Hello.. I am currently looking for advice on which certification path I should pursue. First, a bit of background:
3 year IT diploma from a tech school, courses included:
A+, network+, Cisco CCNA, security+, wireless technologies, html design, and older novell netware 5. some of the Server 2000 for MCSE, various business 'soft skill courses' (organizational behaviour, technical communications, etc)
Almost 3 years of IT experience:
-6 months Comp tech intern @ elementary & high school
-14 months on a hardware/software deployment team for an electrical company w/ 2200 users
-11 months in a tier II support role for an ISP (internet tech - in home visits to fix customer's internet/email access, router, virus/spyware issues)
-3 months, service desk analyst @ current job. we provide IT support for all of the province's health regions. We also create AD accounts, provide support for & create various health specific application accounts.
At current, I am interested into going into security in the future as the company I am employed by strongly encourages training & hiring from within. However, I only have my A+ from March 2001.
Looking around various certifications, the ones I am closest to writing are ITIL foundations & network+. I finished my CCNA semesters over a year ago & would definitely need some refreshing. I am also interested in MCSA: Security specialization, which would probably lead to MCSE down the line.
Any ideas which to pursue first? Should I go with my ITIL foundations & network+, then pursue some MCSA... granted I know the main choice is my own but I love feedback & any would be greatly appreciated.

Edit to add that the company I am currently employed by highly recommend employees to pursue ITIL certifications as they follow ITIL standards very closely.