Network Engineer (L3)

Inspirational, innovative and entrepreneurial - this is how we describe our empowered teams. Combine your passion with purpose and join a culture that is thriving in the face of change.

National in scope and local in focus, MNP is one of Canada’s largest professional service firms providing client-focused accounting, consulting, tax, and digital services to clients. Founded in 1958, MNP today is a CAD 2 billion+ organization with 9600+ employees and 154 offices across Canada. MNP prides itself on being an ‘advisor’ to its clients (individuals, businesses, and organizations), focusing on their success by delivering personalized strategies and solutions that help clients reach their full potential — wherever business takes them.

MNP set up MNP SPARK its GCC in Bangalore in May 2025 with a focus on enabling the firm drive growth, efficiency, customer delight and innovation, by leveraging high quality talent in India. MNP Spark is like any other MNP region/office - front facing, client focused but working with all MNP regions in Canada to deliver services.

Responsibilities:

• Lead the administration, troubleshooting, optimization, and hardening of Fortinet FortiGate, FortiManager, and Cisco environments, including security policy, NAT, VPN/IPsec, SD-WAN, BGP/OSPF routing, high availability, and secure connectivity across distributed sites
  
• Own firewall rule tightening, policy refinement, least-privilege access reviews, and rulebase cleanup by identifying overly broad, unused, redundant, or legacy rules and safely improving access controls with minimal operational disruption.
  
• Operate and improve centralized firewall management through FortiManager, including policy packages, shared objects, device onboarding, per-device mappings, deployment validation, and standardized workflows to improve consistency and predictable change outcomes.
  
• Perform structured firewall and network audits, including configuration reviews, policy and object hygiene, rule-hit analysis, logging and telemetry validation, administrative access reviews, configuration drift identification, and evidence gathering for operational or compliance purposes.
  
• Design, support, and modernize Azure and hybrid networking, including virtual networks, routing, segmentation, secure access, VPN/ExpressRoute connectivity, cloud firewall controls, SD-WAN optimization, branch firewall migrations, and simplification of legacy design.
  
• Use ServiceNow effectively to manage incidents, requests, changes, problems, approvals, documentation, and operational follow-through, ensuring tickets include clear technical notes, business impact, risk, resolution details, and validation evidence.
  
• Partner with Security, Infrastructure, Cloud, and Operations teams to ensure firewall controls, logging, audit evidence, exception handling, change practices, and operational standards support security, compliance, availability, and incident response needs.
  
• Identify recurring firewall, routing, VPN, policy, and operational issues; recommend durable fixes; and contribute to standards, documentation, automation, reporting, responsible AI use, and process improvements that reduce repeat incident.
  

Requirements

SSkills and Experience

• 6+ years of relevant experience supporting enterprise, multi-site networks in operations and project delivery environments, with strong hands-on experience in firewall operations, troubleshooting, change management, and security-focused network administration
  
• Strong hands-on experience administering Fortinet FortiGate firewalls and FortiManager in production environments, including security policies, NAT, VPN/IPsec, routing, SD-WAN, high availability, logging, policy packages, shared objects, device onboarding, deployment workflows, and validation.
  
• Demonstrated experience with firewall rule tightening, policy refinement, least-privilege access design, cleanup of unused or redundant rules, review of broad source/destination/service definitions, and safe remediation of risky access.
  
• Practical experience performing firewall and network audits, including configuration comparisons, access reviews, rule-hit analysis, logging verification, change evidence gathering, configuration drift identification, and operational risk assessment.
  
• Strong understanding of firewall and network administration principles, including segmentation, zone-based policy, object hygiene, secure management access, VPN design, NAT behaviour, routing interaction, SD-WAN, BGP/OSPF, and asymmetric traffic troubleshooting.
  
• Significant experience with Azure networking and security fundamentals, including virtual networks, routing, NSGs, Azure Firewall or equivalent controls, VPN/ExpressRoute concepts, segmentation, hybrid connectivity, and cloud firewall integration.
  
• Experience with ServiceNow or a comparable ITSM platform, including incident management, change management, request fulfillment, problem records, documentation, queue ownership, ticket hygiene, SLA-aware follow-through, and operational accountability.
  
• Strong troubleshooting capability across firewall, routing, VPN, DNS, NAT, policy, logging, cloud, endpoint, identity, and application connectivity issues, with the ability to define problems, gather evidence, test hypotheses, document findings, communicate risk, and drive resolution independently.
  
• Excellent communication and documentation skills, including the ability to write clearly, present succinctly, explain technical issues to different stakeholder levels, provide structured incident or change updates, and produce implementation plans, rollback plans, troubleshooting notes, audit summaries, standards, and knowledge articles
  
• Python scripting and automation experience, including comfort with APIs, configuration parsing, validation checks, reporting, ServiceNow data, FortiManager/FortiGate exports, audit evidence collection, and repetitive firewall or network administration tasks.
  
• Proven ability to balance operational support, project delivery, audit work, and proactive improvement activities in a ticket-driven enterprise environment.
  
• Demonstrated ownership mindset, professional judgment, and accountability when handling security-sensitive firewall changes, production incidents, stakeholder communication, and operational risk.
  
• Experience with Azure Kubernetes Service and other container services is considered an asset