Senior Network Security Engineer

About the role

This role focuses on hands-on engineering, administration and management of enterprise network and cloud security solutions, with primary ownership of Microsoft Entra ID, Microsoft Defender XDR and email and endpoint encryption. It calls for strong technical expertise across network security, cloud security, identity management, endpoint protection and enterprise security technologies, with the ability to independently implement and manage security solutions.

Key responsibilities

• Independently implement, configure and administer Microsoft Entra ID, Microsoft Defender XDR, email encryption and endpoint encryption.
• Manage and secure Microsoft 365, Exchange Online/on-premises, SharePoint and hybrid Active Directory environments.
• Administer and review configurations of NDR, DLP, PAM, PAW, WAF, SASE and database security solutions.
• Harden Microsoft and Oracle applications, and Windows and Linux systems; align network configurations with CIS benchmarks and NIA QCF 2022 standards.
• Run security assessments, configuration reviews and risk evaluations.
• Drive security initiatives and remediate audit findings, including NCSA.
• Advise technically on security solutions, evaluate vendors and coordinate with service providers on implementation projects.
• Support datacenter and client-site needs, including on-call incident support when required.

Required profile

• 8-10 years of hands-on experience in network and cloud security engineering.
• Ability to configure, administer and manage security platforms without vendor dependency.
• Experience securing Microsoft and Oracle applications, Windows/Linux environments and hybrid infrastructure.
• Exposure to cybersecurity audits, risk assessments and compliance remediation.
• Willingness to travel to datacenter and client sites and work on call.

Required skills

• Strong expertise in Microsoft Entra ID, Defender XDR and email/endpoint encryption.
• NDR, DLP, PAM, PAW, WAF, SASE and database security technologies.
• Network security architecture, security hardening and enterprise infrastructure.
• Certifications: Microsoft SC-300, SC-200, SC-100, AZ-500; NDR (Vectra, Darktrace or ExtraHop); DLP (Microsoft Purview or Symantec/Broadcom); PAM (CyberArk or BeyondTrust); WAF (F5, Imperva or Cloudflare); SASE (Zscaler or Palo Alto Prisma); Database Security (Oracle or Imperva). Current certifications; equivalent ones may be considered. CISM, CCSP and CEH preferred.