Security Specialist - Palo Alto, Guardicore, & Netskope

Location: Toronto, ON

Onsite Flexibility: Hybrid — 2 days per week onsite (subject to change)

Contract Details

Position Type: Contract Contract Duration: 1 year (with potential extension up to 2 years; conversion to permanent possible) Pay Rate: C$80.00–C$94.00 / Hour (CAD) Shift / Schedule: Monday to Friday, 9:00 AM – 5:00 PM; overtime not typical but some potential Travel Requirements: Not required

Job Summary

The IT Security Delivery Specialist is responsible for provisioning security rules in support of business objectives while following the client's standards across on-premises and cloud environments. This role plays a critical role in safeguarding the bank's global security footprint. The successful candidate will ensure the timely response to business application deployments via security policy adjustments, implementations, and assessments. The skills required to be effective in this role will include a deep understanding of firewall management using orchestration tools such as Tufin. This position is foundational to the bank's security posture — the IT Security Delivery Specialist directly contributes to protecting customers, data, and the enterprise by ensuring that firewall controls are carefully designed, rigorously implemented, and consistently enforced. Success in this role requires not only deep technical capability, but also the ability to make risk-based decisions that support both security and business objectives. The team supports firewall rules and network security for projects across the bank, operating in an enterprise-scale environment with 15,000–20,000 employees and multiple data centers, handling 2,500–3,000 firewall requests per month with a standard target SLA of 5 business days.

Key Responsibilities

Firewall Design & Delivery

Delivery of enterprise firewall solutions, including both physical and cloud-based platforms, in alignment with the client's security architecture and network standards. Develop and implement security-driven firewall policies that protect critical assets while enabling business initiatives and application onboarding. Liaise with application teams, technical asset owners, and business requestors on the crafting and implementation of firewall, segmentation, and policy rules across platforms such as Palo Alto, Guardicore, Akamai, and related products. Design and implement firewall rules on existing infrastructure. Troubleshoot network connectivity and security issues. Support a wide range of banking applications from a network security perspective. Work with firewall automation and contribute to ongoing automation improvements.

Security Governance & Risk Management

Ensure all firewall implementations meet internal security requirements, regulatory obligations, and audit expectations as set forth by Enterprise Protect. Enforce disciplined change management practices, ensuring solutions are fully documented, peer reviewed, and production ready. Act as a subject matter expert in firewall security, providing guidance on risk mitigation, exception handling, and compensating controls.

Stakeholder Engagement

Collaborate with security, network, infrastructure, and application teams across the bank to understand technical and business requirements and translate them into secure firewall designs. Partner with business stakeholders to balance security objectives with operational needs, clearly articulating risk, impact, and recommended solutions. Communicate effectively with senior technical leaders and delivery partners to ensure alignment and timely execution of initiatives.

Operational Excellence & Support

Provide senior-level (Tier 3 / Tier 4) support and consultation for complex firewall-related incidents, deployments, and avoiding service disruptions. Support large-scale initiatives with tight delivery timelines by ensuring firewall services are delivered reliably, consistently, and with a strong focus on quality. Contribute to continuous improvement of firewall delivery processes, standards, and operational readiness.

Required Skills

Experience with Palo Alto, Guardicore, and/or Netskope (Palo Alto experience considered essential; Guardicore knowledge is a strong advantage) Automation experience, including firewall automation tools ServiceNow experience ITIL v3 or ITIL v4 certification (considered non-negotiable) Strong troubleshooting skills — not just rule provisioning, but deep firewall troubleshooting Strong communication skills Demonstrated expertise in enterprise firewall technologies and network security principles Strong understanding of how different security devices integrate within a secure enterprise network environment Proven ability to operate independently, exercise sound technical judgment, and influence positive outcomes across teams Exceptional documentation, communication, and stakeholder management skills appropriate for a senior role in a regulated financial institution Strong understanding of one or more of the following core technologies and/or concepts:

• Palo Alto Firewall (with Panorama) - Guardicore Firewalls - Netskope - Shape (F5) - Tufin Policy Orchestration tool

Working knowledge of how different technologies mesh together in enterprise environments Working knowledge of security implementation in a hybrid enterprise Problem-solving and mentoring abilities Deep understanding of network routing and traffic flow Deep understanding of Layer 3 networking Knowledge of Cisco routers Knowledge of network segmentation and micro-segmentation Experience with firewall automation tools Ideally hands-on experience with at least two of: Palo Alto, Guardicore, Netskope, or Tufin Policy Orchestration tool

Preferred Skills

Banking / Financial / Large enterprise experience CISCO routing experience Palo Alto Firewall management with Panorama Guardicore Netskope Akamai Zero Trust concepts and implementation Shape Policy automation tools (e.g., Tufin) Experience in a large enterprise environment Banking experience

Education Requirements

Computer Science degree or relevant degree required (or equivalent experience) ITIL v3 or ITIL v4 certification required (non-negotiable) Relevant security certifications are a nice-to-have but not required

Required Experience

5 years of progressive experience with Firewall Technologies Minimum 5 years of relevant experience in network/firewall security

Nice-to-Have Experience

Banking, financial services, or large enterprise environment experience Firewall automation experience (automation has been in place approximately 7 years at this organization and is continually evolving) Experience at other large enterprise organizations is welcome

Medical, Vision, and Dental Insurance Plans

401k Retirement Fund

Important Notes

Interview process: 1 or 2 rounds, conducted virtually This is not a security architecture or firewall engineering design role — the engineering team handles architecture; this role focuses on firewall rule implementation, optimization, troubleshooting, and operational support

About the Client

This client is a major financial services and banking institution operating at enterprise scale, with a workforce of 15,000–20,000 employees across multiple data centers and a significant global security footprint. The organization manages thousands of firewall requests monthly across a highly complex, heavily micro-segmented environment, serving customers across banking and financial services. Teams include IT security delivery specialists, network security engineers, firewall architects, infrastructure professionals, and application teams who collaborate across on-premises and cloud environments to protect critical assets and meet rigorous regulatory obligations.

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number: 26-08911

#gttca