Security Engineer – Network & Infrastructure Security

🔥 1 minute ago

🇨🇦 Canada – Remote

💵 $100k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛜 Network Engineer / Network Administrator

👻 Ghost score 24%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ShyftLabs

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤖 Artificial Intelligence

💼 Consulting

🏢 Enterprise

Artificial Intelligence • Consulting • Enterprise

ShyftLabs is a company that specializes in delivering data and AI solutions to enterprises. They offer a range of services, including consulting, prototyping, solutions, platform scaling, and operations to help businesses navigate their data journey and leverage AI for transformative impact. ShyftLabs focuses on empowering organizations with advanced data analytics, AI capabilities, and secure data infrastructure to drive real value and optimize operations across the enterprise. They partner with clients throughout the entire lifecycle of data and AI needs, ensuring efficient and impactful integration of AI solutions into existing workflows. With expertise in cloud platform services and a commitment to secure, optimal performance, ShyftLabs delivers tailored solutions for strategic data and AI transformation.

📋 Description

• Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways; review client network designs and implementations. • Assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions with client stakeholders. • Establish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including Palo Alto GlobalProtect. • Establish standards for PKI, certificate authority governance, cryptographic key management, and certificate lifecycle operations; identify automation opportunities. • Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNSSEC, split-horizon DNS, and centralized logging. • Develop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, PCI zones, IoT/OT environments, and third-party connections. • Define and validate hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances using CIS Benchmarks and automated compliance tools. • Investigate network security incidents, connectivity issues, and remote access failures; conduct root-cause analysis and coordinate remediation. • Ensure network, DNS, proxy, endpoint, and identity telemetry is integrated into SIEM platforms; improve visibility, detection, and investigation capabilities. • Review firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance; promote least-privilege access and security governance. • Develop scripts, tools, and workflows using Python, PowerShell, Bash, or similar technologies to automate security compliance assessments, firewall rule reviews, configuration validation, and posture reporting. • Assess controls against CIS Benchmarks, NIST Cybersecurity Framework, and PCI DSS; document findings, recommend remediation, and communicate progress. • Improve enterprise security architecture, reduce infrastructure exposure, standardize controls, and embed secure-by-design principles into engineering processes.

🎯 Requirements

• 4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles. • Hands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler. • Strong understanding of networking fundamentals and protocols, including TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS, with the ability to perform packet-level analysis. • Working knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management. • Practical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls. • Experience with endpoint detection and response (EDR) platforms, such as CrowdStrike, and SIEM technologies and query languages, such as KQL or SPL. • Familiarity with security frameworks and compliance standards, including CIS Benchmarks, NIST CSF, and PCI DSS. • Scripting or automation experience using Python, PowerShell, Bash, or similar languages to support security assurance, compliance validation, and reporting. • Experience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable security recommendations. • Strong communication and stakeholder management skills, with the ability to engage directly with clients, explain technical risks, and influence engineering decisions. • A consultative, collaborative approach to problem-solving, with the ability to balance security requirements, operational constraints, and business priorities. • Ability to work independently, manage competing priorities, and drive security initiatives through assessment, recommendation, and remediation. • Experience securing cloud network infrastructure and logging services across AWS, Microsoft Azure, or Google Cloud Platform (GCP). • Familiarity with automated certificate management solutions, such as ACME or Venafi, and protective DNS platforms, such as Infoblox or Cloudflare. • Experience with Infrastructure as Code (IaC) tools, including Terraform or Ansible, and integrating security guardrails into CI/CD pipelines. • Experience securing distributed enterprise environments, retail edge infrastructure, or IoT/OT networks. • Working knowledge of compliance requirements such as PCI DSS and SOX. • Familiarity with IT service management and change management platforms, such as Jira Service Management or ServiceNow. • Relevant security certifications, including CompTIA Security+, Network+, PCNSE, CCNP Security, AWS or Azure Security certifications, or GIAC credentials.