Connect with us LinkedIn, Instagram, Facebook, Twitter.
Thinking about a change?
We recognize that the construction industry is changing at a rapid pace and we continually strive to be at the forefront. Our core values empower people to deliver great careers to one another and develop creative solutions for complex problems on some of the most exciting projects. It doesn’t matter what your expertise and craft is – there are no boundaries. We are a group of professionals with a variety of expertise within pre-construction, construction, and post-construction. To learn more, check out our Cradle to Grave services and hear from our team directly about what a career at EllisDon could look like for you. As you can see, we are a diverse bunch.
Above all, we are a group of individuals with unique experiences and at EllisDon, we choose to celebrate the strength in our differences, every day. EllisDon’s commitment to Inclusive Diversity is to work together to create an environment where every employee feels safe to be their true and authentic self. Ultimately, EllisDon’s purpose is to provide people with similar values the opportunity to achieve to their full potential; to deliver that opportunity for great careers to one another; and to contribute meaningfully to the community we share with others.
In case you’re curious, here’s what the industry thinks of us and some of the impacts we've made to the communities we work in and our latest Impact Report, highlighting how we're putting our values into practice in areas such as the climate & environment, inclusive diversity, indigenous relations, and health and safety.
You as a Network Engineer will:
Configure and maintain Palo Alto NGFWs and manage branch and cloud firewall policy through Strata Cloud Manager (SCM), supporting segmentation, threat prevention, and secure traffic flow.
Administer secure access with Zscaler — primarily Zscaler Private Access (ZPA) — including App Connectors, application segments, and access policy, with supporting work in ZIA and ZDX.
Administer and optimize Cisco switching — including VLANs, trunking, QoS, and routing — across corporate offices, data centers, and job sites.
Support enterprise wireless (WLAN) infrastructure, including WLC administration, access point deployment, and site surveys/troubleshooting for coverage and performance.
Design, configure, and manage Azure cloud networking, including virtual networks (vNets), subnets, network security groups (NSGs), user-defined routes, private endpoints/DNS, VPN gateways, load balancers, Application Gateways and Web Application Firewalls (WAFs).
Implement and manage SSL/TLS decryption and inspection policies on Palo Alto NGFWs to enable deep visibility and threat prevention on encrypted traffic, while accounting for certificate management and decryption exclusions.
Manage network access control and device administration with Aruba ClearPass (NAC), including 802.1X, policy enforcement, and TACACS+ for device authentication and authorization.
Monitor network performance, availability, and health; investigate and resolve incidents within SLA targets and escalate complex issues as needed.
Support onboarding of new job sites and offices, including switch/firewall deployment, zero-touch provisioning, and standardized configuration templates.
Collaborate with the Systems, Cloud, Security, and Service Delivery teams to support on-premises and cloud initiatives, and contribute to network transformation and migration projects.
Partner with Security Operations (SecOps) on vulnerability remediation, leveraging Rapid7 InsightVM to identify, prioritize, and remediate vulnerabilities across network and firewall infrastructure and to track remediation progress.
Maintain accurate documentation of configurations, diagrams, runbooks, change records, and incident resolutions.
This is the right role for you if:
3–5 years of hands-on experience in enterprise network administration or engineering.
Working knowledge of Palo Alto NGFWs and centralized management (Strata Cloud Manager / Panorama), including security policy, NAT, and segmentation concepts.
Solid Cisco switching experience — VLANs, trunking, spanning tree, QoS — and familiarity with routing protocols (OSPF, BGP), subnetting, DNS, and DHCP.
Experience supporting enterprise wireless (WLAN/WLC), including AP deployment and RF troubleshooting.
Working knowledge of Azure networking components: vNets, subnets, NSGs, UDRs, Azure DNS, Private Link/Private Endpoints, VPN Gateway, load balancers, Application Gateway, and Web Application Firewall (WAF).
Hands-on experience with Zscaler ZPA; exposure to ZIA and ZDX is an asset.
Experience with Network Access Control — Aruba ClearPass (or equivalent) — 802.1X, and TACACS+ for device administration.
Experience with network monitoring and troubleshooting tools (e.g., SolarWinds, Wireshark, Zabbix) to proactively track performance, availability, and health.
Familiarity with vulnerability management and remediation workflows, ideally using Rapid7 InsightVM, in partnership with Security Operations (SecOps).
Strong troubleshooting, problem-solving, and documentation skills, with the ability to prioritize and manage multiple tasks.
A collaborative team player who thrives in a fast-paced, enterprise-scale environment and is eager to keep learning.
Relevant certifications are an asset — e.g., CCNA/CCNP, Palo Alto PCNSA/PCNSE, Aruba ACCP, or Microsoft AZ-700.
Bachelor’s degree or college diploma in Computer Science, Information Technology, or a related field (or equivalent experience).
The salary range for this role is $115,000 - $125,000.
EllisDon is proud to provide this unique career opportunity that provides continuous learning, opportunity for growth, and a competitive compensation package within an environment that is committed to inclusion and respects diversity.
Go ahead and be yourself. We'll pay you for it!
We are an equal opportunity employer. We welcome people of any age, culture, subculture, gender identity or expression, sexual orientation, nationality, ethnicity, race, size, mental or physical status, veteran status, religion, language, political opinion, working-style preference, family status, education, and socio-economic status. The EllisDon core values of Integrity and Mutual Respect welcomes everyone, at work and in the community, and our value of Mutual Accountability, means that we all have a role to play. As an EllisDon employee, this will ultimately be your commitment to Inclusive Diversity.
Accommodation for Applicants with disabilities will be made during the recruitment process when requested.
We are committed to providing a positive candidate experience and ensuring timely updates are provided to all candidates. If you haven’t already, be sure to create a profile on our Careers page to remain up to date on the status of your application and learn about new career opportunities as they arise.
EllisDon uses AI tools to assist in screening and assessing applicants for this position.
Skills Required
- 3-5 years of hands-on experience in enterprise network administration or engineering
- Working knowledge of Palo Alto NGFWs and Strata Cloud Manager or Panorama, including security policy, NAT, and segmentation
- Solid Cisco switching experience with VLANs, trunking, spanning tree, and QoS
- Familiarity with OSPF, BGP, subnetting, DNS, and DHCP
- Experience supporting enterprise wireless and WLC infrastructure, including access point deployment and RF troubleshooting
- Working knowledge of Azure networking components, including vNets, subnets, NSGs, UDRs, Azure DNS, Private Link, VPN Gateway, load balancers, Application Gateway, and WAF
- Hands-on experience with Zscaler ZPA; exposure to ZIA and ZDX
- Experience with network access control, Aruba ClearPass or equivalent, 802.1X, and TACACS+
- Experience with network monitoring and troubleshooting tools such as SolarWinds, Wireshark, or Zabbix
- Familiarity with vulnerability management and remediation workflows, ideally using Rapid7 InsightVM
- Strong troubleshooting, problem-solving, documentation, prioritization, and task-management skills
- Relevant certifications such as CCNA, CCNP, Palo Alto PCNSA, PCNSE, Aruba ACCP, or Microsoft AZ-700
- Bachelor's degree or college diploma in Computer Science, Information Technology, or a related field, or equivalent experience
What We Do
EllisDon Corporation is a 100% employee-owned global leader in construction and building services. The company provides a fully integrated, 'cradle-to-grave' suite of services, including general contracting, project management, and innovative technology solutions. It specializes in delivering sustainable and resilient infrastructure across diverse sectors, including healthcare, industrial, and civil projects, serving clients across Canada and international markets.
.png)
