Senior Network Security Engineer – Cloud & Microsoft 365

About the role

The Senior Network Security Engineer will own the organization’s cloud and Microsoft 365 security posture, focusing on hands‑on engineering, configuration, and administration of native security controls without relying on external service providers.

Key responsibilities

• Implement, administer and manage Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email and endpoint encryption.
• Configure and monitor security best practices for Entra ID, Exchange Online/on‑prem, SharePoint and hybrid Active Directory.
• Operate and review NDR, DLP, PAM, PAW, WAF, SASE and database security tools.
• Secure and harden Microsoft and Oracle applications as well as Windows/Linux operating systems.
• Strengthen network device configurations against CIS and NIA QCF 2022 standards and design secure network architecture.
• Provide continuous cybersecurity advisory, risk‑assessment support and assist with security product evaluation and vendor selection.
• Lead security implementation projects, close audit gaps and manage vendor relationships.
• Travel to data‑center and client sites as required and provide on‑call incident support outside business hours.

Required profile

• 8–10 years of experience in cloud/cybersecurity engineering, operations and advisory.
• Proven hands‑on administration of Entra ID, Defender XDR and email/endpoint encryption without vendor support.
• Experience with NDR, DLP, PAM, PAW, WAF, SASE and database security tools.
• Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation.
• Willingness to travel and provide on‑call support.

Required skills

• Azure Entra ID / Entra Suite
• Microsoft Defender for Endpoint / XDR
• Email and endpoint encryption technologies
• Network Detection and Response (NDR) platforms
• Data Loss Prevention (DLP) solutions
• Privileged Access Management (PAM) and Privileged Access Workstations (PAW)
• Web Application Firewalls (WAF)
• Secure Access Service Edge (SASE) solutions
• Database security tools
• Windows and Linux system hardening
• Microsoft and Oracle application security