Network Security Architect

Network Security Architect

Location: Montreal, QC – Hybrid, 4 days onsite / 1 day remote

Employment Type: Full-Time, Permanent

Salary: $90,000–$130,000 CAD, with flexibility for exceptional architecture-level experience

Language: Fluent French and English required

About the Role

We are looking for an experienced Network Security Architect to design, implement, and evolve secure enterprise network environments. This is a hands-on technical architecture role combining network security, routing and switching, firewalls, VPN, Zero Trust, cloud networking, IDS/IPS and secure network design.

The successful candidate will work across network, cloud, application and cybersecurity teams to design secure, scalable solutions and reduce network-security risk.

Key Responsibilities

• Design and implement enterprise network-security architectures, including firewalls, IDS/IPS, secure routing, VPNs, Zero Trust, SD-WAN and SASE.
• Assess existing network architectures, identify security gaps and recommend remediation and hardening measures.
• Design secure solutions across routing, switching, remote access, proxies and enterprise network infrastructure.
• Support cloud networking across AWS and Azure.
• Identify emerging network threats and develop controls to detect, prevent and respond to them.
• Act as an SME and escalation point for complex network-security incidents.
• Support SIEM, EDR and network anomaly-detection integrations.
• Work with network-level identity and access technologies including NAC, 802.1X and RADIUS/TACACS+.
• Collaborate with cloud, infrastructure, application and cybersecurity teams on end-to-end security architecture.
• Mentor technical team members and provide guidance on secure network design and implementation.
• Assess network-security risks and communicate technical recommendations clearly to business and technical stakeholders.

Must-Have Requirements

• CCNA and/or CCNP certification.
• 5+ years of network-security experience.
• Strong hands-on knowledge of routing, switching, VPN technologies and Zero Trust.
• Strong experience with firewalls, proxies, remote access and associated security controls.
• Experience with IDS/IPS, secure routing and network traffic analysis.
• Strong understanding of enterprise network protocols and secure network architecture.
• Bachelor's degree in Computer Science, IT, Engineering or related field, or equivalent education, professional experience and certifications.
• Fluent written and spoken French and English.

Strong Assets

Experience with cloud networking (AWS/Azure), Operational Technology (OT), SANS/GIAC certifications, SIEM/EDR integrations, CMMC, SASE, SD-WAN and enterprise audio/video network environments would be considered strong assets.

Candidates must also be eligible to obtain the required security clearance and Controlled Goods Program assessment.