Network Security Senior Engineer
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Network Security, Security Management & Operations
The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra , Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions.
Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects.
The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra , Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions.
Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects.
- Solely implement, administer, and manage (out-of-the-box, no service-provider involvement):
Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email encryption, and endpoint encryption. - Implement and monitor security best practices for Entra , Exchange Online/on-prem, SharePoint, and hybrid Active Directory.
- Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
- Secure and harden Microsoft and Oracle applications, and Windows/Linux operating systems.
- Strengthen network device configurations against CIS and NIA QCF 2022 and implement secure network architecture.
- Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection.
- Drive cybersecurity programs to close gaps identified by internal/external auditors, including NCSA; lead security solution implementation projects and manage vendors.
- Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed.
- 8-10 years of experience in cloud/cybersecurity engineering, operations, and advisory.
- Proven hands-on administration of Entra , Defender XDR, and email/endpoint encryption without vendor support.
- Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
- Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation (NCSA).
- Willingness and ability to travel to data center/client locations and provide on-call support as required.
- Microsoft SC-300 (Identity and Access Administrator) – Entra /Entra Suite.
- Microsoft SC-200 (Security Operations Analyst) – Defender XDR (MDE/MDS).
- Microsoft SC-100 (Cybersecurity Architect Expert).
- Microsoft AZ-500 (Azure Security Engineer Associate).
- CISSP (Certified Information Systems Security Professional).
- NDR platform certification (e.g., Vectra, Darktrace, or Extra Hop Certified Administrator).
- DLP certification (e.g., Microsoft Purview DLP or Symantec/Broadcom DLP Administrator).
- PAM certification (e.g., Cyber Ark Defender/Sentry or Beyond Trust Certified Administrator) – covering PAM and PAW.
- WAF certification (e.g., F5 Certified BIG-IP Administrator, Imperva, or Cloudflare WAF).
- SASE certification (e.g., Zscaler ZDTA/ZIA or Palo Alto Prisma SASE).
- Database security certification (e.g., Oracle Database Security or Imperva Data Security).
CISM, CCSP, CEH.
All certifications must be current. Equivalent recognized credentials may be considered subject to approval.
Primary Focus- Administration of Entra , Defender XDR, and email/endpoint encryption without vendor support.
- Hands-on experience across NDR, DLP, PAM, PAW, WAF, SASE, and database security tooling.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).