Senior Network Security Architect (SASE)

Location: Toronto, Canada. Travel required up to 10% of the time; relocation is not eligible.

Company

hirify.global develops materials science and engineering solutions for semiconductor chips and advanced displays, including equipment that supports AI and next-generation semiconductor production.

What you will do

• Define the enterprise network security architecture vision, standards, governance processes, and multi-year technology roadmap.
• Design and modernize security platforms across enterprise, cloud, SaaS, data center, remote access, and manufacturing OT environments.
• Architect Zero Trust, SSE/SASE, ZTNA, firewalls, segmentation, SD-WAN, DLP, DNS security, WAF, DDoS protection, and NDR solutions.
• Design secure connectivity for Azure, AWS, hybrid cloud, ExpressRoute, Direct Connect, and third-party integrations.
• Lead architecture reviews, approve HLDs and LLDs, chair governance boards, and mentor engineers and architects.
• Drive security automation, IaC, APIs, telemetry, observability, risk assessments, threat modeling, and post-incident architecture improvements.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• 12+ years of experience in enterprise networking and security, including 5+ years in architecture, principal engineering, or technical leadership roles.
• Experience designing and implementing large-scale enterprise security architectures.
• Strong knowledge of Zero Trust, network security and firewalls, SSE/SASE, SD-WAN, routing and switching, cloud security, DNS, PKI, identity integration, and NDR.
• Experience with IT/OT segmentation and security frameworks including ISA-95, the Purdue Model, NIST CSF, and IEC 62443.
• Must work from Toronto, Canada; travel up to 10% is required and relocation is not eligible.

Nice to have

• Global enterprise, manufacturing, semiconductor, industrial, or operational technology experience.
• Experience with Palo Alto Networks, Zscaler, Akamai, ExtraHop, Corelight, Vectra, ClearPass, Forescout, Azure Networking, or AWS Networking.
• Experience leading globally distributed engineering teams.
• CISSP, CCIE, CCNP, PCNSE, Azure Security Engineer Associate, AWS Security Specialty, CCSP, or Zscaler Certified Architect certification.

Culture & Benefits

• Supportive work culture focused on learning, development, and career growth.
• Opportunity to work on technology supporting semiconductor and advanced display innovation.
• Employee health and wellbeing programs and support for personal and professional growth.
• Regular employment with full-time status.