At a glance
- Experience
- 10+ years experience
- Workplace
- Hybrid
- Location
- Montréal
About the role
- The organization is seeking a Principal Network Engineer to serve as the technical lead for an enterprise network transformation.
- This is the highest-level individual contributor role on the Network Engineering team, tasked with designing the Zero Trust Network Access framework and managing the Palo Alto Panorama environment.
Responsibilities
- Act as the technical expert for the Network 2.0 ZTNA program, owning architecture, leading build reviews, establishing engineering standards, and addressing critical implementation issues.
- Build and validate the full ZTNA architecture across all primary and international sites by defining network zones, segmentation policy, and device posture requirements.
- Manage Palo Alto Panorama at the platform level, covering template hierarchy, device group creation, policy distribution oversight, and configuration drift prevention.
- Develop AWS and Palo Alto Panorama cloud integration, detailing cloud-native firewall policy, VPC topology, and on-premises ZTNA fabric combinations.
- Lead the Palo Alto Cloud Identity Engine architecture in partnership with IAM to construct the identity-to-network enforcement model and direct rule migration.
- Direct GlobalProtect architecture decisions, including agent configuration, split tunneling policy, certificate trust chain, and version compliance standards.
- Develop and maintain network architecture documents, decision records, and a runbook library.
- Lead global site topology mapping by detailing international sites, defining tiered support models, and producing hardware refresh sequencing plans.
- Partner with the Automation / Network Reliability Engineer to build self-healing policy frameworks, Panorama API automation patterns, and CI/CD pipeline standards.
- Represent Network Engineering in cross-functional architecture reviews alongside IAM, Cloud Infrastructure, Security, and Central Technology.
Requirements
- 10+ years of enterprise network engineering with demonstrated depth in large-scale architecture building.
- Advanced knowledge of Palo Alto NGFW and Panorama, including template hierarchy, device groups, security policy development, NAT, decryption policy, and multi-vsys environments.
- Proven ZTNA architecture experience building a ZTNA deployment with understanding of segmentation models, policy logic, and failure modes.
- Comprehensive knowledge of GlobalProtect covering agent architecture, gateway configuration, certificate trust, split tunneling policy, and troubleshooting.
- Hands-on AWS network architecture experience including VPC build, Transit Gateway, Direct Connect, AWS Network Firewall, and cloud-native connectivity patterns.
- Understanding of identity-to-network enforcement patterns on how identity signals translate into firewall policy.
- Grasp of SD-WAN concepts and Prisma SD-WAN or equivalent for intelligent path selection, application-aware routing, and WAN optimization.
- Experience authoring network architecture documentation, design decision records, and engineering standards.
- Ability to work independently as a reliable contributor with a senior manager without needing close supervision.
- Clear communicator across technical and non-technical audiences.
Preferred qualifications
- Hands-on experience with Palo Alto Cloud Identity Engine integrating Okta or Entra group membership into NGFW policy enforcement.
- Network automation depth using Python, Ansible, or Panorama API scripting for policy automation, compliance checking, or self-healing configurations.
- Experience in GCP network configuration such as VPC Service Controls, Cloud Armor, or hybrid connectivity models.
- Experience working in a multi-studio, multi-site entertainment or gaming enterprise with geographically distributed international infrastructure.
- Active certifications including PCNSE, ZTNA specialist, or AWS Advanced Networking Specialty.
Benefits
- Health & Wellness
- Time Off to Recharge
- Financial Well-being
- Life & Family Support
- Volunteer and Community Initiatives
- Learning & Development
- Exclusive Perks
Skills
- Palo Alto NGFW
- Panorama
- GlobalProtect
- AWS
- AWS Network Firewall
- Transit Gateway
- Direct Connect
- Prisma SD-WAN
- Palo Alto Cloud Identity Engine
- Python
- Ansible
- GCP
Show all 15 skills
- Cloud Armor
- Intune
- Okta
