Firewall Engineering, Senior Specialist

*
* Who We Are:

** Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.
Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments.

As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.
** Who You Will Work With:
** The vacant Firewall Engineering, Senior Specialist role will report to the Leader, Infrastructure Engineering. We are currently recruiting for a full-time Firewall Engineering, Senior Specialist to be part of our Threat & Vulnerability Management team within Cybersecurity. This role will provide expertise to support and advance the Network Security practice at Interac and work with cross functional teams to ensure products are built on secure network foundations.
*
* What You Will Do:

** Network Security
* Work with product and architecture teams as a network security subject matter expert and provide security advice to segmentation, network zoning, and access controls
* Supporting network security capabilities including; firewall, UTM, NAC, DNS Firewall, NDR, DDoS/CDN, and WAF, etc
* Support change management in providing oversight to changes in network security capabilities
* Review and approve changes and designs made by managed service providers (MSPs) to network security services/capabilities
* Review solution architecture and provide input back to security architects

Use Case Management
* Analyze threat models and threat intelligence to design, develop, deploy and test detection and protection use cases (e.g. custom IDS/IPS signatures)
Situational Awareness
* Support the development of network mapping activities to aid in the understanding and contextual analysis of nodes and their connectivity in on-prem and cloud environments

Standards and Patterns
* Provide feedback to network architectural patterns
* Support development of network security standards and patterns based on requirements analysis of security compliance, Concept of Operations (CONOPs), and Threat model analysis

Security Capability Effectiveness
* Support planning of technical security tests (e.g. infrastructure penetration tests, network segmentation tests)
* Develop test cases, and security coverage mapping to support security capability effectiveness testing

Security Configuration Management
* Develop and implement hardening and security configuration baselines for network security capabilities

Content Analysis
* Support the analysis of network traffic and packet captures (PCAPs) for threat hunting and incident response.

Threat Modeling
* Perform infrastructure threat modelling on new systems, products, and features and facilitate secure architecture and design discussions.

Reporting
* Develop and report on actionable KPIs and KRIs against network security policies and standards
* Clearly communicate with both technical and non-technical stakeholders, ensuring transparency and understanding of security measures.
*
* What You Bring:

*** 5-7+ years of experience in Network Security or related fields
* Post-Secondary degree or diploma in Engineering, Programming/Systems, Computer Science, or other related discipline.
* Eligibility to work for Interac Corp. in Canada in a Full Time Capacity.
** Knowledge and Skills
*** Expertise in networking and network security
* Experience with firewalls, UTMs, DDoS/CDN, NDR, DNS Firewall,
* Strong understanding of security risks, threats, and vulnerabilities
* Experience with threat modelling, design reviews, and risk analysis
* In-depth knowledge of authentication, authorization, network security, vulnerability exploitation, and vulnerability remediation.
* Experience with overseeing…