RSM US LLPVerified Job Source

Senior Network Security Engineer (CCNP Security Needed)

Toronto, ON
Hybrid
Posted Oct 4, 2026
1 position

$88,000–$162,000 / year

Opens an external site

Employment type: Full-time
Experience level: Senior · 5+ years
Minimum education: Professional degree
Posting language: English
Working hours: 40 hours per week

Job summary

The Senior Network Security Engineer will architect and deploy complex network security solutions, including firewalls, SDWAN, and SASE frameworks. They will also serve as a senior technical escalation point for critical incidents and provide mentorship to junior team members.

Job details

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. Position Overview We are seeking a highly skilled Senior Network Security Engineer with a current Cisco Certified Network Professional – Security (CCNP Security) certification to join our team. As a Cisco Preferred partner delivering enterprise transport, security, wireless, cloud, and data center solutions, we help clients design, implement, and optimize secure, resilient networks. This position is part of a well-established network infrastructure team composed of highly experienced, certified engineers recognized for delivering complex network and security implementations. You will serve as a hands-on technical leader and trusted advisor, designing and deploying advanced network infrastructure solutions. Key Responsibilities Network Architecture & Design – Architect and document end-to-end network security solutions including next-generation firewalls, SDWAN, segmentation, secure remote access, identity-based access control, and SASE frameworks following vendor validated designs and best practices. Implementation Leadership – Lead the deployment and integration of complex security solutions including Cisco Secure Firewall, Cisco Secure Access, Cisco Umbrella, Cisco ISE, and Cisco Meraki. Network & Security Optimization – Conduct in-depth assessments of client environments, identify gaps in security posture or policy enforcement, and deliver recommendations to improve resilience, compliance, and performance. Escalation & Problem Resolution – Act as a senior escalation point for critical incidents from managed clients, providing root-cause analysis, remediation plans, and long-term corrective actions. Client Advisory & Engagement – Engage with technical and executive stakeholders to align security architectures with business objectives. Deliver technical workshops, roadmap sessions, and security assessments. Cross-Domain Collaboration – Partner with cloud, infrastructure, and managed services teams to design holistic solutions that span security, networking, and application delivery. Knowledge Sharing & Mentorship – Mentor junior engineers and contribute to internal best practices and reference architectures to elevate overall team capability. Required Qualifications Active Cisco Certified Network Professional – Security (CCNP Security) certification. 5+ years of progressive experience designing, implementing, and supporting enterprise-class network and security solutions. Deep technical expertise in firewall design and deployment, network segmentation, VPN and remote access, identity services (Cisco ISE), and SSE technologies. Strong working knowledge of core routing and switching technologies. Hands-on experience with Cisco Secure Firewall (FTD/ASA), ISE, Catalyst and Nexus platforms, Meraki stack, and Secure Access/SASE solutions. Proven ability to serve as a senior technical escalation point, providing advanced troubleshooting and root cause analysis for complex client issues. Strong communication and presentation skills with the ability to engage technical and business stakeholders. Ability to travel up to 10%. Preferred Qualifications Consulting or professional services experience delivering enterprise network and security solutions. Familiarity with automation and infrastructure-as-code approaches (Python, Ansible, REST APIs). Experience with industrial networking and OT security technologies, including ICS/SCADA systems, Purdue Model architecture, network segmentation, and secure integration of IT and OT environments. Experience leading network segmentation or security modernization initiatives. Experience mentoring and guiding junior engineers, fostering skill development and promoting consistent best practices across the team. Experience with dynamic routing protocols (OSPF, BGP, EIGRP). Exposure to cloud security integration with AWS, Azure, or GCP. Why Join Us Join a high-performing, highly certified Infrastructure Network team within a global consulting firm where the focus is on security architecture, design, and optimization — not repetitive Tier 1/Tier 2 support. You’ll work on challenging, high-impact projects, help enterprise clients modernize their network security posture, and deepen your expertise across Cisco’s evolving security portfolio — all while collaborating with some of the most skilled engineers in the industry. At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmcanada.com/careers/life-at-rsm/rewards-and-benefits.html. RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Canadian uniformed service; Canadian Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at careers@rsmus.com. At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range. Compensation Range: $88,000 - $162,000 Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.

What you’ll do

Requirements

Candidates must hold an active CCNP Security certification and possess at least 5 years of experience in enterprise-class network and security solutions. Strong technical expertise in Cisco security platforms and the ability to engage with both technical and executive stakeholders are required.