Senior Network Security Engineer

Role Overview: The role focuses on hands-on engineering, administration, and management of enterprise network and cloud security solutions, with primary ownership of Microsoft Entra ID, Microsoft Defender XDR, and email and endpoint encryption. The position requires strong technical expertise across network security, cloud security, identity management, endpoint protection, and enterprise security technologies, with the ability to independently implement and manage security solutions. Key Responsibilities: • Independently implement, configure, and administer Microsoft Entra ID, Microsoft Defender XDR, email encryption, and endpoint encryption. • Manage and secure Microsoft 365, Exchange Online/on-premises, SharePoint, and hybrid Active Directory environments. • Administer and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. • Perform security hardening of Microsoft and Oracle applications, Windows and Linux operating systems. • Implement secure network configurations aligned with CIS benchmarks and NIA QCF 2022 standards. • Conduct security assessments, configuration reviews, and risk evaluations. • Drive security implementation initiatives and remediation of internal and external audit findings, including NCSA. • Provide technical security advisory and support security solution evaluation and vendor selection. • Coordinate with service providers and manage security implementation projects. • Support datacenter and client-site requirements, including on-call incident support when required. Required Skills & Experience: • 8–10 years of hands-on experience in network and cloud security engineering. • Strong expertise in Microsoft Entra ID, Defender XDR, and email/endpoint encryption. • Ability to independently configure, administer, and manage security platforms without vendor dependency. • Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security technologies. • Strong knowledge of network security architecture, security hardening, and enterprise infrastructure. • Experience securing Microsoft and Oracle applications, Windows/Linux environments, and hybrid infrastructure. • Exposure to cybersecurity audits, risk assessments, and compliance remediation. Required Certifications: • Microsoft SC-300, SC-200, SC-100, AZ-500 • CISSP • NDR – Vectra, Darktrace, or ExtraHop • DLP – Microsoft Purview or Symantec/Broadcom • PAM – CyberArk or BeyondTrust • WAF – F5, Imperva, or Cloudflare • SASE – Zscaler or Palo Alto Prisma • Database Security – Oracle or Imperva Certifications must be current. Equivalent recognized certifications may be considered, subject to approval. CISM, CCSP, and CEH are preferred. Additional Requirement: Willingness to travel to datacenter/client locations and provide on-call support as required.