--- title: 'Forward - Security Engineer, Network & Infrastructure Security at ShyftLabs' canonical: 'https://feeny.ai/job/forward-security-engineer-network-infrastructure-security-shyftlabs-toronto-jpa0xvv4say2' type: 'job' last_seen: '2026-11-03' --- # Forward - Security Engineer, Network & Infrastructure Security at ShyftLabs - **Company:** ShyftLabs - **Location:** Toronto, Canada - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-27 - **Last confirmed live:** 2026-11-03 - **Apply:** https://jobs.lever.co/shyftlabs/6aea6065-7f60-48bf-92e1-d119d4bcef39 ## Job description ## THE OPPORTUNITY ShyftLabs is a fast-growing data and technology company that partners with Fortune 500 and enterprise organizations to deliver innovative, data-driven solutions. We specialize in building scalable, enterprise-grade platforms that leverage modern technologies, cloud infrastructure, and advanced engineering practices to solve complex business challenges. We are seeking a Security Engineer, Network & Infrastructure Security to support enterprise security initiatives for one of our clients. This is a client-facing, individual contributor role that combines deep technical expertise with security architecture advisory, risk assessment, and cross-functional collaboration. In this role, you will help define, assess, and strengthen security controls across enterprise network and infrastructure environments. You will serve as a trusted technical advisor, partnering directly with client stakeholders across Network Engineering, Infrastructure, Cloud, and Information Security to establish security standards, evaluate architecture and design decisions, and implement scalable security practices. The ideal candidate brings hands-on experience in network and infrastructure security, a strong understanding of enterprise security architecture, and the ability to communicate complex technical concepts and recommendations to both technical teams and business stakeholders. ## What You'll Be Doing - Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways. Review client network designs and implementations to ensure alignment with security requirements and industry best practices. - Work directly with client stakeholders to assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions. Collaborate with engineering teams to translate security requirements into practical, scalable solutions. - Establish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including platforms such as Palo Alto GlobalProtect. Define access controls, device posture requirements, and compliance monitoring practices. - Establish standards for Public Key Infrastructure (PKI), certificate authority governance, cryptographic key management, and certificate lifecycle operations. Identify opportunities to automate certificate discovery, renewal, and compliance monitoring. - Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNS Security Extensions (DNSSEC), split-horizon DNS, and centralized logging. - Develop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, payment card industry (PCI) zones, IoT/OT environments, and third-party connections to reduce attack surfaces and limit lateral movement. - Define and validate security hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances. Apply CIS Benchmarks and automated compliance tools to identify configuration drift and drive remediation. - Investigate complex network security incidents, connectivity issues, and remote access failures. Conduct root-cause analysis, coordinate remediation with client engineering teams, and provide recommendations to prevent recurrence. - Ensure relevant network, DNS, proxy, endpoint, and identity telemetry is appropriately captured and integrated into Security Information and Event Management (SIEM) platforms. Partner with security operations teams to improve visibility, detection, and investigation capabilities. - Review firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance. Promote least-privilege access, accurate configuration and asset records, and consistent security governance. - Develop scripts, tools, and workflows to automate security compliance assessments, firewall rule reviews, configuration validation, and security posture reporting using Python, PowerShell, Bash, or similar technologies. - Assess existing security controls against recognized frameworks and regulatory requirements, including CIS Benchmarks, NIST Cybersecurity Framework, and PCI DSS. Document findings, recommend remediation strategies, and communicate progress to relevant stakeholders. - Identify opportunities to improve enterprise security architecture, reduce infrastructure exposure, standardize security controls, and embed secure-by-design principles into engineering processes. ## What You'll Bring - 4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles. - Hands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler. - Strong understanding of networking fundamentals and protocols, including TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS, with the ability to perform packet-level analysis. - Working knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management. - Practical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls. - Experience with endpoint detection and response (EDR) platforms, such as CrowdStrike, and SIEM technologies and query languages, such as KQL or SPL. - Familiarity with security frameworks and compliance standards, including CIS Benchmarks, NIST CSF, and PCI DSS. - Scripting or automation experience using Python, PowerShell, Bash, or similar languages to support security assurance, compliance validation, and reporting. - Experience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable security recommendations. - Strong communication and stakeholder management skills, with the ability to engage directly with clients, explain technical risks, and influence engineering decisions. - A consultative, collaborative approach to problem-solving, with the ability to balance security requirements, operational constraints, and business priorities. - Ability to work independently, manage competing priorities, and drive security initiatives through assessment, recommendation, and remediation. ## Nice to Have - Experience securing cloud network infrastructure and logging services across AWS, Microsoft Azure, or Google Cloud Platform (GCP). - Familiarity with automated certificate management solutions, such as ACME or Venafi, and protective DNS platforms, such as Infoblox or Cloudflare. - Experience with Infrastructure as Code (IaC) tools, including Terraform or Ansible, and integrating security guardrails into CI/CD pipelines. - Experience securing distributed enterprise environments, retail edge infrastructure, or IoT/OT networks. - Working knowledge of compliance requirements such as PCI DSS and SOX. - Familiarity with IT service management and change management platforms, such as Jira Service Management or ServiceNow. - Relevant security certifications, including CompTIA Security+, Network+, PCNSE, CCNP Security, AWS or Azure Security certifications, or GIAC credentials. Salary Range - $100,000 - $120,000 (CAD) Inclusion at ShyftLabs We’re building something big, and we want you on the journey with us. If you’re ready to use data and innovation to make an impact, apply today and let’s grow together. ShyftLabs is an equal-opportunity employer committed to creating a safe, diverse, and inclusive environment. We encourage applicants of all backgrounds including ethnicity, religion, disability status, gender identity, sexual orientation, family status, age, and nationality to apply. If you require accommodation during the interview process, let us know and we’ll be happy to support you. ## About ShyftLabs ## Company Overview - **One-liner**: ShyftLabs is a data and AI consulting firm that builds enterprise-grade intelligent systems to help Fortune 500 companies, retailers, health organizations, and public agencies turn data into measurable business outcomes. - **Entity Type**: Private (Bootstrapped) - **Headquarters**: Toronto, Ontario, Canada - **Founded**: 2018 - **Founders**: Brian Würtz Leth (Co-Founder, COO) – additional co-founders are not publicly listed. ## Core Business - **Primary industries**: Data & AI consulting, digital transformation, enterprise technology services. - **Target customers**: B2B, large enterprises (Fortune 500), government agencies, healthcare organizations. - **Mission or purpose statement**: “Move from pain points to measurable outcomes, fast.” They aim to make data actionable and power real-time decisions with privacy-first, responsible AI systems. ## Products & Services - **Enterprise AI & Data Consulting**: Custom AI solutions, machine learning models, and data infrastructure designed for trusted enterprise deployment. - **Digital Transformation Services**: Modernization of legacy systems, cloud migration, and scalable AI-ready platforms. - **Data Infrastructure & Governance**: Building governed data pipelines, privacy-first architecture, and secure integrations. - **Responsible AI Controls**: Governance frameworks, bias detection, and compliance-focused AI deployment. ## Market Standing - **Valuation/Market Cap**: Not disclosed (privately held). - **Key Metric**: Claims to have unlocked over $2B in client value (as stated on their website) and $500M+ in measurable value for clients. - **Notable Investors/Partners**: No public investors listed. Partners include major retailers, health organizations, and public agencies (specific names not disclosed). - **Growth Signals**: - Headcount: ~177 employees (LinkedIn) with +1.4% monthly growth; website states 250+ experts. - Active job postings: 30+ (Lever) with 22 roles posted in the last 90 days. - Offices in Toronto, New York, Dubai, and Noida (India), with distributed teams across 6 countries. - 54% of employees in technical roles, indicating strong engineering focus. ## Competitive Advantages - **Privacy-first architecture** and **governed data infrastructure** tailored for enterprise compliance. - **Multi-geography delivery** (North America, Europe, Middle East, India) enabling 24/7 support and diverse talent pools. - **Track record with Fortune 500 clients** and proven ability to deliver measurable ROI (over $500M client value). - **Full-stack AI expertise** spanning data engineering, machine learning, and responsible AI governance. ## Strategic Focus - Scaling AI systems that power real-time decisions across critical industries (retail, healthcare, government). - Modernizing legacy infrastructure for enterprises moving to AI-ready platforms. - Expanding their presence in commerce media (e.g., Carter partnership) and deepening client relationships through account management. - Growth in autonomous AI agents and privacy-first solutions. ## Why Work Here - **Culture & Ratings**: 4.2/5 on Glassdoor (60 reviews) with Work-Life Balance 4.3, Compensation 4.2, Culture 4.2. - **Benefits**: 100% coverage for health, dental, and vision insurance for employees and dependents from day one. - **Work Environment**: Hybrid policy in Toronto (minimum 4 in-office days per week); other offices vary. Fast-paced, product-focused, and collaborative. - **Growth Opportunities**: Continuous learning, influence over strategic direction, and opportunities to build AI systems used by Fortune 500 companies. - **Diversity & Inclusion**: Equal opportunity employer committed to creating a safe, diverse, and inclusive environment. ## Sources 1. [shyftlabs.io](https://shyftlabs.io/about-us) 2. [LinkedIn](https://linkedin.com/company/shyftlabsio) 3. [Indeed](https://ca.indeed.com/cmp/Shyftlabs/jobs) 4. [GetClera](https://www.getclera.com/companies/shyftlabsio) 5. [Lever Jobs](https://jobs.lever.co/shyftlabs) ## Other roles at ShyftLabs - [Forward - Data Visualization & Analytics Specialist](https://feeny.ai/job/forward-data-visualization-analytics-specialist-shyftlabs-toronto-japf0qjtsat1) — Toronto, Canada - [Forward - Senior Data Analyst, Advanced Analytics & Data Science](https://feeny.ai/job/forward-senior-data-analyst-advanced-analytics-data-science-shyftlabs-toronto-vvd9h35zcf3y) — Toronto, Canada - [Business Development Intern](https://feeny.ai/job/business-development-intern-shyftlabs-toronto-82hgngvp67fd) — Toronto, Canada - [Graphic Design Intern](https://feeny.ai/job/graphic-design-intern-shyftlabs-toronto-wvat1rjcg1by) — Toronto, Canada - [Office Receptionist](https://feeny.ai/job/office-receptionist-shyftlabs-toronto-f0rqnj3ma7cv) — Toronto, Canada - [Forward Deployed - Data Architect](https://feeny.ai/job/forward-deployed-data-architect-shyftlabs-toronto-edddvdrv2v8v) — Toronto, Canada - [Forward Deployed - AI Solutions Architect (GenAI & Agentic AI)](https://feeny.ai/job/forward-deployed-ai-solutions-architect-genai-agentic-ai-shyftlabs-toronto-t7hwqkm5ed0g) — Toronto, Canada - [Forward Deployed - Data & AI Product Manager](https://feeny.ai/job/forward-deployed-data-ai-product-manager-shyftlabs-toronto-zy1ng9swef8p) — Toronto, Canada - [Senior Unix/Linux Automation Engineer](https://feeny.ai/job/senior-unix-linux-automation-engineer-shyftlabs-noida-x00e7frd37nw) — Noida, India - [Senior Data Engineer -Databricks](https://feeny.ai/job/senior-data-engineer-databricks-shyftlabs-coimbatore-h8pn6yacyvgw) — Coimbatore, India