Infrastructure Security Specialist

When applicable, Bombardier promotes flexible and hybrid work policies.
Why join us?At Bombardier, we design, build and maintain the world’s peak-performing aircraft for the world’s most discerning people and businesses, governments and militaries. We have been successful in setting the highest standards by putting our people at the heart of it all, and defining excellence, together.
Working at Bombardier means operating at the highest level. Every day, you are part of a team that delivers superior experiences and products, pushing the boundaries of what's possible in our industry and beyond. By prioritizing employee growth and development, we empower everyone to reach their full potential on their own terms, because the best work happens when you are free to be yourself and share your unique expertise.
Bombardier’s Benefits ProgramWith our employees’ well-being top of mind, we offer a comprehensive and competitive Benefits Program, which includes the following:
Insurance plans (Dental, medical, life insurance, disability, and more)
Competitive base salary
Retirement savings plan
Employee Assistance Program
Tele Health Program
Role overviewThe Infrastructure Security Specialist is responsible for the administration, implementation, technical evolution, and continuous improvement of enterprise network security infrastructure. The role provides senior technical expertise in firewalls, network security controls, secure connectivity, segmentation, VPN, and related security technologies across a geographically distributed enterprise environment. The role is expected to operate independently, provide technical guidance, and ensure network security solutions are secure, resilient, scalable, and aligned with enterprise security and technology standards
Working closely with Network, Infrastructure, Cloud, Cybersecurity, Architecture, and project teams, the position supports complex operational issues while leading or contributing to security infrastructure projects, technology upgrades, and modernization initiatives.
What are your contributions to the team?
Firewall & Security Platform Administration:
Administer and maintain enterprise firewall and network security platforms, including configuration, policy management, upgrades, patching, monitoring, and lifecycle activities.
Security Implementation & Engineering:
Design, configure, implement, and validate firewall, VPN, network access, segmentation, and other network security solutions in accordance with approved architectures and standards.
Firewall Policy & Access Management:
Develop, implement, review, and optimize firewall rules, access controls, NAT, application controls, and security policies while maintaining appropriate security, traceability, and least-privilege principles.
Network Segmentation & Secure Connectivity:
Implement and evolve network segmentation, DMZs, secure remote access, site-to-site connectivity, cloud connectivity, and other security controls supporting enterprise and hybrid environments.
Operational Reliability & Troubleshooting:
Lead investigation and resolution of complex firewall and network security incidents, connectivity issues, performance problems, and policy-related issues, including root-cause analysis and corrective actions.
Security Infrastructure Projects & Evolution:
Lead or provide senior technical expertise for security infrastructure projects, technology migrations, firewall replacements, platform upgrades, cloud security integration, and infrastructure modernization.
Security Monitoring, Compliance & Resilience:
Support security monitoring, vulnerability remediation, logging, configuration compliance, high availability, disaster recovery, and security control validation in collaboration with Cybersecurity and operational teams.
Technical Leadership & Continuous Improvement:
Act as the network security SME, provide technical guidance to Network, Cloud, Infrastructure, Cybersecurity, and project teams, contribute to standards and roadmaps, and identify opportunities for automation and continuous improvement.
How to thrive in this role?Required Qualifications
Bachelor degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline, or an equivalent combination of education and professional experience.
5+ years of professional experience in firewall administration, network security engineering, network infrastructure security, or a related enterprise technology discipline.
Strong hands-on experience with enterprise firewall and network security platforms, including configuration, policy management, troubleshooting, upgrades, and lifecycle management.
Strong knowledge of network security principles and technologies, including firewalls, NAT, VPN, IPS/IDS, network segmentation, DMZs, access control, and secure network design.
Demonstrated experience designing, implementing, and troubleshooting complex firewall and network security solutions within large or geographically distributed enterprise environments.
Experience supporting security infrastructure across data centers, corporate sites, remote locations, and cloud environments, preferably including Azure and/or AWS.
Strong understanding of security architecture, least privilege, network segmentation, high availability, logging/monitoring, vulnerability management, and security compliance principles.
Working knowledge of security automation and scripting, such as Python, PowerShell, Ansible, APIs, or equivalent technologies, with an understanding of Infrastructure-as-Code and DevOps practices.
Strong analytical, communication, and collaboration skills, with the ability to independently resolve complex technical issues and act as a senior technical SME across Network, Infrastructure, Cloud, Cybersecurity, Architecture, and project teams.
Fluency in English and French, both written and spoken.
Preferred Qualifications
Experience with major enterprise security platforms such as Palo Alto, Fortinet, Cisco, Check Point, or equivalent technologies.
Experience with cloud network security, hybrid/multi-cloud connectivity, SD-WAN security, Zero Trust technologies, and advanced network segmentation.
Relevant professional certifications such as PCNSE, NSE/FCP, CCNP Security, CCIE Security, CISSP, or equivalent vendor/security certifications.
Experience developing enterprise firewall/security standards, reference architectures, security implementation methodologies, automation, and multi-year network security technology roadmaps.
Bombardier is an equal opportunity employer and encourages persons of any race, religion, ethnicity, gender identity, sexual orientation, age, immigration status, disability or other applicable legally protected characteristics to apply.
JobInfrastructure Security Specialist
Primary LocationAdministrative Centre (CA)
OrganizationAerospace Canada
Employee StatusRegular
Requisition16556 Infrastructure Security Specialist
#J-18808-Ljbffr