Intermediate Specialist, Cloud & Infrastructure Engineering

Definity Insurance Company • Toronto, ON

9d • CA$69,500 - CA$119,500 • Hybrid

About The Position

We are seeking a highly experienced Senior Network Engineer to design, implement, operate, and support a complex enterprise network environment. This role requires deep expertise in routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity, combined with strong troubleshooting skills, automation capabilities, and the ability to contribute to network architecture and long-term strategy. The successful candidate will be a key member of the Network Engineering team and will participate in an on-call rotation (weekly) to support production environments.

Requirements

• 8+ years of hands-on experience in enterprise network engineering
• Strong expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls including Maestro
• Experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model
• Hands-on experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components
• Proven ability to migrate traditional VPN and perimeter-based architectures to Zero Trust / SASE models
• Deep understanding of TCP/IP, routing protocols, and network security principles
• Experience supporting 24x7 production environments with on-call rotation
• Strong knowledge of ITSM processes and tools such as ServiceNow
• Hands-on experience with automation, scripting, and Infrastructure as Code
• Experience with cloud networking across AWS, Azure, and GCP

Nice To Haves

• Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered an asset

Responsibilities

• Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on-prem, and hybrid environments
• Manage and support LAN, WAN, WLAN, and data center networks ensuring high availability, performance, and resiliency
• Provision, configure, and troubleshoot internet circuits including DIA, MPLS, VPN, and cloud connectivity
• Design and implement SASE (Secure Access Service Edge) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments
• Implement and support routing protocols (BGP, OSPF, EIGRP), VLANs, STP, VXLAN, and related technologies
• Design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments
• Lead advanced troubleshooting across layers 1–7 including packet capture and traffic analysis using tools such as Wireshark and tcpdump
• Participate in a weekly on-call rotation providing after-hours and weekend support for production environments
• Develop and maintain automation solutions using Python, Bash, APIs, and Ansible to improve operational efficiency

Benefits

• Hybrid work schedule for most roles
• Company share ownership program
• Incentive Program - Eligible employees may participate in various incentive plans which are paid out at the discretion of the company and subject to individual and company performance.
• Pension and savings programs, with company-matched RRSP contributions
• Paid volunteer days and company matching on charitable donations
• Educational resources, tuition assistance, and paid time off to study for exams
• Focus on inclusion with employee groups, support for gender affirmation surgery, access to BIPOC counsellors, access to programs for working parents
• Wellness and recognition programs
• Discounts on products and services

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed