Forward - Security Engineer, Network & Infrastructure Security

About the role

THE OPPORTUNITY

ShyftLabs is a fast-growing data and technology company that partners with Fortune 500 and enterprise organizations to deliver innovative, data-driven solutions. We specialize in building scalable, enterprise-grade platforms that leverage modern technologies, cloud infrastructure, and advanced engineering practices to solve complex business challenges.

We are seeking a Security Engineer, Network & Infrastructure Security to support enterprise security initiatives for one of our clients. This is a client-facing, individual contributor role that combines deep technical expertise with security architecture advisory, risk assessment, and cross-functional collaboration.

In this role, you will help define, assess, and strengthen security controls across enterprise network and infrastructure environments. You will serve as a trusted technical advisor, partnering directly with client stakeholders across Network Engineering, Infrastructure, Cloud, and Information Security to establish security standards, evaluate architecture and design decisions, and implement scalable security practices.

The ideal candidate brings hands-on experience in network and infrastructure security, a strong understanding of enterprise security architecture, and the ability to communicate complex technical concepts and recommendations to both technical teams and business stakeholders.

What You'll Be Doing -

Define and maintain enterprise security standards, reference architectures, and configuration baselines for next-generation firewalls, intrusion prevention and detection systems, web filtering, TLS inspection, and secure web gateways. Review client network designs and implementations to ensure alignment with security requirements and industry best practices.

-

Work directly with client stakeholders to assess security requirements, provide technical recommendations, communicate risks, and guide security architecture and implementation decisions. Collaborate with engineering teams to translate security requirements into practical, scalable solutions.

-

Establish and assess security standards for VPN and Zero Trust Network Access (ZTNA) solutions, including platforms such as Palo Alto GlobalProtect. Define access controls, device posture requirements, and compliance monitoring practices.

-

Establish standards for Public Key Infrastructure (PKI), certificate authority governance, cryptographic key management, and certificate lifecycle operations. Identify opportunities to automate certificate discovery, renewal, and compliance monitoring.

-

Define security requirements for enterprise and cloud DNS architectures, including protective DNS filtering, DNS Security Extensions (DNSSEC), split-horizon DNS, and centralized logging.

-

Develop and assess segmentation strategies and Zero Trust architectures across corporate networks, retail environments, payment card industry (PCI) zones, IoT/OT environments, and third-party connections to reduce attack surfaces and limit lateral movement.