Job Description
The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra ID, Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects.
Job Description
The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra ID, Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects.
Responsibilities
- Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email encryption, and endpoint encryption.
- Implement and monitor security best practices for Entra ID, Exchange Online/on-prem, SharePoint, and hybrid Active Directory.
- Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
- Secure and harden Microsoft and Oracle applications, and Windows/Linux operating systems.
- Strengthen network device configurations against CIS and NIA QCF 2022 and implement secure network architecture.
- Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection.
- Drive cybersecurity programs to close gaps identified by internal/external auditors, including NCSA; lead security solution implementation projects and manage vendors.
- Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed.
Qualifications
Experience Required
- 8-10 years of experience in cloud/cybersecurity engineering, operations, and advisory.
- Proven hands-on administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support.
- Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
- Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation (NCSA).
- Willingness and ability to travel to data center/client locations and provide on-call support as required.
Required Certifications
- Microsoft SC-300 (Identity and Access Administrator) – Entra ID/Entra Suite.
- Microsoft SC-200 (Security Operations Analyst) – Defender XDR (MDE/MDS).
- Microsoft SC-100 (Cybersecurity Architect Expert).
- Microsoft AZ-500 (Azure Security Engineer Associate).
- CISSP (Certified Information Systems Security Professional).
- NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop Certified Administrator).
- DLP certification (e.g., Microsoft Purview DLP or Symantec/Broadcom DLP Administrator).
- PAM certification (e.g., CyberArk Defender/Sentry or BeyondTrust Certified Administrator) – covering PAM and PAW.
- WAF certification (e.g., F5 Certified BIG-IP Administrator, Imperva, or Cloudflare WAF).
- SASE certification (e.g., Zscaler ZDTA/ZIA or Palo Alto Prisma SASE).
- Database security certification (e.g., Oracle Database Security or Imperva Data Security).
Preferred Certifications
CISM, CCSP, CEH.
All certifications must be current. Equivalent recognized credentials may be considered subject to approval.
Primary Focus
- Administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support.
- Hands-on experience across NDR, DLP, PAM, PAW, WAF, SASE, and database security tooling.
#J-18808-Ljbffr