Network Security Architect

The Network Security Consultant is a senior subject matter expert responsible for the governance, architecture, and oversight of enterprise network security controls across on-premises and hybrid cloud environments. This role focuses on Cisco-based security platforms and zero trust principles, providing security guidance, participating in architecture reviews, and supporting incident response and vulnerability management initiatives. The consultant will collaborate with internal teams and external partners to strengthen network security capabilities and ensure compliance with organizational and regulatory standards. Responsibilities:

• Design, implement, and manage enterprise network security controls using Cisco security platforms such as Cisco Firepower Threat Defense, FMC, Umbrella DNS, Web Security Appliances, and Secure Malware Analytics.
• Provide governance oversight and security expertise for remote access solutions including VPN services aligned with enterprise security standards and zero trust principles.
• Troubleshoot and triage network security incidents, alerts, and anomalies related to firewall, IPS, DNS, and web security technologies.
• Continuously review and tune IPS/IDS signatures, firewall rules, and traffic inspection policies to enhance detection and reduce false positives.
• Participate in Architecture Review Board meetings to evaluate and approve network and application architectures ensuring compliance with security standards and segmentation models.
• Provide security design guidance and recommendations for new and existing services adhering to zero trust and enterprise security frameworks.
• Design and secure hybrid environments integrating on-premises infrastructure with Azure cloud services, including Azure networking and security controls.
• Support security integration efforts related to Broadcom VMware Cloud Foundation technologies and virtualized networking/security stacks.
• Evaluate and integrate emerging network security technologies including automation, orchestration, and AI/ML-based threat detection.
• Conduct deep traffic analysis and threat investigations using network telemetry, packet capture tools, and security analytics platforms.
• Lead or support incident response activities related to network security breaches including containment, root cause analysis, and remediation.
• Identify security gaps and risks in network security infrastructure and recommend remediation strategies aligned with best practices and compliance.
• Collaborate with security and infrastructure teams to assess and remediate network-related vulnerabilities.
• Support and participate in network security penetration testing and validation activities.
• Contribute to disaster recovery and business continuity planning from a network security perspective.
• Review and assess traffic flow configurations on load balancing technologies, particularly F5 load balancers, ensuring alignment with security controls.
• Ensure network security controls are resilient, recoverable, and aligned with failover and replication strategies across datacenters.
• Develop and maintain documentation including network security architecture designs, standards, and operational procedures.
• Act as a trusted advisor providing guidance on secure network design and implementation to cross-functional teams.

• Minimum 10 years of progressive IT experience with at least 8 years in network security engineering, architecture, operations, or enterprise firewall administration.
• Active professional-level or expert-level certification such as CISSP, CISM, CCSP, CCIE Security, CCNP Security, JNCIP-SEC, JNCIE-SEC, CCSE, Palo Alto Networks Certified Network Security Professional/Architect, or Microsoft Azure Security certifications.
• Strong hands-on experience with Cisco Firepower Threat Defense, FMC, IPS/IDS, DNS and web security technologies.
• Proven ability to design and govern secure network architectures including segmentation, zoning, and zero trust principles.
• Experience with Azure networking and security controls including VNets, NSGs, Azure Firewall, IAM, PAM, Conditional Access, and RBAC.
• Ability to travel within Saskatchewan as required.
• Willingness to work full-time on-site or hybrid remote within Canadian time zone business hours (8 AM to 5 PM CST, Monday to Friday).

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field.
• Experience with Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Network Detection and Response (NDR), Endpoint Detection and Response (EDR), and vulnerability management platforms.
• Familiarity with network security penetration testing methodologies.
• Knowledge of disaster recovery and business continuity planning related to network security.
• Expertise in load balancing technologies, especially F5 load balancers.
• Experience with Broadcom VMware Cloud Foundation and virtualized networking/security stacks.
• Strong communication skills and ability to act as a trusted advisor on network security matters.
• Cloud security certifications such as Microsoft Azure Security Engineer Associate, Azure Solutions Architect Expert, or Azure Network Engineer Associate.

• Position can be performed remotely but regular presence in Regina, Saskatchewan office is considered an asset.
• Must be able to travel within Saskatchewan for site visits.
• Work hours aligned with eHealth business hours: 8 AM to 5 PM CST, Monday to Friday.
• Willingness to work full-time on-site or hybrid remote from anywhere in Canada.

• Standard work schedule: Monday to Friday, 8 AM to 5 PM Central Standard Time (CST).