Senior Network & Security Consultant

Malleum

8d • Remote

About The Position

Malleum is seeking a client-facing, senior-level Network & Security Consultant to provide hands-on design, administration, hardening, and operational support for client network and security infrastructure, while supporting active incident response engagements. The consultant works remotely and sometimes on-site in client environments, including sovereign, regulated, and cleared settings. The role requires deep technical expertise, strong client presence, composure, and the ability to work extended hours alongside the incident response team during crises.

The consultant supports clients across government, defense, financial services, and critical infrastructure, helping maintain and recover mission-critical networks and systems. Responsibilities span network operations, security tooling, cloud and hybrid environments, compliance-aligned hardening, vulnerability remediation, incident response, disaster recovery, documentation, and client communication. The role also includes participation in an on-call rotation and contribution to Malleum’s managed, project-based, and incident response service offerings.

Requirements

• At least 7 years of hands-on experience designing, deploying, troubleshooting, and optimizing enterprise network and security infrastructure across multi-vendor environments.
• Deep expertise in routing, switching, network segmentation, and firewall policy management, with strong proficiency in Fortinet, Palo Alto, and/or Cisco technologies.
• Demonstrated success working directly with clients, including clear communication, professionalism, stakeholder management, and explaining technical risks and decisions to non-technical leaders.
• Significant progressive experience combining network and cybersecurity responsibilities; consulting, MSP, MSSP, or incident response experience is ideal.
• Strong working knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS, DHCP, and segmentation.
• Solid understanding of ZTNA fundamentals, including identity-centric access, least privilege, micro-segmentation, device posture, and continuous verification.
• Hands-on experience with wireless controllers and NAC solutions.
• Ability to perform calmly, methodically, and effectively under pressure during long, high-intensity incident response engagements.
• Willingness and availability to work odd hours, weekends, and extended shifts when supporting active incident response matters.
• Working knowledge of Windows Server, Active Directory, Group Policy, and Microsoft 365/Azure administration.
• Familiarity with Linux administration and scripting in PowerShell, Bash, or Python for automation and rapid response.
• Experience with SIEM/EDR platforms such as Microsoft Sentinel, Defender, CrowdStrike, or Splunk, including rapid deployment in incident response scenarios.
• Solid grasp of cybersecurity fundamentals, including identity, encryption, logging, hardening, and zero-trust principles.
• Comfort working across multiple client environments, tooling stacks, and change-management processes simultaneously.
• Eligibility for Government of Canada security clearance at Secret level or higher.

Nice To Haves

• Hands-on ZTNA delivery experience.
• Exposure to incident response frameworks such as NIST SP 800-61 and SANS PICERL.
• Certifications such as CompTIA Security+, Network+, CCNA, CCNP Security, NSE, PCNSA, MS-102, AZ-104, or equivalent.
• CISSP Associate, SSCP, GCIH, or GCFA certification.
• Existing Government of Canada security clearance; existing clearance is highly valued.
• English/French bilingualism.

Responsibilities

• Administer, monitor, and maintain client network infrastructure, including routers, switches, firewalls, VPNs, and wireless systems.
• Operate and tune client security tools, including EDR/XDR, SIEM, email security, vulnerability scanners, and identity platforms such as Entra ID and Okta.
• Design, deploy, and operate Zero Trust Network Access (ZTNA) solutions, including Cloudflare edge, access, and tunnel services.
• Support Microsoft 365, Azure, AWS, and hybrid environments in accordance with client security baselines and compliance requirements.
• Implement and enforce hardening standards aligned with CIS Benchmarks, NIST 800-53/171, ITSG-33, and client-specific frameworks.
• Lead patch management, vulnerability remediation, and configuration management across client servers, endpoints, and network devices.
• Support active incident response engagements by deploying and tuning tools, isolating systems, preserving evidence, rebuilding infrastructure, and assisting with containment, eradication, and recovery.
• Work odd hours, evenings, weekends, and extended shifts during active incident response engagements, including rapid mobilization when clients are under attack.
• Partner with incident response consultants, forensic analysts, and threat hunters to execute response playbooks.
• Maintain client backup, disaster recovery, and business continuity systems and conduct regular testing.
• Produce client deliverables, including network diagrams, configuration documentation, runbooks, SOPs, incident response action logs, and status reports.
• Standardize provisioning, onboarding/offboarding, and access control workflows in client environments.
• Serve as a technical point of contact and communicate with client stakeholders, from end users to executive leadership, during routine operations and crises.
• Contribute to scoping, estimation, and continuous improvement of managed, project-based, and incident response service offerings.
• Participate in an on-call rotation supporting critical client infrastructure and security events.

Benefits

• Competitive compensation.
• On-call and incident response premiums.
• Performance incentives.
• Comprehensive benefits.
• Continuous learning budget.
• Certification sponsorship.
• Clear paths into senior engineering, incident response, architecture, or security specializations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed