Security Engineer, Network & Infrastructure Security
New
S
ShyftLabsCybersecurity
Listing location: Toronto, Ontario; Workplace type: RemoteFull-TimeMiddle
Salary100,000 - 120,000 CAD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles.
- Required Skills
- PythonCisco
Requirements
- Have 4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles.
- Bring hands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler.
- Understand networking fundamentals and protocols, including TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS; be able to perform packet-level analysis.
- Have working knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management.
- Have practical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls.
- Have experience with EDR platforms such as CrowdStrike and SIEM technologies and query languages such as KQL or SPL.
- Be familiar with security frameworks and compliance standards, including CIS Benchmarks, NIST CSF, and PCI DSS.
- Have scripting or automation experience using Python, PowerShell, Bash, or similar languages.
- Have experience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable security recommendations.
- Be able to engage directly with clients, explain technical risks, and influence engineering decisions.
- Work independently, manage competing priorities, and drive security initiatives through assessment, recommendation, and remediation.
Responsibilities
- Define and maintain security standards, reference architectures, and configuration baselines for firewalls, intrusion prevention and detection, web filtering, TLS inspection, and secure web gateways.
- Review client network designs and implementations for alignment with security requirements and industry best practices.
- Assess client security requirements, communicate risks, and guide architecture and implementation decisions with stakeholders and engineering teams.
- Establish standards for VPN and Zero Trust Network Access solutions, including access controls, device posture requirements, and compliance monitoring.
- Establish standards for PKI, certificate authority governance, cryptographic key management, and certificate lifecycle operations.
- Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNSSEC, split-horizon DNS, and centralized logging.
- Develop segmentation strategies and Zero Trust architectures across corporate, retail, PCI, IoT/OT, and third-party environments.
- Define and validate hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances using CIS Benchmarks and automated compliance tools.
- Investigate network security incidents, connectivity issues, and remote access failures; perform root-cause analysis and coordinate remediation.
- Ensure network, DNS, proxy, endpoint, and identity telemetry is integrated into SIEM platforms and partner with security operations teams to improve visibility and detection.
- Review firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance.
- Automate security compliance assessments, firewall rule reviews, configuration validation, and posture reporting using scripting tools.
View Full Description & ApplyYou'll be redirected to the employer's site
