Network Engineer (L3)

Inspirational, innovative and
entrepreneurial - this is how we describe our empowered teams. Combine your
passion with purpose and join a culture that is thriving in the face of change.

National in scope and local in focus, MNP is
one of Canada’s largest professional service firms providing client-focused
accounting, consulting, tax, and digital services to clients. Founded in 1958,
MNP today is a CAD 2 billion+ organization with 9600+ employees and 154 offices
across Canada. MNP prides itself on being an ‘advisor’ to its clients
(individuals, businesses, and organizations), focusing on their success by
delivering personalized strategies and solutions that help clients reach their
full potential — wherever business takes them.

MNP set up MNP SPARK its GCC in Bangalore in
May 2025 with a focus on enabling the firm drive growth, efficiency, customer
delight and innovation, by leveraging high quality talent in India. MNP Spark
is like any other MNP region/office - front facing, client focused but working
with all MNP regions in Canada to deliver services.

Responsibilities:

• Lead
  the administration, troubleshooting, optimization, and hardening of Fortinet
  FortiGate, FortiManager, and Cisco environments, including security policy,
  NAT, VPN/IPsec, SD-WAN, BGP/OSPF routing, high availability, and secure
  connectivity across distributed sites
  
• Own
  firewall rule tightening, policy refinement, least-privilege access reviews,
  and rulebase cleanup by identifying overly broad, unused, redundant, or legacy
  rules and safely improving access controls with minimal operational disruption.
  
• Operate
  and improve centralized firewall management through FortiManager, including
  policy packages, shared objects, device onboarding, per-device mappings,
  deployment validation, and standardized workflows to improve consistency and
  predictable change outcomes.
  
• Perform
  structured firewall and network audits, including configuration reviews, policy
  and object hygiene, rule-hit analysis, logging and telemetry validation,
  administrative access reviews, configuration drift identification, and evidence
  gathering for operational or compliance purposes.
  
• Design,
  support, and modernize Azure and hybrid networking, including virtual networks,
  routing, segmentation, secure access, VPN/ExpressRoute connectivity, cloud
  firewall controls, SD-WAN optimization, branch firewall migrations, and
  simplification of legacy design.
  
• Use
  ServiceNow effectively to manage incidents, requests, changes, problems,
  approvals, documentation, and operational follow-through, ensuring tickets
  include clear technical notes, business impact, risk, resolution details, and
  validation evidence.
  
• Partner
  with Security, Infrastructure, Cloud, and Operations teams to ensure firewall
  controls, logging, audit evidence, exception handling, change practices, and
  operational standards support security, compliance, availability, and incident
  response needs.
  
• Identify
  recurring firewall, routing, VPN, policy, and operational issues; recommend
  durable fixes; and contribute to standards, documentation, automation,
  reporting, responsible AI use, and process improvements that reduce repeat
  incident.
  

Requirements

SSkills and Experience

• 6+
  years of relevant experience supporting enterprise, multi-site networks in
  operations and project delivery environments, with strong hands-on experience
  in firewall operations, troubleshooting, change management, and
  security-focused network administration
  
• Strong
  hands-on experience administering Fortinet FortiGate firewalls and FortiManager
  in production environments, including security policies, NAT, VPN/IPsec,
  routing, SD-WAN, high availability, logging, policy packages, shared objects,
  device onboarding, deployment workflows, and validation.
  
• Demonstrated
  experience with firewall rule tightening, policy refinement, least-privilege
  access design, cleanup of unused or redundant rules, review of broad
  source/destination/service definitions, and safe remediation of risky access.
  
• Practical
  experience performing firewall and network audits, including configuration
  comparisons, access reviews, rule-hit analysis, logging verification, change
  evidence gathering, configuration drift identification, and operational risk
  assessment.
  
• Strong
  understanding of firewall and network administration principles, including
  segmentation, zone-based policy, object hygiene, secure management access, VPN
  design, NAT behaviour, routing interaction, SD-WAN, BGP/OSPF, and asymmetric
  traffic troubleshooting.
  
• Significant
  experience with Azure networking and security fundamentals, including virtual
  networks, routing, NSGs, Azure Firewall or equivalent controls,
  VPN/ExpressRoute concepts, segmentation, hybrid connectivity, and cloud
  firewall integration.
  
• Experience
  with ServiceNow or a comparable ITSM platform, including incident management,
  change management, request fulfillment, problem records, documentation, queue
  ownership, ticket hygiene, SLA-aware follow-through, and operational
  accountability.
  
• Strong
  troubleshooting capability across firewall, routing, VPN, DNS, NAT, policy,
  logging, cloud, endpoint, identity, and application connectivity issues, with
  the ability to define problems, gather evidence, test hypotheses, document
  findings, communicate risk, and drive resolution independently.
  
• Excellent
  communication and documentation skills, including the ability to write clearly,
  present succinctly, explain technical issues to different stakeholder levels,
  provide structured incident or change updates, and produce implementation
  plans, rollback plans, troubleshooting notes, audit summaries, standards, and
  knowledge articles
  
• Python
  scripting and automation experience, including comfort with APIs, configuration
  parsing, validation checks, reporting, ServiceNow data, FortiManager/FortiGate
  exports, audit evidence collection, and repetitive firewall or network
  administration tasks.
  
• Proven
  ability to balance operational support, project delivery, audit work, and
  proactive improvement activities in a ticket-driven enterprise environment.
  
• Demonstrated
  ownership mindset, professional judgment, and accountability when handling
  security-sensitive firewall changes, production incidents, stakeholder
  communication, and operational risk.
  
• Experience
  with Azure Kubernetes Service and other container services is considered an
  asset