Network Administration Technician providing tiered end - user IT support for IESO, which manages Ontario’s electricity system. Maintaining hardware, software, systems, and service operations across GTA locations.
About the role
- Security Engineer strengthening network and infrastructure security for ShyftLabs’ enterprise data technology clients. Advising stakeholders on architecture, controls, compliance, and secure automation.
Responsibilities
- Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways; review client network designs and implementations.
- Assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions with client stakeholders.
- Establish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including Palo Alto GlobalProtect.
- Establish standards for PKI, certificate authority governance, cryptographic key management, and certificate lifecycle operations; identify automation opportunities.
- Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNSSEC, split-horizon DNS, and centralized logging.
- Develop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, PCI zones, IoT/OT environments, and third-party connections.
- Define and validate hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances using CIS Benchmarks and automated compliance tools.
- Investigate network security incidents, connectivity issues, and remote access failures; conduct root-cause analysis and coordinate remediation.
- Ensure network, DNS, proxy, endpoint, and identity telemetry is integrated into SIEM platforms; improve visibility, detection, and investigation capabilities.
- Review firewall changes, network designs, infrastructure requests, and security exceptions for risk and compliance; promote least-privilege access and security governance.
- Develop scripts, tools, and workflows using Python, PowerShell, Bash, or similar technologies to automate security compliance assessments, firewall rule reviews, configuration validation, and posture reporting.
- Assess controls against CIS Benchmarks, NIST Cybersecurity Framework, and PCI DSS; document findings, recommend remediation, and communicate progress.
- Improve enterprise security architecture, reduce infrastructure exposure, standardize controls, and embed secure-by-design principles into engineering processes.
Requirements
- 4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles.
- Hands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler.
- Strong understanding of networking fundamentals and protocols, including TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS, with the ability to perform packet-level analysis.
- Working knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management.
- Practical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls.
- Experience with endpoint detection and response (EDR) platforms, such as CrowdStrike, and SIEM technologies and query languages, such as KQL or SPL.
- Familiarity with security frameworks and compliance standards, including CIS Benchmarks, NIST CSF, and PCI DSS.
- Scripting or automation experience using Python, PowerShell, Bash, or similar languages to support security assurance, compliance validation, and reporting.
- Experience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable security recommendations.
- Strong communication and stakeholder management skills, with the ability to engage directly with clients, explain technical risks, and influence engineering decisions.
- A consultative, collaborative approach to problem-solving, with the ability to balance security requirements, operational constraints, and business priorities.
- Ability to work independently, manage competing priorities, and drive security initiatives through assessment, recommendation, and remediation.
- Experience securing cloud network infrastructure and logging services across AWS, Microsoft Azure, or Google Cloud Platform (GCP).
- Familiarity with automated certificate management solutions, such as ACME or Venafi, and protective DNS platforms, such as Infoblox or Cloudflare.
- Experience with Infrastructure as Code (IaC) tools, including Terraform or Ansible, and integrating security guardrails into CI/CD pipelines.
- Experience securing distributed enterprise environments, retail edge infrastructure, or IoT/OT networks.
- Working knowledge of compliance requirements such as PCI DSS and SOX.
- Familiarity with IT service management and change management platforms, such as Jira Service Management or ServiceNow.
- Relevant security certifications, including CompTIA Security+, Network+, PCNSE, CCNP Security, AWS or Azure Security certifications, or GIAC credentials.
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Network Designer creating IP, transport, broadband, voice, and corporate network architectures. Supporting telecommunications deployments through capacity planning, technical documentation, BOMs, and lifecycle design.
Senior Network Specialist securing WAN, LAN, wireless, and SD - WAN environments for Bulletproof’s Microsoft - powered technology and managed services clients. Handling escalations and network projects.
Senior Network Specialist architecting secure Fortinet and Cisco networks for Bulletproof’s cybersecurity, cloud, compliance, and managed services clients. Handling escalations and network projects.
Microwave Network Engineer designing, integrating, and troubleshooting wireless backhaul networks for ELITS. Supporting Canadian telecom modernization, capacity expansion, and regulatory compliance.
IP Network Engineer designing and optimizing Cisco IP/MPLS transport networks for ELITS Canada. Supporting LTE, 5G, RAN backhaul, commissioning, upgrades, and troubleshooting.
Network Architect designing secure, scalable enterprise networks for Charter, a Canadian IT solutions and managed services provider. Leading complex networking initiatives, client consulting, and modernization across cloud and hybrid environments.
Network Architect designing Zayo’s carrier - grade Layer 2 and Layer 3 infrastructure. Developing scalable architectures, testing platforms, and supporting enterprise network services.
Senior Network Security Engineer designing TD's cloud SASE and Netskope infrastructure. Delivering traffic steering, DLP, SDWAN, and enterprise network security solutions for TD Bank.
Spécialiste réseau soutenant un réseau d'entreprise mondial de plus de 100 sites chez Solutions SFT. Automatisation, infonuagique Azure, sécurité et amélioration continue.