Sr Engineer - Security Engineering

CBTS serves enterprise and midmarket clients in all industries across the United States and Canada. CBTS combines deep technical expertise with a full suite of flexible technology solutions--including Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, CBTS delivers comprehensive technology solutions for its clients' transformative business initiatives. For more information, please visit www.cbts.com.

OnX is a leading technology solution provider that serves businesses, healthcare organizations, and government agencies across Canada. OnX combines deep technical expertise with a full suite of flexible technology solutions—including Generative AI, Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, OnX delivers comprehensive technology solutions for its clients’ transformative business initiatives. For more information, please visit www.onx.com.

Job Description

Provide senior (Level 3) firewall architecture and engineering expertise to large, complex enterprise LAN and WAN client in predominantly Palo Alto environment.

• Security Architecture and Design: Develop and implement robust security architectures and frameworks to protect our infrastructure and applications.
• Performance Tuning: Optimize firewall performance, ensuring high availability, scalability, and minimal impact on network traffic.
• Incident Response: Investigate and respond to security incidents related to firewall breaches, performing root cause analysis and remediation.
• Policy and Rule Management: Create and enforce firewall policies and access control rules, regularly reviewing and updating them to address new threats and changes in network topology.
• Security Best Practices: Advocate for and enforce security best practices across all stages of the development lifecycle.
• Collaboration: Work closely with development teams to integrate security features and practices into new and existing applications and systems.
• Documentation and Reporting: Maintain comprehensive documentation for security procedures, incidents, and system configurations. Provide regular reports and updates to stakeholders.
• Compliance: Ensure that security practices comply with industry standards, regulations, and company policies.
• Review scripting, planning and execution of Firewall (Palo Alto) Change Management process
• Investigate firewall issues / incidents and bring to resolution within stated SLA parameters
• Working with Incident, Problem, and Change Management
• Provide Root Cause Analysis (RCA) to operations team and customers upon request
• Provide technical leadership (both verbal and written) for Incident and Change – firewall related
• Able to work on network drawings with Visio
• Work and collaborate with other app teams
• Good understanding of BGP / EIRGP routing, NAT/PAT, VPN, and firewall technologies
  
  

• Required Certifications or equivalent experience: Palo Alto Certifications
• Additional desirable certifications / equivalent experience:
• CCNA Enterprise Route/Switch Other Security Certification
  
  

• Network or Firewall build and engineering experience and expertise in a variety of predominantly in Palo Alto firewalls, Panaroma, PRISMA cloud, Cisco LAN and WAN in large, complex, enterprise environment
• Experience implementing/managing firewall rules, policies, PAN-OS upgrades etc.,
• Experience using network analysis, management, and performance monitoring tools to plan for growth, diagnose problems and determine source
• Working on comprehensive projects in complex networking / VPN environment with IPSEC, Meet Me and NAT
  
  

• Clear communication skills
• Time Management / Self-Management
• Independent Work Skills
• Presentation skills
• In-depth Routing Protocols experience and operational knowledge: EIGRP & BGP
• Some example platforms in the environment include SDWAN, Palo Alto with virtual firewall contexts / vsys, Nexus 7K/5K/2K, Cisco ASR/ISR routers, and Cisco Catalyst switches
• Familiarity with ITIL based ticketing solution (Service NOW experience a plus)
• HSRP environment experience
• In-depth knowledge of the configuration and maintenance of routers, switches, and firewalls
  
  

• Partial US EST hours
• May require late hours and weekends to complete assignments and projects.