Network Security Consultant

Accountabilities:

• Design, implement, and manage enterprise network security controls while ensuring firewall, VPN, remote-access, and traffic inspection configurations align with established security standards and Zero Trust principles.
• Provide extensive technical expertise across Cisco Firepower Threat Defense, Cisco FMC, LINA and SNORT engines, Cisco Umbrella/OpenDNS, Cisco Web Security Appliance, and Cisco Secure Malware Analytics/Sandboxing.
• Provide security governance and technical guidance for remote-access solutions and Cisco FTD VPN services, including reviewing and approving firewall rule changes and ensuring appropriate security controls are maintained.
• Participate in Architecture Review Board activities and assess network and application architectures for secure design, zoning, segmentation, and compliance, while providing guidance for new and existing services.
• Design and secure hybrid environments integrating on-premises infrastructure with Microsoft Azure, including VNets, subnets, NSGs, Azure Firewall, Application Gateways, IAM, PAM, Conditional Access, and RBAC, while supporting security integration with VMware Cloud Foundation.
• Troubleshoot and investigate network security incidents, alerts, and anomalies through deep traffic analysis, telemetry, packet captures, and security analytics, while leading or supporting containment, root-cause analysis, remediation, and threat investigations.
• Continuously tune IPS/IDS signatures, firewall rules, and inspection policies, identify security gaps and misconfigurations, collaborate on vulnerability remediation and penetration testing, and contribute to disaster recovery, business continuity, resilience, failover, and datacenter replication strategies.
• Review F5 load-balancer traffic flows, distribution, and backend-server redirection configurations, while developing and maintaining network security architectures, standards, operational procedures, and trusted advisory relationships across teams.
• Evaluate emerging security technologies, automation, orchestration, and AI/ML-based threat detection approaches to identify opportunities for improving security operations and enterprise resilience.

Requirements:

• You have a minimum of 10 years of progressively responsible, hands-on IT experience, including at least 8 years directly focused on network security engineering, architecture, operations, enterprise firewall engineering or administration, or secure network design and implementation.
• You must hold at least one active professional- or expert-level certification from the approved list, including CISSP, CISM, CCSP, CCIE Security, CCNP Security, JNCIP-SEC, JNCIE-SEC, CCSE, Palo Alto Networks Certified Network Security Professional, Palo Alto Networks Certified Network Security Architect, Microsoft Azure Security Engineer Associate, Microsoft Azure Solutions Architect Expert, or Microsoft Azure Network Engineer Associate. The certification must be current, and a copy must be provided during submission.
• A bachelor’s degree in Information Security, Computer Science, Engineering, or a related field is preferred, along with 10+ years of broader network security and enterprise infrastructure experience.
• You bring strong expertise in network security architecture, design, governance, segmentation, security zoning, Zero Trust, Cisco FTD/FMC, IPS/IDS, Cisco Umbrella/OpenDNS, and WSA.
• You have experience securing hybrid-cloud environments and Microsoft Azure, with additional experience in SIEM, SOAR, NDR, EDR, vulnerability management, network traffic analysis, and packet capture considered highly valuable.
• You have practical experience with incident response, threat investigation, security risk assessment and remediation, penetration testing, disaster recovery/business continuity security, F5 load balancers, and VMware Cloud Foundation security.
• You demonstrate strong documentation, communication, stakeholder-management, analytical, and problem-solving skills, with the ability to provide trusted security guidance across technical and cross-functional teams.
• Experience with automation, orchestration, and AI/ML-based threat detection is an advantage, particularly where these capabilities can improve security monitoring, response, and operational efficiency.

Benefits:

• Contract engagement with a Monday–Friday schedule from 8:00 AM to 5:00 PM CST on a day shift.
• Remote, hybrid, or on-site work arrangements depending on client requirements.
• Regina, Saskatchewan is the primary client location.
• The opportunity to work on complex enterprise network security environments spanning on-premises infrastructure and hybrid cloud.
• Exposure to advanced Cisco security technologies, Microsoft Azure security services, Zero Trust, network segmentation, threat detection, and security analytics.
• Broad involvement across architecture, governance, incident response, vulnerability management, penetration testing, disaster recovery, and business continuity.
• Opportunities to evaluate emerging automation, orchestration, and AI/ML-based security technologies.
• The role requires travel within Saskatchewan for site visits when necessary, with travel expenses incurred by the consultant.