DescriptionWhat you'll do- Design & Architecture: Lead architectural design for security infrastructure protecting TELUS' Wireless Core Network, with focus on carrier-grade firewalls (Juniper SRX, Palo Alto Networks) across 4G EPC and 5G Service-Based Architecture (SBA) boundaries
- Implementation & Rollout: Architect, deploy, and scale high-availability firewall solutions protecting critical core interfaces (Gi/SGi, N6, roaming, inter-carrier) and control/user plane functions in containerized environments (RedHat OpenShift)
- Security & Compliance: Ensure firewall architectures adhere to 3GPP and GSMA standards; conduct proactive threat modeling and risk assessments for new 5G functions; support security audits and vulnerability remediation
- Strategic Planning: Lead capacity planning, growth forecasting, and technology lifecycle management; develop vendor roadmaps and business cases for future security investments; manage technical relationships with firewall and core vendors
- Cross-Functional Collaboration: Partner with RAN, Transport, Policy, Signaling, IMS/Voice, and Virtualized Infrastructure teams to align firewall architectures, policies, and configurations with Wireless Core network functions (AMF/MME, SMF/SPGW-C, UPF/SPGW-U)
- Automation & Optimization: Develop CI/CD pipelines for firewall configuration deployment; create detailed Methods of Procedure (MoP) documents; develop KPI dashboards for performance monitoring and optimization
- Troubleshooting & Analysis: Analyze network performance, resolve complex security issues, and optimize architecture using protocol validation tools (Wireshark, PCAP) and vendor logging mechanisms
QualificationsWhat you bring- 10+ years of progressive experience in core network security and telecom engineering in carrier-grade environments
- Expert-level experience designing, implementing, and troubleshooting Juniper SRX and Palo Alto Networks firewalls (bare metal and virtual)
- Strong technical knowledge of 3G/4G/5G Packet Core network topology, control/user plane separation (CUPS), and Service-Based Architecture (SBA)
- Deep understanding of mobile core protocol behavior (GTPv1/GTPv2, HTTP/2, Diameter, SCTP, Service-Based Interfaces)
- Deep knowledge of telecom security standards: 3GPP security architecture (TS 33.501) and GSMA guidelines (FS.36/FS.37)
- Master-level troubleshooting skills with network analysis tools (Wireshark, PCAP, protocol analyzers)
- Proficiency deploying network security in containerization ecosystems (Docker, Kubernetes, RedHat OpenShift)
- Experience with CI/CD automation pipelines and modern software development lifecycles (GitLab)
- Bachelor's or Master's degree in Computer Science, Information Technology, Electrical Engineering, or related technical STEM field
Great-to-haves- Professional certifications in security domains or specific vendors (e.g., JNCIE-SEC, PCNSE)
- Experience securing infrastructure hosted within Public Cloud Native environments (AWS, GCP)
- Programming skills in Python, Ansible, or API-driven automation for programmatic firewall updates
- Knowledge of automated network slicing security policies and multi-tenancy isolation concepts
Location: Any major Canadian city
#Remote
Salary Range: $100,000-$150,000
Performance Bonus or Sales Incentive Plan: 15%
Actual total compensation will be determined based on factors such as knowledge, skills, performance and experience. We encourage all qualified candidates to apply, even if the posted salary range doesn't match your expectations. We're open to discussing competitive compensation packages tailored to your experience level and expertise. TELUS offers rewarding benefits, which may vary per job function, such as:
- Comprehensive total rewards package highlighting competitive salary and bonus structures, minimum 3 weeks of vacation, and flexible benefits plan to meet the needs of you and your family
- Flexibility to work in-office, virtually or a combination of both, based on the role's requirements
- Generous company matched pension and share purchase programs
- Opportunity to give back to communities in which we work, live and serve
- Career growth and learning & development opportunities to develop your skills
- And much more ...
Job Type: This is for a current vacancy
