Senior Design Specialist – Firewall, Wireless Packet Core

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee the architectural design for security infrastructure safeguarding TELUS' Wireless Core Network, focusing on carrier-grade firewalls (Juniper SRX, Palo Alto Networks) across 4G EPC and 5G Service-Based Architecture (SBA) boundaries.

• Design, implement, and scale high-availability firewall solutions that protect critical core interfaces (Gi/SGi, N6, roaming, inter-carrier) as well as control/user plane functions in containerized environments (RedHat OpenShift).

• Ensure firewall architectures comply with 3GPP and GSMA standards; perform proactive threat modeling and risk assessments for new 5G features; assist with security audits and vulnerability remediation.

• Direct capacity planning, growth forecasting, and technology lifecycle management; create vendor roadmaps and business cases for upcoming security investments; manage technical relationships with firewall and core vendors.

• Collaborate with RAN, Transport, Policy, Signaling, IMS/Voice, and Virtualized Infrastructure teams to ensure firewall architectures, policies, and configurations align with Wireless Core network functions (AMF/MME, SMF/SPGW-C, UPF/SPGW-U).

• Develop CI/CD pipelines for deploying firewall configurations; produce comprehensive Methods of Procedure (MoP) documents; create KPI dashboards for performance monitoring and enhancement.

• Evaluate network performance, troubleshoot complex security challenges, and optimize architecture utilizing protocol validation tools (Wireshark, PCAP) and vendor logging mechanisms.

⛳️ Requirements

• Over 10 years of progressive experience in core network security and telecom engineering within carrier-grade environments.

• Expert-level experience in designing, implementing, and troubleshooting Juniper SRX and Palo Alto Networks firewalls (both bare metal and virtual).

• Strong technical knowledge of 3G/4G/5G Packet Core network topology, control/user plane separation (CUPS), and Service-Based Architecture (SBA).

• In-depth understanding of mobile core protocol behavior (GTPv1/GTPv2, HTTP/2, Diameter, SCTP, Service-Based Interfaces).

• Extensive knowledge of telecom security standards, including 3GPP security architecture (TS 33.501) and GSMA guidelines (FS.36/FS.37).

• Master-level troubleshooting capabilities with network analysis tools (Wireshark, PCAP, protocol analyzers).

• Proficient in deploying network security within containerization ecosystems (Docker, Kubernetes, RedHat OpenShift).

• Experience with CI/CD automation pipelines and modern software development lifecycles (GitLab).

• Bachelor's or Master's degree in Computer Science, Information Technology, Electrical Engineering, or a related technical STEM field.

🏝️ Benefits

• Comprehensive total rewards package featuring a competitive salary and bonus structures, a minimum of 3 weeks of vacation, and a flexible benefits plan tailored to meet the needs of you and your family.

• Flexibility to work in-office, remotely, or a combination of both, depending on the role's requirements.

• Generous company-matched pension and share purchase programs.

• Opportunity to contribute to the communities where we work, live, and serve.

• Career advancement and learning & development opportunities to enhance your skills.