Network Security Specialist

CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

POSITION SUMMARY

As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.

KEY RESPONSIBILITIES

• Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:
• Creation/Modification of firewall objects and policies.
• Establishing secured external connectivity with VPN technologies.
• Configuration and operation of firewall auxiliaries such as Panorama, User-ID agents, etc.
• Configuration and maintenance of load balancers (Citrix ADC formerly known as Netscaler).
• The tasks include but not limited to:
• Creation/Modification and health checks of load balanced services, monitors, virtual servers, content switching, and ADC gateways.
• Defining rewrites and responders.
• SSL certificate installations and maintenance.
• Configuration and maintenance of proxy solutions (local open source - Squid, SOCKS, FTP proxy; cloud - Zscaler). The tasks include but not limited to:
• Creation/Modification of security policies (firewall and web-content filtering)
• Whitelisting/blacklisting URL and IP addresses.
• Maintenance of user internet access policies and troubleshooting proxy-related internet connectivity issues.
• Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) operations and producing web usage reports.
• PKI / SSL certificates administration.
• Distributed Denial of Service Protection (DDoS) management
• Keeping up to date with information regarding firmware security vulnerabilities and bugs and ensuring firmware of security devices are secured and updated.
• Working side by side with Cybersecurity to help with incidents.
• Involvements in projects outside of daily operations to help with developments on technological solutions.
• Log investigation, debugging, and packet captures.
• Producing capacity planning reports.
• Daily health checks for devices and services.
• Making sure device inventory is updated and within standards.
• Creating documents such as SOP or basic network diagram and ability to suggest improvements in the policies and processes.
• License renewals and hardware refresh or replacements of devices.
• Other responsibilities as required

QUALIFICATIONS

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

Education:

Bachelor's degree in IT, Computer Science, Computer Engineering, or related field.

Knowledge & Experience:

• At least 3-5 years of related experience.
• Strong knowledge and experience on the FF technologies:
• VPN Technologies (IPSEC S2S/Client SSL)
• Load balancers (F5 or Citrix ADC)
• Proxies (open source such as Squid, SOCKS, and FTP proxies; Cloud based proxy solutions – Zscaler ZIA)
• Zero Trust Network Access (ZTNA – Zscaler ZPA)
• Strong foundation on Networking (routing and switching).
• Basic knowledge and experience on DNS administration and PKI.
• Basic knowledge of Distributed Denial of Service (DDoS) Protection
• Preferred but not required:
• Security management tools such as Firemon, AlgoSec, Tuffin, or Red Seal.
• Scripting tools such as shell or Python.

Other:

• Strong work ethic, professional integrity and the ability to apply the appropriate level of judgement and maturity.
• Excellent interpersonal skills, and a strong ability to communicate, team player, and result oriented.
• Willing to work on shifting schedule.

We are an equal opportunity employer.

We offer:

Job description:

CMA CGM Canada is recruiting for Network Security Specialist as part of the GLOBAL CYBERSECURITY Team located in MONTREAL.

*CANDIDATES MUST BE LEGALLY AUTHORIZED TO WORK IN CANADA: valid work permit, permanent resident or citizen.*

POSITION SUMMARY

As a Network Security Specialist, you are responsible for all solutions that are owned by Network Security, performing operational tasks and following best industry practice.

KEY RESPONSIBILITIES

• Configuration and maintenance of firewall platforms (Cisco ASA, Palo Alto, Checkpoint, Fortinet). The tasks include but not limited to:

• • Creation/Modification of firewall objects and policies.
  • Establishing secured