Network Security Senior Engineer

Role overview

Responsibilities

• Implement and manage Entra Suite, Defender for Endpoint/Servers, and email and endpoint encryption without service-provider involvement.
• Apply security best practices to Entra ID, Exchange Online and on-premises Exchange, SharePoint, and hybrid Active Directory.
• Manage and review NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
• Secure and harden Microsoft and Oracle applications, Windows/Linux systems, and network infrastructure.
• Align network device configurations with CIS and NIA QCF 2022 and implement secure network architecture.
• Provide cybersecurity advisory and risk assessment support; assist with security product evaluation and provider selection.
• Close internal and external audit gaps, including NCSA findings; lead security implementation projects and manage vendors.
• Travel to data centers and client locations and provide on-call incident support outside business hours as needed.

Experience and qualifications

• 8–10 years of experience in cloud/cybersecurity engineering, operations, and advisory.
• Hands-on Entra ID, Defender XDR, and email/endpoint encryption administration without vendor support.
• Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
• Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including NCSA audit remediation.
• Ability to travel to data center/client locations and provide on-call support as required.

Required certifications

• Current Microsoft SC-300, SC-200, SC-100, and AZ-500 certifications are required.
• CISSP is required.
• Relevant platform certification is required for NDR, DLP, PAM/PAW, WAF, SASE, and database security; examples include Vectra, Darktrace, ExtraHop, Microsoft Purview, CyberArk, F5, Zscaler, Palo Alto, Oracle, or Imperva credentials.
• Equivalent recognized credentials may be considered subject to approval.

Preferred certifications

• CISM, CCSP, and CEH are preferred.