IT Senior Analyst, Network Security (NSPM)

Overview of The Role:

We are seeking a detail-oriented Senior Analyst – IT Network Security to lead the deployment, configuration, and ongoing management of our Network Security Policy Management (NSPM) solution (e.g., Tufin, Algosec, Firemon). The successful candidate will ensure our network security controls are efficient, compliant, and aligned with business and regulatory requirements. This role will act as the subject-matter expert (SME) for NSPM and support broader network security operations.  Knowledge of microsegmentation solution is a plus (ex: Illumio, Guardicore).

How You Will Make Contributions That Matter:

NSPM Deployment & Management, including Operations

• Lead the design, implementation, and optimization of the organization’s NSPM platform (Tufin or equivalent).  Develop and maintain network security policies, rule bases, and workflows within the NSPM solution.

• Integrate NSPM with firewalls, routers, switches, and cloud platforms to achieve centralized visibility and control.  Expertise in Cisco FTD/FMC and Palo Alto /Panorama is very important.

• Manage daily NSPM operations: policy reviews, firewall rule cleanups, access requests, and rule lifecycle management.  Troubleshoot NSPM-related issues and manage vendor performance.

• Liaise with vendors and partners for product upgrades, patches, and enhancements.

• Ensure all firewall and network security policies align with internal security standards, industry best practices, and regulatory frameworks (e.g., NIST, ISO 27001, etc).

• Conduct periodic policy audits and risk assessments using NSPM reports.

• Provide recommendations for policy optimization, segmentation, and least-privilege access.

• Collaborate with IT, security and compliance teams to integrate NSPM into security operations and change control processes.

Other responsibilities

• Microsegmentation: Design, implement, and manage microsegmentation policies. Analyze network traffic to identify and mitigate potential security threats. Onboard new applications and servers.  Knowledge of Illumio software is a plus.

• Firewall Rule Management: Configure, manage, and maintain firewall rules to ensure secure and efficient traffic flow. Conduct regular reviews and audits of firewall rules to ensure compliance with security policies. Troubleshoot and resolve issues related to firewall configurations and traffic flow.

• Network Traffic Analysis: Continuously monitor and analyze network patterns and performance and make necessary recommendations & adjustments to ensure secure and efficient data flow. Identify and address anomalies or unusual traffic patterns that could indicate security breaches.

• Network security: Implement and maintain network security measures, including firewalls, Identity (ISE), web filtering, VPNs, IPS systems, and other security technologies to protect the integrity and confidentiality of network data

• Collaboration: Works with different teams including security, OT, etc, to deliver integrated change where appropriate, and to ensure that our network infrastructure is secure and robust end-to-end

• Training and Mentoring: Mentor network team and provide training on best practices and new technologies to ensure a high level of expertise within the team.

• Documentation: Maintain detailed documentation of network configurations, changes, and procedures, and provide regular reports on network performance, security incidents, and project progress.

You are best suited for the role if you have the following qualifications:

Required

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).

• 5-8 years of experience in IT network security, with hands-on expertise in firewall administration and policy management.

• Practical experience with NSPM solutions (Tufin préférable, AlgoSec, or FireMon).

• Ability to work with NAC & Web filtering. Strong knowledge of network protocols (TCP/IP, DNS, VPN, BGP, OSPF, etc.).

• Experience with firewalls from major vendors (Cisco, Palo Alto).

• Solid understanding of security frameworks and compliance requirements.

• Experience in managing Firewall Policies : Access control policies, NAT policies, IPS Policies, 

• Ability to troubleshoot firewall related issue

• Experience in using packet capture tools 

• Knowledge in Firewall and network security best practice

• Expertise in firewall rule base design and optimization.

• Strong analytical, troubleshooting, and problem-solving abilities.

• Ability to translate business requirements into technical security controls.

• Excellent communication and documentation skills.

• Proactive, detail-oriented, and capable of working independently as well as in a team.

Preferred

• Hands-on experience with cloud networking and security policies (Azure is a plus).

• Familiarity with scripting and automation (Python, Ansible, REST APIs).

• Relevant certifications: CCNA, CISSP, CCNP Security, Palo Alto PCNSE, Tufin Certified Security Expert (TCSE).

• Experience in a manufacturing environment is a plus

As part of their duties, the incumbent will have to communicate and collaborate in English, both orally and in writing with colleagues or other stakeholders in Quebec as well as in the rest of Canada or in North America. 

We support and care for our employees and their families by providing: 

• Competitive salaries 

• A hybrid work environment with the possibility to work from home 2 days a week  

• Advantageous corporate agreements 

• Full range of group insurance benefits 

• Group retirement pension plan with employer contribution 

• Purchase option of company stocks 

• Group RRSP Health and wellness program in the workplace 

• Assistance program for employees and their families 

• Saputo products at a discounted price 

Salary range: $78 170 to $102 600

*Salary offers will vary commensurate with experience, education, skills, and training. 

We support employment equity. Saputo strives to embed diversity and inclusion in its operations and invites candidates from all horizons to join its family.

Saputo welcomes and encourages applications from people with disabilities. Accommodations may be available upon request for candidates taking part in all aspects of the selection process.