Network Security Senior Engineer

Job Description The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture, with a primarily hands-on focus on engineering, configuring, and administering cloud-native security controls independently, without reliance on service providers. The role will focus on Entra ID, Defender XDR, and email and endpoint encryption, alongside hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key responsibilities include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, providing cybersecurity advisory, and leading security implementation projects. Responsibilities • Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email encryption, and endpoint encryption. • Implement and monitor security best practices for Entra ID, Exchange Online/on-prem, SharePoint, and hybrid Active Directory. • Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security tools. • Secure and harden Microsoft and Oracle applications, and Windows/Linux operating systems. • Strengthen network device configurations against CIS and NIA QCF 2022 and implement secure network architecture. • Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection. • Drive cybersecurity programs to close gaps identified by internal/external auditors, including NCSA; lead security solution implementation projects and manage vendors. • Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed. Qualifications Experience Required: • 8–10 years of experience in cloud/cybersecurity engineering, operations, and advisory. • Proven hands-on administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support. • Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools. • Experience hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation (NCSA). • Willingness and ability to travel to data center/client locations and provide on-call support as required. Required Certifications • Microsoft SC-300 (Identity and Access Administrator) – Entra ID/Entra Suite. • Microsoft SC-200 (Security Operations Analyst) – Defender XDR (MDE/MDS). • Microsoft SC-100 (Cybersecurity Architect Expert). • Microsoft AZ-500 (Azure Security Engineer Associate). • CISSP (Certified Information Systems Security Professional). • NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop Certified Administrator). • DLP certification (e.g., Microsoft Purview DLP or Symantec/Broadcom DLP Administrator). • PAM certification (e.g., CyberArk Defender/Sentry or BeyondTrust Certified Administrator) – covering PAM and PAW. • WAF certification (e.g., F5 Certified BIG-IP Administrator, Imperva, or Cloudflare WAF). • SASE certification (e.g., Zscaler ZDTA/ZIA or Palo Alto Prisma SASE). • Database security certification (e.g., Oracle Database Security or Imperva Data Security). Preferred Certifications: CISM, CCSP, CEH. All certifications must be current. Equivalent recognized credentials may be considered subject to approval. Primary Focus • Administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support. • Hands-on experience across NDR, DLP, PAM, PAW, WAF, SASE, and database security tooling.