Network Engineer

Location: Irvine, United States of America (Hybrid)

About the Role

Thales has a vacancy for a Network Principal who will be responsible for all aspects of Network infrastructure operations. As a subject-matter expert in some domains, you will apply full professional knowledge of network infrastructure concepts and company objectives to resolve a wide range of issues in effective and sometimes creative ways. This advanced engineering role requires working with little technical direction and only general guidance on new assignments.

Responsibilities

• Handle tickets in ServiceNow, read architecture diagrams, and construct rules based on those diagrams.
• Manage firewalls and network filters in Enterprise, Stores, and cloud networks.
• Develop and maintain Intrusion Prevention policies.
• Work with networking protocols and concepts, including:
  • Routing (OSPF, BGP)
  • VLAN, Sub-netting, Load balancing
  • TCP/IP, DNS, HTTP, TLS, SSH
• Configure and manage site-to-site and remote-access VPN connectivity.
• Implement Network Access Control and Authentication, Authorization, and Accounting (including multi-factor authentication).
• Administer web access proxy servers and URL filtering.
• Create, document, and approve network security policies and exceptions.
• Provide suggestions to team leads/managers for professional development and training plans.
• Work on projects to advance partnership opportunities between the Network Security team and other business areas.
• Collaborate with senior engineers to define network security requirements for current and future state architectures.
• Assist in prioritizing security risks, providing mitigation recommendations, and implementing compensating controls.
• Perform proof-of-concept testing for network security solutions under consideration for purchase and implementation.
• Develop and maintain network security policies, standards, processes, and workflows.
• Provide 24/7 on-call support for infrastructure-related service incidents (team rotation).

Requirements

• Bachelor’s degree in a related field with a minimum of 5-8+ years of relevant work experience, or a Master’s degree with 4+ years of relevant experience, or an equivalent combination of education and experience.
• 3+ years of experience working with Palo Alto Firewalls.
• At least one entry-level vendor certification in Network Security (Palo Alto PCNSA/PCNSE preferred, Cisco CCNA/CCNP Security, Juniper JNCIA-SEC/JNCIS-SEC, or equivalent experience).
• Excellent interpersonal, leadership, oral, and written communication skills.
• Strong planning, implementation, and troubleshooting abilities.

Preferred Qualifications

• Extensive experience with Cisco switches, Cisco Secure Client VPN, and Fortinet firewalls.
• Experience with Cisco ISE.
• ITIL experience and certifications.

Physical Demands

• Limited physical demands may arise while navigating server rooms and providing on-site network support.
• Able to lift and carry items up to 50 lbs.
• Access to secure server rooms (NATO Secret clearance required for Ottawa server room).

Schedule

Core business hours are Monday to Friday, between 9:30 AM and 3:00 PM. Some weekend and evening work may be required depending on projects and customer needs.

Pay

The anticipated Total Target Compensation (TTC), inclusive of annual salary and bonus eligibility, for this role is $110,000–$150,000 CAD annually. The company reserves the right to adjust compensation and benefits based on circumstances unrelated to an applicant’s protected status.

Benefits

• Elective Health, Dental, Vision, FSA/HSA, Voluntary Life, and AD&D insurance.
• Whole Group Life with Long-Term Care (LTC), Critical Illness, Hospital Indemnity, and Accident Insurance.
• Legal Plan, Identity Theft, and Pet Insurance.
• Retirement Savings Plan with company contribution and match (no vesting period).
• Company-paid holidays and Paid Time Off (PTO).
• Company-provided Life Insurance, AD&D, Disability, Employee Assistance Plan, and Well-being Program.