IT Network Specialist

Job requirements

• 5+ years of hands-on network engineering/administration experience in multi-site enterprise environments

• Expert-level experience administering enterprise next-generation firewall platforms, including centralized management and logging/analytics tooling; relevant certification (e.g., Fortinet, Palo Alto, Cisco or equivalent) strongly preferred

• Strong routing and switching fundamentals: VLANs, OSPF/BGP basics, NAT, SD-WAN, DNS/DHCP, QoS

• Proven VPN experience: IPsec (IKEv2), SSL VPN and ZTNA concepts; familiarity with WireGuard-based overlay networking tools

• Experience with 802.1X/EAP-TLS, RADIUS and certificate-based authentication (PKI)

• Experience integrating network logging with SIEM and/or MDR platforms (syslog, log forwarding, telemetry validation)

• A security-first mindset: you default to least privilege, question standing access and treat rule-base hygiene as real work

• Experience operating in audited environments (ISO 27001, SOC 2 and/or SOX ITGC) with disciplined change management

• Strong documentation habits and clear written communication

• Ability to work autonomously across time zones and travel occasionally to offices and sites

• Scripting/automation against network platform APIs (Python, PowerShell)

• Exposure to cloud identity and networking (e.g., Microsoft Entra ID, Conditional Access, Azure networking)

• Experience with M&A network integrations or migrations consolidating mixed-vendor estates onto a unified stack

• Relevant security certifications (e.g., Security+, SSCP, CCNP Security or equivalent)

• Familiarity with meeting-room and collaboration endpoint networking

• Spanish language skills (we have teams and offices in Spain)

Job responsibilities

• Administer and maintain enterprise next-generation firewalls, switching and wireless across all corporate offices, including HA pairs, firmware and vulnerability lifecycle management, configuration backups and change control

• Lead the deployment and standardization of a unified, centrally managed network stack across all corporate sites, including centralized policy management, logging and analytics platforms

• Monitor network health, capacity and availability; troubleshoot and resolve incidents across LAN, WAN, wireless and remote-access layers

• Own firewall policy lifecycle management: scheduled rule reviews, recertification and clean-up to maintain least-privilege, well-documented rule bases

• Administer identity-aware network access, including 802.1X (EAP-TLS) wired and wireless authentication, RADIUS and certificate-based controls

• Manage access policies for software-defined / identity-based overlay networks, including regular ACL reviews and device access governance

• Harden network infrastructure against recognized benchmarks; track vendor security advisories and remediate vulnerabilities within defined SLAs

• Ensure network telemetry and security logs are reliably forwarded to our managed detection and response (MDR) and SIEM platforms, and validate detection coverage

• Support incident response with network-layer containment, investigation and forensics assistance

• Build and maintain site-to-site VPNs between corporate offices, data center sites, cloud environments and third parties

• Create, manage and troubleshoot secure remote access for end users (VPN/ZTNA), including onboarding new access requirements and retiring legacy paths

• Manage ISP/carrier relationships: circuit procurement, escalations and performance for office internet and WAN services

• Support internal and external audits (ISO 27001, SOC 2, SOX ITGC) with evidence, control narratives and remediation of findings

• Maintain disciplined change management for all network changes via our ITSM platform

• Document everything: network diagrams, standards and runbooks kept current in our knowledge base

• Deliver secure-by-design network buildouts for new and expanding corporate offices (rack/stack, structured cabling coordination, circuit turn-up, wireless surveys)

• Support network integration workstreams for acquisitions and new entities

• Participate in change windows and an on-call rotation as needed

Job benefits

• The expected base salary for this role starts at $120-145K annually CAD.

• Actual compensation will be determined based on factors such as experience, qualifications, and market data for the region.

• Total Compensation package may be inclusive of annual incentive bonus, and equity (long-term incentive)

• Relocation assistance (as appliable and based on successful candidate circumstances)

• Medical, dental, and vision insurance coverage – 100% company paid for employees and dependents

• Company-paid life and disability insurance

• Voluntary life and critical illness coverage available

• Employee Assistance Program and virtual health care platform

• RRSP with company match

• Voluntary TFSA

• 3 weeks annually for vacation and paid holidays