Security Engineer, Network & Infrastructure Security

Location: Remote, Toronto, Ontario, Canada

Salary: CAD 100,000–120,000 per year

Company

hirify.global is a data and technology company that partners with Fortune 500 and enterprise organizations to deliver scalable, data-driven platforms and solutions.

What you will do

• Define and maintain enterprise security standards, reference architectures, configuration baselines, and secure-by-design practices for network and infrastructure environments.
• Advise client stakeholders and engineering teams on security requirements, architecture decisions, risks, implementation options, and remediation strategies.
• Establish and assess standards for firewalls, IPS/IDS, secure web gateways, VPN, ZTNA, PKI, certificate management, DNS security, segmentation, and Zero Trust architectures.
• Validate hardening standards for Windows and Linux servers, containers, hypervisors, and network appliances using CIS Benchmarks and automated compliance tools.
• Investigate network security incidents, connectivity issues, and remote access failures; perform root-cause analysis and coordinate remediation.
• Improve security visibility and governance through SIEM telemetry integration, firewall and design reviews, automation, compliance assessments, and security posture reporting.

Requirements

• 4–6 years of IT or cybersecurity experience, including at least 3 years in network security or infrastructure security engineering, architecture, or advisory roles.
• Hands-on experience with enterprise firewall and secure access technologies such as Palo Alto, Fortinet, Cisco, or Zscaler.
• Strong understanding of TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, VPN, and TLS, including packet-level analysis.
• Working knowledge of PKI, certificate lifecycle management, enterprise DNS security, and cryptographic key management.
• Practical experience with Windows and Linux server hardening, privileged access management, vulnerability remediation, and infrastructure security controls.
• Experience with EDR platforms such as CrowdStrike and SIEM technologies and query languages such as KQL or SPL.
• Familiarity with CIS Benchmarks, NIST CSF, and PCI DSS.
• Scripting or automation experience with Python, PowerShell, Bash, or similar languages for security assurance, compliance validation, and reporting.
• Experience assessing security architecture, reviewing technical designs, documenting standards, and providing actionable recommendations; strong client communication and stakeholder management skills.
• Ability to work independently, manage competing priorities, and balance security requirements with operational constraints and business priorities.

Nice to have

• Experience securing cloud network infrastructure and logging services across AWS, Microsoft Azure, or Google Cloud Platform.
• Familiarity with automated certificate management solutions such as ACME or Venafi and protective DNS platforms such as Infoblox or Cloudflare.
• Experience with Infrastructure as Code tools including Terraform or Ansible and integrating security guardrails into CI/CD pipelines.
• Experience securing distributed enterprise environments, retail edge infrastructure, or IoT/OT networks.
• Working knowledge of SOX and additional PCI DSS compliance requirements.
• Familiarity with Jira Service Management, ServiceNow, or similar IT service and change management platforms.
• Relevant certifications such as CompTIA Security+, Network+, PCNSE, CCNP Security, AWS or Azure Security certifications, or GIAC credentials.

Culture & Benefits

• Full-time remote workplace.
• Client-facing individual contributor role with direct collaboration across Network Engineering, Infrastructure, Cloud, and Information Security.
• Equal-opportunity and inclusive work environment.
• Interview accommodations are available upon request.