ShyftLabs

ShyftLabs

ShyftLabs is a strategic partner in driving digital transformation with tailored solutions for businesses. Specializing in end-to-end software solutions, they integrate seamlessly to accelerate value creation, particularly in the retail sector. Their e...

IT Services
51-200
Founded 2018

Description

  • Define and maintain security standards, reference architectures, and configuration baselines for firewalls, IDS/IPS, web filtering, TLS inspection, and secure web gateways.
  • Assess network designs, infrastructure requests, firewall changes, and security exceptions for risk, compliance, and alignment with security requirements.
  • Advise client stakeholders and engineering teams on security requirements, architecture decisions, risks, and scalable implementations.
  • Establish security standards for VPN, ZTNA, PKI, certificate lifecycle management, cryptographic key management, and enterprise DNS.
  • Develop segmentation and Zero Trust strategies across corporate, retail, PCI, IoT/OT, and third-party environments.
  • Define and validate hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances.
  • Investigate network security incidents, connectivity issues, and remote-access failures; coordinate remediation and preventive actions.
  • Integrate network, DNS, proxy, endpoint, and identity telemetry into SIEM platforms to improve detection and investigation.
  • Automate compliance assessments, firewall rule reviews, configuration validation, and security posture reporting.
  • Assess controls against CIS Benchmarks, NIST CSF, and PCI DSS; document findings and recommend remediation.

Requirements

  • 4–6 years of IT or cybersecurity experience, including at least 3 years in network or infrastructure security engineering, architecture, or advisory roles.
  • Hands-on experience with enterprise firewall and secure-access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler.
  • Strong knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, TLS, and packet-level analysis.
  • Working knowledge of PKI, certificate lifecycle management, DNS security, and cryptographic key management.
  • Experience hardening Windows and Linux servers and working with privileged access management, vulnerability remediation, and infrastructure security controls.
  • Experience with EDR platforms such as CrowdStrike, SIEM technologies, and query languages such as KQL or SPL.
  • Knowledge of CIS Benchmarks, NIST CSF, PCI DSS, and security architecture assessment.
  • Scripting or automation experience with Python, PowerShell, Bash, or similar languages.
  • Strong client-facing communication, stakeholder management, and ability to independently drive competing security initiatives.
  • Experience with cloud security in AWS, Azure, or GCP; Terraform or Ansible; CI/CD security guardrails; and distributed, retail edge, or IoT/OT environments (preferred).

Benefits

  • Salary range of $100,000–$120,000 CAD.
  • Equal-opportunity, diverse, and inclusive work environment.
  • Interview accommodations available for candidates who require them.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Sr. Security Engineer

Istari 11-50 Aerospace & Defense

Istari Digital is seeking a Senior Security Engineer to lead and enhance security tooling, compliance automation, application security, and security operations for regulated engineering software environments, including Government-hosted systems.

Argo CD AWS Bash CI/CD Cybersecurity DevSecOps Docker GitHub Kubernetes LLM Penetration Testing Python
4 hours, 44 minutes ago

IT Operations & Security Lead - UK (Remote)

Zen Educate 201-500 Diversified Consumer Services

Zen Educate is seeking a remote IT Operations & Security Lead to build and scale secure, automated corporate IT systems and security practices for its growing UK and US workforce.

Cybersecurity Encryption
4 hours, 59 minutes ago

Binance Accelerator Program – AI Infra Security Engineer

Binance 5001+ Capital Markets

Join Binance’s Infrastructure team as an AI Security Accelerator intern to strengthen the security of its multi-cloud production environment through AI-driven detection, penetration testing, and LLM-agent security.

AWS Azure CI/CD Deep Learning GCP Linux LLM Machine Learning Network Security Penetration Testing Secrets Management WAF
1 day, 1 hour ago

[Job - 31833] Data Manager (Data Governance), Brazil

CI&T 5001+ Internet Software & Services

CI&T is seeking a Security & Privacy Governance Lead to implement sensitive-data governance for a major US mortgage lender’s finance data platform modernization, ensuring approved classification, masking, access, and lineage controls before development begins.

Snowflake
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers