{"id":3347371,"url":"https://alion.io/job/shyftlabs-forward-security-engineer-network-infrastructure-security","title":"Forward - Security Engineer, Network & Infrastructure Security","company":{"id":685982,"name":"Shyftlabs","domain":"shyftlabs.io","url":"https://alion.io/company/shyftlabs","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":91,"open_postings":25,"ghost_share":0,"stale_share":0.36,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":101000,"period":"year","method":"role_seniority_country_cell","sample_n":28},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Ansible","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"Cloudflare","optional":true},{"name":"GCP","optional":true},{"name":"Jira","optional":true},{"name":"ServiceNow","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-27T15:13:10Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-29T04:58:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"THE OPPORTUNITY\nShyftLabs is a fast-growing data and technology company that partners with Fortune 500 and enterprise organizations to deliver innovative, data-driven solutions. We specialize in building scalable, enterprise-grade platforms that leverage modern technologies, cloud infrastructure, and advanced engineering practices to solve complex business challenges.\nWe are seeking a Security Engineer, Network & Infrastructure Security to support enterprise security initiatives for one of our clients. This is a client-facing, individual contributor role that combines deep technical expertise with security architecture advisory, risk assessment, and cross-functional collaboration.\nIn this role, you will help define, assess, and strengthen security controls across enterprise network and infrastructure environments. You will serve as a trusted technical advisor, partnering directly with client stakeholders across Network Engineering, Infrastructure, Cloud, and Information Security to establish security standards, evaluate architecture and design decisions, and implement scalable security practices.\nThe ideal candidate brings hands-on experience in network and infrastructure security, a strong understanding of enterprise security architecture, and the ability to communicate complex technical concepts and recommendations to both technical teams and business stakeholders.\nWhat You'll Be Doing\nDefine and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways. Review client network designs and implementations to ensure alignment with security requirements and industry best practices.\n\nWork directly with client stakeholders to assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions. Collaborate with engineering teams to translate security requirements into practical, scalable solutions.\n\nEstablish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including platforms such as Palo Alto GlobalProtect. Define access controls, device posture requirements, and compliance monitoring practices.\n\nEstablish standards for Public Key Infrastructure (PKI), certificate authority governance, cryptographic key management, and certificate lifecycle operations. Identify opportunities to automate certificate discovery, renewal, and compliance monitoring.\n\nDefine security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNS Security Extensions (DNSSEC), split-horizon DNS, and centralized logging.\n\nDevelop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, payment card industry (PCI) zones, IoT/OT environments, and third-party connections to reduce attack surfaces and limit lateral movement.\n\nDefine and validate security hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances. Apply CIS Benchmarks and automated compliance tools to identify configuration drift and drive remediation.\n\nInvestigate complex network security incidents, connectivity issues, and remote access failures. Conduct root-cause analysis, coordinate remediation with client engineering teams, and provide recommendations to prevent recurrence.\n\nEnsure relevant network, DNS, proxy, endpoint, and identity telemetry is appropriately captured and integrated into Security Information and Event Management (SIEM) platforms. Partner with security operations teams to improve visibility, detection, and investigation capabilities.\n\nReview firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance. Promote least-privilege access, accurate configuration and asset records, and consistent security governance.\n\nDevelop scripts, tools, and workflows to automate security compliance assessments, firewall rule reviews, configuration validation, and security posture reporting using Python, PowerShell, Bash, or similar technologies.\n\nAssess existing security controls against recognized frameworks and regulatory requirements, including CIS Benchmarks, NIST Cybersecurity Framework, and PCI DSS. Document findings, recommend remediation strategies, and communicate progress to relevant stakeholders.\n\nIdentify opportunities to improve enterprise security architecture, reduce infrastructure exposure, standardize security controls, and embed secure-by-design principles into engineering processes.\n\nWhat You'll Bring\n4-6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles.\n\nHands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler.\n\nStrong understanding of networking fundamentals and protocols, including TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS, with the ability to perform packet-level analysis.\n\nWorking knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management.\n\nPractical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls.\n\nExperience with endpoint detection and response (EDR) platforms, such as CrowdStrike, and SIEM technologies and query languages, such as KQL or SPL.\n\nFamiliarity with security frameworks and compliance standards, including CIS Benchmarks, NIST CSF, and PCI DSS.\n\nScripting or automation experience using Python, PowerShell, Bash, or similar languages to support security assurance, compliance validation, and reporting.\n\nExperience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable security recommendations.\n\nStrong communication and stakeholder management skills, with the ability to engage directly with clients, explain technical risks, and influence engineering decisions.\n\nA consultative, collaborative approach to problem-solving, with the ability to balance security requirements, operational constraints, and business priorities.\n\nAbility to work independently, manage competing priorities, and drive security initiatives through assessment, recommendation, and remediation.\n\nNice to Have\nExperience securing cloud network infrastructure and logging services across AWS, Microsoft Azure, or Google Cloud Platform (GCP).\n\nFamiliarity with automated certificate management solutions, such as ACME or Venafi, and protective DNS platforms, such as Infoblox or Cloudflare.\n\nExperience with Infrastructure as Code (IaC) tools, including Terraform or Ansible, and integrating security guardrails into CI/CD pipelines.\n\nExperience securing distributed enterprise environments, retail edge infrastructure, or IoT/OT networks.\n\nWorking knowledge of compliance requirements such as PCI DSS and SOX.\n\nFamiliarity with IT service management and change management platforms, such as Jira Service Management or ServiceNow.\n\nRelevant security certifications, including CompTIA Security+, Network+, PCNSE, CCNP Security, AWS or Azure Security certifications, or GIAC credentials.\n\nSalary Range\n$100,000 - $120,000 (CAD)","description_format":"text","description_chars":7423,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-27T17:37:38Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":39,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/shyftlabs-forward-security-engineer-network-infrastructure-security","json_url":"https://alion.io/job/shyftlabs-forward-security-engineer-network-infrastructure-security.json","meta":{"generated_at":"2026-10-29T06:30:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9813,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685982},"rest":"https://alion.io/mcp/rest/get_company?id=685982"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fshyftlabs-forward-security-engineer-network-infrastructure-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fshyftlabs-forward-security-engineer-network-infrastructure-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fshyftlabs-forward-security-engineer-network-infrastructure-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/shyftlabs-forward-security-engineer-network-infrastructure-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fshyftlabs-forward-security-engineer-network-infrastructure-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3347371}},{"tool":"search_jobs","arguments":{"company":"shyftlabs.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3347371},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}