to gain access to the Organizations network.
Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.
We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.
We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/
In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at +1 800-567-9675 or hello@raiserecruiting.com.
#WES
More about this job
Responsibilities
Review, triage, and govern firewall, proxy, and other network security change requests, validating technical details against network architecture, segmentation boundaries, security policies, and regulatory standards. Coordinate with requestors, network engineering, and cybersecurity teams to resolve gaps and risks, while helping improve change workflows and governance automation.
Requirements
Requires at least five years of IT experience, including at least three years in cybersecurity or an equivalent background, plus strong knowledge of networking, firewalls, segmentation, and zero-trust principles. A bachelor's degree in computer science, IT, cybersecurity, or a related field is required, with equivalent education, certifications, and industry experience also considered; relevant security, ITIL, and vendor certifications are preferred.
Skills
- Cybersecurity Change Governance
- Firewall Rule Review
- Network Security
- TCP/IP
- UDP
- Routing Protocols
- IP Addressing And Subnetting
- VPNs
- Network Segmentation
- NAT
- SSL/TLS Inspection
- IPsec
- Access Control Lists
- Zero Trust Architecture
- NIST
- NERC CIP
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Energy
- Engineering
Keywords
- Cybersecurity Operations
- Network Security
- Firewall Change Requests
- Internet Proxy
- Firewall Rules
- Network Architecture
- Enterprise Networks
- Operational Technology
- TCP/IP
- UDP
- Routing Protocols
- IP Addressing
- Subnetting
- VPN
- NAT
- Network Segmentation
- Security Zoning
- SSL/TLS Inspection
- IPsec Tunnels
- Access Control Lists
- Zero Trust Architecture
- Micro-Segmentation
- Hybrid Cloud Security
- NIST
- NERC CIP
- ISO 27001
- CISSP
- CompTIA Security+
- ITIL
- Palo Alto Networks