Forward - Security Engineer, Network & Infrastructure Security

ShyftLabs, Toronto, Ontario

The role

ShyftLabs is a fast-growing data and technology company that partners with Fortune 500 and enterprise organizations to deliver innovative, data-driven solutions. We specialize in building scalable, enterprise-grade platforms that leverage modern technologies, cloud infrastructure, and advanced engineering practices to solve complex business challenges.

What you will do

Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways. Review client network designs and implementations to ensure alignment with security requirements and industry best practices.
Work directly with client stakeholders to assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions. Collaborate with engineering teams to translate security requirements into practical, scalable solutions.
Establish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including platforms such as Palo Alto GlobalProtect. Define access controls, device posture requirements, and compliance monitoring practices.
Establish standards for Public Key Infrastructure (PKI), certificate authority governance, cryptographic key management, and certificate lifecycle operations. Identify opportunities to automate certificate discovery, renewal, and compliance monitoring.
Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNS Security Extensions (DNSSEC), split-horizon DNS, and centralized logging.
Develop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, payment card industry (PCI) zones, IoT/OT environments, and third-party connections to reduce attack surfaces and limit lateral movement.
Define and validate security hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances. Apply CIS Benchmarks and automated compliance tools to identify configuration drift and drive remediation.
Investigate complex network security incidents, connectivity issues, and remote access failures. Conduct root-cause analysis, coordinate remediation with client engineering teams, and provide recommendations to prevent recurrence.
Ensure relevant network, DNS, proxy, endpoint, and identity telemetry is appropriately captured and integrated into Security Information and Event Management (SIEM) platforms. Partner with security operations teams to improve visibility, detection, and investigation capabilities.
Review firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance. Promote least-privilege access, accurate configuration and asset records, and consistent security governance.
Develop scripts, tools, and workflows to automate security compliance assessments, firewall rule reviews, configuration validation, and security posture reporting using Python, PowerShell, Bash, or similar technologies.
Assess existing security controls against recognized frameworks and regulatory requirements, including CIS Benchmarks, NIST Cybersecurity Framework, and PCI DSS. Document findings, recommend remediation strategies, and communicate progress to relevant stakeholders.
Identify opportunities to improve enterprise security architecture, reduce infrastructure exposure, standardize security controls, and embed secure-by-design principles into engineering processes.

Forward - Security Engineer, Network & Infrastructure Security

The role

Forward - Security Engineer, Network & Infrastructure Security

The role

What you will do

What you need

Nice to have

Inclusion at ShyftLabs

Pay and benefits

Similar jobs at other companies

Security Engineer - Senior

Managed Services Networking & Security Enterprise Services Architect (Remote)

Senior Network Engineer

IT Security Engineer

Staff Security Engineer

Network Engineer - SME

ShyftLabs