Security Engineer – Network & Infrastructure Security

ShyftLabs

. Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways; review client network designs and implementations.

Posted 10/27/2026full-timeRemote • CanadaMid-LevelSenior💰 CA$100,000 - CA$120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and maintaining enterprise security standards, including firewall and secure access technologies, while effectively communicating risks and providing actionable recommendations to stakeholders. Proficient in scripting for automation and security compliance, with a strong understanding of networking fundamentals and security frameworks.

Highest-signal resume keywords

Network Security EngineeringPalo Alto Firewall ExperienceSecurity Architecture AssessmentScripting with Python or PowerShellCIS Benchmarks Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SecurityFirewall ConfigurationIntrusion Prevention SystemsTLS InspectionZero Trust Network AccessPKI ManagementWindows Server HardeningLinux Server HardeningEndpoint Detection and ResponseCloud Security

Soft Skills

Strong CommunicationStakeholder ManagementCollaborative Problem-SolvingIndependent WorkPrioritization

Tools & Technologies

SIEM PlatformsEDR PlatformsTerraformAnsibleJira Service ManagementServiceNowAWSMicrosoft AzureGoogle Cloud PlatformInfoblox

Certifications & Qualifications

CompTIA Security+Network+PCNSECCNP SecurityAWS Security CertificationAzure Security CertificationGIAC Credentials

Industry Keywords

CIS BenchmarksNIST Cybersecurity FrameworkPCI DSSCertificate Lifecycle ManagementProtective DNSInfrastructure SecurityVulnerability RemediationPrivileged Access ManagementAutomation OpportunitiesCompliance Standards

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityDNSFirewallsGoogle Cloud PlatformIoTITSMLinuxPythonServiceNowSwitchingTCP/IPTerraform

About the role

Key responsibilities & impact

Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways; review client network designs and implementations.
Assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions with client stakeholders.
Establish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including Palo Alto GlobalProtect.
Establish standards for PKI, certificate authority governance, cryptographic key management, and certificate lifecycle operations; identify automation opportunities.
Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNSSEC, split-horizon DNS, and centralized logging.
Develop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, PCI zones, IoT/OT environments, and third-party connections.
Define and validate hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances using CIS Benchmarks and automated compliance tools.
Investigate network security incidents, connectivity issues, and remote access failures; conduct root-cause analysis and coordinate remediation.
Ensure network, DNS, proxy, endpoint, and identity telemetry is integrated into SIEM platforms; improve visibility, detection, and investigation capabilities.
Review firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance; promote least-privilege access and security governance.
Develop scripts, tools, and workflows using Python, PowerShell, Bash, or similar technologies to automate security compliance assessments, firewall rule reviews, configuration validation, and posture reporting.
Assess controls against CIS Benchmarks, NIST Cybersecurity Framework, and PCI DSS; document findings, recommend remediation, and communicate progress.
Improve enterprise security architecture, reduce infrastructure exposure, standardize controls, and embed secure-by-design principles into engineering processes.

Requirements

What you’ll need

4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles.
Hands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler.
Strong understanding of networking fundamentals and protocols, including TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS, with the ability to perform packet-level analysis.
Working knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management.
Practical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls.
Experience with endpoint detection and response (EDR) platforms, such as CrowdStrike, and SIEM technologies and query languages, such as KQL or SPL.
Familiarity with security frameworks and compliance standards, including CIS Benchmarks, NIST CSF, and PCI DSS.
Scripting or automation experience using Python, PowerShell, Bash, or similar languages to support security assurance, compliance validation, and reporting.
Experience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable security recommendations.
Strong communication and stakeholder management skills, with the ability to engage directly with clients, explain technical risks, and influence engineering decisions.
A consultative, collaborative approach to problem-solving, with the ability to balance security requirements, operational constraints, and business priorities.
Ability to work independently, manage competing priorities, and drive security initiatives through assessment, recommendation, and remediation.
Experience securing cloud network infrastructure and logging services across AWS, Microsoft Azure, or Google Cloud Platform (GCP).
Familiarity with automated certificate management solutions, such as ACME or Venafi, and protective DNS platforms, such as Infoblox or Cloudflare.
Experience with Infrastructure as Code (IaC) tools, including Terraform or Ansible, and integrating security guardrails into CI/CD pipelines.
Experience securing distributed enterprise environments, retail edge infrastructure, or IoT/OT networks.
Working knowledge of compliance requirements such as PCI DSS and SOX.
Familiarity with IT service management and change management platforms, such as Jira Service Management or ServiceNow.
Relevant security certifications, including CompTIA Security+, Network+, PCNSE, CCNP Security, AWS or Azure Security certifications, or GIAC credentials.