Network Security Engineer

The Network Security Engineer role sits within the Information Technology Department and exists to keep the organization's WAN, LAN, voice, and cloud infrastructure running efficiently, reliably, and securely. While the role retains the full scope of traditional network engineering, this description places heightened emphasis on cybersecurity operations and Microsoft Azure security, reflecting the organization's continued shift toward hybrid and cloud-hosted infrastructure.

The successful candidate will partner with third‑party providers and internal IT leadership to defend the network and cloud environment against malware, intrusion, and emerging cyber‑threats; maintain firewalls, identity controls, and access policies; ensure reliable backups and disaster recovery; and act as a key contributor to the organization's overall security posture across both on‑premises and Azure‑hosted resources.

Reports to:

CIO | Department: IT | Employment Status:
Exempt

• Lead and support efforts to harden the network and cloud environment against malware, ransomware, and intrusion, including proactive identification of emerging cyber‑threats and at‑risk areas across LAN, WAN, WLAN, SD‑WAN, and Azure‑hosted workloads.
• Design, implement, and maintain security controls within Microsoft Azure, including Azure Active Directory / Entra , Conditional Access policies, Multi‑Factor Authentication (MFA), Privileged Identity Management (PIM), and Azure role‑based access control (RBAC).
• Monitor and respond to alerts from Microsoft Defender for Cloud, Microsoft Sentinel (or equivalent SIEM), and Helpdesk/security partner tooling, escalating high‑risk issues to IT Management in a timely manner.
• Configure and maintain Cisco Meraki firewall security settings, network segmentation (subnetting/VLANs), and access permission groups to enforce least‑privilege principles across both on‑premises and cloud resources.
• Implement and maintain Azure network security components such as Network Security Groups (NSGs), Azure Firewall, Azure VPN/Express Route connections, and Azure Bastion for secure remote access.
• Support identity and access management initiatives, including device hardening, endpoint security, single sign‑on (SSO), and Group Policy enforcement for domain‑wide computer and user security baselines.
• Ensure secure, regularly‑tested backups of critical systems and servers, including the organization's Nutanix hyper‑converged and Cohesity backup environments, with attention to ransomware‑resilient and immutable backup practices.
• Participate in vulnerability management and patching cycles (Microsoft Intune), prioritizing remediation of high‑severity findings across servers, network devices, and cloud resources.
• Maintain and continuously improve security documentation, including network topology, data flow, incident response procedures, and Azure security architecture diagrams.
• Assist in security awareness initiatives and end‑user training to reinforce safe computing practices and compliance with IT framework, policies, and procedures.
• Support audits and compliance efforts related to data protection, access control, and cloud security standards, providing evidence and documentation as required.

• Perform day‑to‑day networking tasks to ensure network reliability, availability, and serviceability with minimal interruption.
• Provide technical support, respond to work orders and tickets, and analyze and resolve reported network problems.
• Install and troubleshoot LAN, WAN, WLAN, and SD‑WAN connectivity, including DNS, DHCP, and TCP/IP services.
• Develop and maintain complex documentation for installation, network topology, and troubleshooting of communications hardware and software.
• Work with the IT Team to coordinate and install server updates, patches, and certificates.
• Maintain an enterprise‑wide inventory of all server and network infrastructure assets, including warranty status and lifecycle management.
• Provide server systems support, administration, and documentation, including Windows Server operating systems and hypervisor‑based environments…