Senior Firewall Engineer, Network Delivery Engineering - Canada
The Network Delivery Engineering team is seeking a Senior Firewall Engineer to design, build, deploy, and support secure enterprise firewall and network infrastructure. This role provides specialized technical expertise across on-premises and cloud environments, partners with internal technology teams and vendors, and helps ensure infrastructure services are resilient, secure, and aligned with business needs.
- Design, build, deploy, evaluate, and maintain current and future firewall infrastructure.
- Ensure infrastructure systems operate efficiently, securely, and seamlessly across the enterprise.
- Apply deep technical knowledge of on-premises and cloud infrastructure components to deliver reliable network solutions.
- Plan, acquire, coordinate, and implement infrastructure devices while supporting secure network designs and disaster recovery capabilities.
- Administer and improve automated workflow tools to increase delivery pace and operational efficiency.
- Serve as a primary technical liaison between Infrastructure, application teams, vendors, partners, and business stakeholders to design effective infrastructure solutions.
- Assess enterprise security controls, identify infrastructure threats, and recommend risk-informed mitigation strategies.
- Diagnose complex network, firewall, storage, and server issues and implement corrective solutions.
- Track vulnerabilities and apply appropriate remediation, patching, and lifecycle updates to network and server assets.
- Provide proactive monitoring, respond to real-time alerts, and support optimum network and server performance.
- Perform hardware, software, and firmware upgrades, and research and recommend network improvements.
- Evaluate current systems and contribute to improvement strategies based on performance, reliability, and security findings.
- Support business-group priorities while considering broader enterprise impacts and standards.
- Provide specialized consulting, analytical, and technical support for infrastructure initiatives and operational issues.
- Use sound judgment to identify, diagnose, and solve problems within established standards, controls, and procedures.
- Work independently and effectively manage non-routine situations, competing priorities, and complex technical issues.
- Take on broader work or additional accountabilities as business needs evolve.
- Manage and coordinate production changes by following standardized release procedures and minimizing risk to existing services.
- Create release plans, test and validation strategies, schedules, and tracking tools to coordinate release packages for network and business applications.
- Apply the Risk Management Framework and Risk Culture principles to protect the bank, make sound risk-informed decisions, support business strategy, safeguard assets, and adhere to applicable policies, standards, procedures, laws, and regulations.
Required Qualifications:
- Typically 5–7 years of relevant experience and a post-secondary degree in a related field of study, or an equivalent combination of education and experience.
- Hands-on experience with Check Point, Juniper, or similar firewall product lines.
- Strong understanding of routing, switching, and network protocols, including BGP, OSPF, RIP, EIGRP, Layer 3–7 switching, HSRP, VoIP, and multicast.
- Security engineering experience with IPSec, NAT, VPN modules, Cisco routers, and Check Point or Juniper firewalls.
- Proficiency with scripting languages and automation practices used to support infrastructure operations.
- Knowledge of Active Directory, LDAP, and web architecture concepts.
- Experience with ITIL practices related to incident, problem, and change management.
Additional Qualifications:
- Excellent verbal and written communication skills, with the ability to explain technical concepts clearly to technical and non-technical audiences.
- Ability to work independently, stay highly organized, influence outcomes, and resolve significant design issues and technical challenges in a timely manner.
- Strong working knowledge of Microsoft Visio and PowerPoint.
- Ability to provide weekly time and progress reporting, escalate issues promptly, and keep management informed of delivery risks and milestones.
