City : Toronto

Category : PERMANENT FULLTIME

Industry : Insurance

Employer : Definity

The Opportunity

We are seeking a highly experienced Senior Network Engineer to design, implement, operate, and support a complex enterprise network environment. This role requires deep expertise in routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity, combined with strong troubleshooting skills, automation capabilities, and the ability to contribute to network architecture and long-term strategy. The successful candidate will be a key member of the Network Engineering team and will participate in an on-call rotation (weekly) to support production environments.

What to Expect

• Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on-prem, and hybrid environments
• Manage and support LAN, WAN, WLAN, and data center networks ensuring high availability, performance, and resiliency
• Provision, configure, and troubleshoot internet circuits including DIA, MPLS, VPN, and cloud connectivity
• Design and implement SASE (Secure Access Service Edge) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments
• Implement and support routing protocols (BGP, OSPF, EIGRP), VLANs, STP, VXLAN, and related technologies
• Design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments
• Lead advanced troubleshooting across layers 1–7 including packet capture and traffic analysis using tools such as Wireshark and tcpdump
• Participate in a weekly on-call rotation providing after-hours and weekend support for production environments
• Develop and maintain automation solutions using Python, Bash, APIs, and Ansible to improve operational efficiency

What you Bring

• 8+ years of hands-on experience in enterprise network engineering
• Strong expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls including Maestro
• Experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model 
• Hands-on experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components 
• Proven ability to migrate traditional VPN and perimeter-based architectures to Zero Trust / SASE models
• Deep understanding of TCP/IP, routing protocols, and network security principles
• Experience supporting 24x7 production environments with on-call rotation
• Strong knowledge of ITSM processes and tools such as ServiceNow
• Hands-on experience with automation, scripting, and Infrastructure as Code
• Experience with cloud networking across AWS, Azure, and GCP
• Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered an asset

Salary Range: $69,500-$119,500