Network Security Senior Engineer

About this opportunity

Job Description The Senior Network Security Engineer will serve as the technical owner of the organization's cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra ID, Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects. Responsibilities Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email encryption, and endpoint encryption. Implement and monitor security best practices for Entra ID, Exchange Online/on-prem, SharePoint, and hybrid Active Directory. Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security tools. Secure and harden Microsoft and Oracle applications, and Windows/Linux operating systems. Strengthen network device configurations against CIS and NIA QCF 2022 and implement secure network architecture. Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection. Drive cybersecurity programs to close gaps identified by internal/external auditors, including NCSA; lead security solution implementation projects and manage vendors. Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed. Qualifications Experience Required: 8–10 years of experience in cloud/cybersecurity engineering, operations, and advisory. Proven hands-on administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support. Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools. Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation (NCSA). Willingness and ability to travel to data center/client locations and provide on-call support as required. Required Certifications Microsoft SC-300 (Identity and Access Administrator) – Entra ID/Entra Suite. Microsoft SC-200 (Security Operations Analyst) – Defender XDR (MDE/MDS). Microsoft SC-100 (Cybersecurity Architect Expert). Microsoft AZ-500 (Azure Security Engineer Associate). CISSP (Certified Information Systems Security Professional). NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop Certified Administrator). DLP certification (e.g., Microsoft Purview DLP or Symantec/Broadcom DLP Administrator). PAM certification (e.g., CyberArk Defender/Sentry or BeyondTrust Certified Administrator) – covering PAM and PAW. WAF certification (e.g., F5 Certified BIG-IP Administrator, Imperva, or Cloudflare WAF). SASE certification (e.g., Zscaler ZDTA/ZIA or Palo Alto Prisma SASE). Database security certification (e.g., Oracle Database Security or Imperva Data Security). Preferred Certifications: CISM, CCSP, CEH. All certifications must be current. Equivalent recognized credentials may be considered subject to approval. Primary Focus Administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support. Hands-on experience across NDR, DLP, PAM, PAW, WAF, SASE, and database security tooling.