Senior Network Engineer at Definity, Toronto

AI Summary

Definity, a leading Canadian insurance company, is seeking a Senior Network Engineer in Toronto, Ontario. This role involves designing, implementing, operating, and providing crucial support for complex enterprise network environments, including cloud and hybrid solutions. Key responsibilities include managing network infrastructure, deploying SASE solutions, and leading advanced troubleshooting. Candidates require at least eight years of hands-on experience in enterprise network engineering, with strong expertise in Cisco, Arista, and Check Point platforms.

The Opportunity at Definity

Definity, a prominent Canadian insurance provider, is actively seeking a highly experienced Senior Network Engineer to join its team in Toronto. This pivotal role involves the comprehensive design, implementation, operation, and ongoing support of a sophisticated enterprise network environment. The successful candidate will bring deep expertise in core networking technologies such as routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity. This position demands strong troubleshooting capabilities, a knack for automation, and the ability to significantly contribute to network architecture and long-term strategic planning. As a key member of the Network Engineering team, you will participate in a weekly on-call rotation to ensure continuous support for production environments. This role offers the chance to work across diverse network environments, including cloud, on-premise, and hybrid setups, ensuring high availability, performance, and resiliency for critical systems. Your work will directly impact how Definity provides its essential insurance services across Canada.

Key Responsibilities and Expertise

As a Senior Network Engineer, your responsibilities will include designing, deploying, configuring, and maintaining enterprise-scale network infrastructure across various cloud, on-premise, and hybrid environments. You will manage and provide support for LAN, WAN, WLAN, and data centre networks, ensuring optimal performance and resilience. A significant part of this role involves provisioning, configuring, and troubleshooting internet circuits, including DIA, MPLS, VPN, and essential cloud connectivity. You will be instrumental in designing and implementing Secure Access Service Edge (SASE) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments. Expertise in implementing and supporting routing protocols such as BGP, OSPF, EIGRP, along with VLANs, STP, and VXLAN, is crucial. You will also design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments. Leading advanced troubleshooting across layers 1–7, including packet capture and traffic analysis using tools like Wireshark and tcpdump, is a core expectation. Participation in a weekly on-call rotation is required to provide after-hours and weekend support for critical production environments. Furthermore, you will develop and maintain automation solutions using Python, Bash, APIs, and Ansible to enhance operational efficiency. This role demands a proven ability to migrate traditional VPN and perimeter-based architectures to Zero Trust / SASE models, leveraging your extensive experience.

What You Bring to Definity

Candidates for this Senior Network Engineer position should possess at least eight years of hands-on experience in enterprise network engineering. Strong expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls, including Maestro, is essential. You should have significant experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model. Practical experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components is highly valued. A deep understanding of TCP/IP, routing protocols, and network security principles is fundamental. The ability to support 24x7 production environments, including participation in an on-call rotation, is a key requirement. Strong knowledge of ITSM processes and tools such as ServiceNow, along with hands-on experience with automation, scripting, and Infrastructure as Code, will be beneficial. Experience with cloud networking across AWS, Azure, and GCP environments is also expected. Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered a significant asset, demonstrating your commitment to continuous learning and professional network development. Definity values diverse backgrounds and perspectives, encouraging all qualified individuals to apply, even if they don't meet every single requirement.