Network & Security Specialist

**Network & Security Specialist**

**ABOUT THIS ROLE**

Burlington Hydro Inc. (“BHI”) is seeking a Network & Security Specialist to join our IT team. You will report to the Director of IT & Business Transformation, responsible for BHI’s overall network (LAN/WAN/Wireless/Firewalls) administration and implementation of security controls to protect organization networks, systems, and data. In addition, you will be working on redesigning the corporate internal network on core, access, and distribution platforms. In this role, you will work closely with managed service providers to improve corporate security posture in compliance with Ontario Cyber Security Framework (OCSF). You have strong familiarity with frameworks such as NIST and ISO 27001. This role will also focus on information security risk assessments and third-party security assessments.

You are a strategic IT professional who understands business operations, networks and security and will utilize that knowledge to assist with implementing an effective security campaign. One of your key responsibilities is managing security operations using various tools to monitor and work closely with vendors to reduce risk to organizational assets and data. You will play an integral role in recommending and implementing appropriate security controls to protect the BHI information assets from unauthorized access and compromise/loss, mitigate cyber-related risks, and ensure the overall network and security posture is aligned with business needs. In addition, you must have the experience and confidence to recommend innovative technologies and effective solutions to address evolving security challenges and changing demands.

This is an **onsite** position at 1340 Brant Street, Burlington. Burlington Hydro currently offers eligible employees the opportunity to work remotely 1-day per week as part of the Hybrid Work from Home Program.

**CORE RESPONSIBILITIES**
- Design, implement, and troubleshoot the corporate network infrastructure, including core, access, and distribution layer network platforms.
- Manage firewall policies, rules, and IPSec tunnels. Routers and network switches (layer 2/3) installation, configuration (including backup / restore) and security management.
- Manage and configure the corporate wireless network, network security devices, VPN setup, RADIUS, DMZ and NAT configurations.
- Use SIEM to create reports, dashboards, and queries for security requirements.
- Implement security controls, defenses, and countermeasures to prevent attacks.
- Conduct threat analysis, including researching evolving threats, and provide recommendations to improve overall security posture.
- Maintain and manage policies for network access through vNets, NSGs and subnets in the Microsoft Azure environment.
- Assist in creating information security policies and procedures to support the organization’s risk and information security governance program.
- Work with security vendors regularly to protect against emerging threats and develop controls to protect against security breaches.
- Assist in implementing information systems controls as per OCSF guidelines.
- Identify risk areas and provide recommendations to improve the organization’s security posture, both for on-premises and cloud environments.
- Act as Subject Matter Expert (SME) and lead in implementing CIS best practices to strengthen the cybersecurity landscape for the organization.
- Support the corporate Business Continuity and Disaster Recovery (BCPDR) exercises and tests regularly.
- All other duties as assigned.

**WHAT WE ARE LOOKING FOR**
- An undergraduate degree in Computer Science or related discipline or an equivalent combination of education and work experience.
- Minimum 3-5 years of experience in network and security engineering or a similar technical role.
- Preferred to have Industry certifications related to network and cyber security, for example, CCNP Security or similar, SSCP, Security+ or SNSA.
- Experience in cybersecurity Governance, Risk and Compliance (GRC).
- Experience working with Next Generation Firewalls (preferably Fortinet and SonicWall), Layer 2 / 3 core and access switches (Aruba, Cisco).
- Experience working with wired, wireless, core, edge, and VPN routers.
- Proficient with security standards, NIST, ISO, and CIS and how it relates to enterprise safeguarding.
- Experience with the implementation of Network Admission Control (NAC)
- Strong network and security expertise and can demonstrate a technical skill set to maintain and deploy network security technologies.
- Experience working with various static and dynamic routing protocols for traffic flow controls and security.
- Working knowledge and experience in network traffic analysis.
- Strong knowledge of legislative requirements for security and privacy.
- High-level interpersonal skills to successfully translate business requests to technology and security requirements.

**WHAT YOU’LL NEED TO BE SUCCESSFUL**
- Abili