Ottawa (Downtown), ON, CA
Senior Network Security Specialist
Take a central role
The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in an organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in our environment.
Building on the principles that have always guided us – excellence, integrity and respect – we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.
With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers: Working Here - Bank of Canada
Find out more about the next steps in our Recruitment process.
About the Position
We are seeking a forward-thinking Senior Network Security Specialist to join Core Technology Services (CTS) portfolio within the ITS Department. Our team is recognized Bank wide for being diverse, inclusive, and passionate about enabling a digital, ready, and resilient organization.
Reporting to the Assistant Director, Network and Security Services, you will contribute to a worldclass organization that pairs strong engineering practices with automation, standardization, and modern delivery approaches.
What you will do
As a Senior Network Security Specialist, you will support the design, implementation, and ongoing operation of secure, resilient network security controls across cloud and traditional environments. This role focuses on hands-on execution, operational excellence, and continuous improvement of enterprise security posture.
Your responsibilities will include:
- Cloud Network Security Support
- Integrate and mature key network security services, including Web Application Firewall (WAF), Distributed Denial-of-Service (DDoS) defenses, web filtering, and Data Loss Prevention (DLP), within the broader cloud security framework and in alignment with Bank security architecture.
- Assist with secure landing zone configurations, network segmentation, and secure service exposure.
- Support application teams during migrations by helping implement secure connectivity and protection patterns.
- Firewall & Segmentation Management
- Manage firewall policies, rule sets, and segmentation models across cloud and hybrid environments.
- Support policy optimization, rule lifecycle management, and configuration standardization.
- Participate in security reviews to identify redundancies, risks, and opportunities to simplify configurations.
- Network Security Operations
- Support day-to-day operations of firewalls, secure connectivity, and network protection platforms.
- Troubleshoot complex network security incidents and performance issues.
- Develop and improve deployment and operations support documentation
- Participate in change management processes to ensure secure, traceable, and well-documented updates.
- Automation & Standardization
- Leverage automation and AI best practices to enhance efficiency and security, within our firewall environment
- Support centralized management and consistent enforcement of policies across environments.
- Provide development, implementation, and support services for the automation and scripting of rule implementation
- Participate in change management processes to ensure secure, traceable, and well-documented updates.
Note - The nature of this work will require additional paid on-call as well as paid overtime. The Bank offers flexible work hours to accommodate.
What you need to succeed
We are looking for team members who are curious and critical thinkers, who enjoy digging deeper into problems and always questioning the “why.” You are also a great teammate, have excellent communications skills, and are a self-starter by nature.
In addition, you have
- Strong hands-on experience with enterprise network security technologies, including firewalls (e.g., Check Point, Cisco, Palo Alto), IDS/IPS, proxy/web filtering platforms, and network segmentation.
- Experience with implementing cloud-based secure web gateway (SWG) and CASB solutions.
- Working knowledge of cloud network security in platforms such as Microsoft Azure, including Virtual Networks, NSGs, Azure Firewall, Application Gateway/WAF, DDoS Protection and Private Links.
- Familiarity with automation and scripting concepts to support configuration consistency and operational efficiency.
- Understanding of modern security concepts such as Zero Trust, software-defined infrastructure (SDI), and micro-segmentation.
- In-depth experience in managing and supporting firewalls and troubleshooting network issues, dynamic routing and related technologies
- Experience supporting hybrid environments spanning on-premises and cloud infrastructure.
Assets
- Understanding of container and platform networking security concepts (e.g., Kubernetes networking, ingress/egress control, service segmentation).
- Any relevant Cyber Security and industry certifications (Checkpoint, Cisco, CISSP, etc..)
Your education and experience
Your combined education and work experience demonstrate that you have the competencies and skills for the position. We are ideally seeking candidates with a bachelor’s degree in computer science, engineering, or another related discipline along with 6+ years of related experience.
Innovative Mindset
We value candidates who demonstrate adaptability, curiosity, and a willingness to learn new technologies, including AI and digital tools. We seek individuals who can think critically about data, question existing processes, and find ways to simplify our work while embracing change and new ways of doing things.
Language requirement
The Bank’s work environment is conducive to the use of both of Canada’s official languages - English and French. Although the position language requirement is English or French essential, we do encourage everyone to improve second their language proficiency for future career growth and to contribute towards fostering a bilingual environment.
What you need to know
-
- Priority will be given to Canadian citizens and permanent residents
- Security level required: Be eligible to obtain Secret
- There will be no relocation assistance provided
- Please save a copy of the job poster. Once the closing date has passed, it will no longer be available.
Hybrid Work Model
The Bank offers work arrangements that provide employees with flexibility, enable high-performing teams, and support an excellent workplace culture. Most employees can telework from home for a portion of each month as part of the Bank’s hybrid work model, and they are expected on site at the Bank location a minimum of 12 days per month to help build connections between colleagues. You must live in Canada, and within reasonable commuting distance of the office.
What you can expect from us
This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider.
-
- Salaries are based on qualifications and experience and typically range from $111,051 to $130,649 (job grade 17)
- The Bank offers an incentive for successfully meeting expectations at 7 to 10% of your base salary. The Bank offers additional performance pay (5%) for those who exceed expectations. Exceptional performers who far exceed expectations may be eligible for higher performance pay.
- Flexible and comprehensive benefits so you can choose the level of health and dental coverage that meets your needs
- Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
- Option to join the indexed, defined-benefit pension plan after 24 consecutive months of service
We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.