Information technology specialist network admin

Role: Senior Network Specialist Location: Montréal
Work schedule: 37,5
Work mode: Ability to work onsite at least 3-4 days per week is required

As a Network Cybersecurity Specialist, your key tasks will include supporting major changes to our network topology, with a focus on the implementation of a Secure Access Service Edge (SASE) platform. You will work closely with the cybersecurity team to translate security requirements into actionable network designs, ensuring alignment with vendor guidance and industry-recognized best practices to deliver a secure and future-ready infrastructure.

SASE & SD-WAN Implementation Expertise
§ Expertise with Prisma SD-WAN and experience with major migrations, including both design and implementation of Prisma Access solutions
§ Proven experience deploying Palo Alto Prisma SD-WAN and Prisma Access in hybrid environments (cloud and on-prem).
§ Ability to design and implement redundant, scalable SD-WAN architectures with performance tuning for peak periods and future growth
§ Familiarity with Strata Cloud Manager for centralized policy enforcement, logging, and visibility
Security Requirements Translation
§ Collaborate with cybersecurity teams to define and document security requirements per user, device, and service, evolving over time
§ Apply role-based access control (RBAC) and network segmentation strategies using Prisma’s native capabilities

ZTNA & Zero Trust Readiness
§ Understand Zero Trust principles and how to phase out legacy VPNs in favor of ZTNA within SASE/SSE frameworks
§ Plan for secure access to private applications using identity- and context-aware policies, leveraging Prisma Access and endpoint agents

Cloud & Remote Access Security
§ Experience with GlobalProtect and CASB/DLP integration for securing mobile and remote users
§ Knowledge of traffic inspection, malware scanning, and data loss prevention across SaaS and private applications

Operational Integration & Visibility
§ Ability to integrate SASE with existing tools like Cisco ISE, Active Directory, and SIEM platforms (e.g., Splunk)
§ Awareness of traffic visibility challenges in SASE environments and familiarity with solutions like Gigamon Cloud Broker or packet replication to cloud storage

Strategic Planning & Roadmap
§ Participate in long-term planning for network evolution, including ZTNA adoption timelines, DMZ decommissioning, and cloud migration strategies
§ Contribute to RFP development, vendor evaluations, and pilot testing of SASE/SD-WAN solutions

Requirements and qualifications
Education
~ Bachelor’s degree in Computer Science, Information Security, Network Engineering, or a related field.
~ A Master’s degree in Cybersecurity or Network Architecture is a plus, especially for senior or strategic roles.
~5–7 years of experience in network engineering or cybersecurity roles.
~ At least 2–3 years of hands-on experience with:

- SASE and SD-WAN deployments
- ZTNA planning or implementation
- Cloud-based security platforms, ideally Palo Alto Prisma Access and Prisma SD-WAN

Deep understanding of:
- Network security architecture and segmentation
- Secure remote access and VPN alternatives
- Zero Trust principles and identity-based access control
- Cloud networking and hybrid environments

Familiarity with:
- Policy enforcement, traffic steering, and centralized management (e.g., Strata Cloud Manager)
- Integration with identity providers (e.g., Azure AD, Okta)
- Logging, monitoring, and SIEM integration

Desired, but not required:
Holding a recognized certification such as one of these is considered an asset: PCNSE – Palo Alto Networks Certified Network Security Engineer, Cisco Certified CyberOps Associate or CCNP Security, CompTIA Security+ or other Cybersecurity certifications relevant to the role.