Network Security Engineer

Job Title: Network Security Engineer

This role is primarily focused on hands-on network and information security administration within a hybrid Microsoft environment. The ideal candidate should have strong experience with FortiGate firewalls, Microsoft 365 security, endpoint protection, identity management, data loss prevention, and incident response.

Key Technical Requirements

• 5+ years of hands-on network or information security experience.

• Strong FortiGate firewall administration, including firewall policies, VPN, IPS, network segmentation, and wireless security.

• Experience with CrowdStrike Falcon and Microsoft Defender for endpoint detection and response (EDR).

• Strong Microsoft 365 security administration, including email security, phishing protection, and threat filtering.

• Hands-on experience with Microsoft Entra ID, Active Directory, and Intune in a hybrid environment.

• Knowledge of MFA, Conditional Access, privileged access management, device compliance, and encryption.

• Experience with Microsoft Purview, including data classification, sensitivity labels, and Data Loss Prevention (DLP).

• Knowledge of email authentication protocols: SPF, DKIM, and DMARC.

• Experience with vulnerability assessment, patch management, security monitoring, and incident response.

• Familiarity with NIST CSF, CIS Controls, or ISO 27001 security frameworks.

• Experience supporting security audits, vendor assessments, and client security questionnaires.

Key Responsibilities

• Administer and maintain FortiGate firewalls and network security controls.

• Manage endpoint security solutions, including CrowdStrike and Microsoft Defender.

• Maintain identity and access management across Entra ID and Active Directory.

• Implement and maintain Microsoft Purview DLP and data classification policies.

• Monitor and investigate security alerts from managed security monitoring services.

• Perform incident investigation, threat containment, remediation, and recovery.

• Manage vulnerability remediation and security patching across infrastructure.

• Conduct cloud application and vendor security assessments.

• Support AI governance and acceptable-use controls.

• Assist with security audits, compliance documentation, and client security questionnaires.

Preferred Skills

• Previous experience working in a law firm or professional services environment.

• Understanding of client confidentiality and privileged information protection.

• AI governance, AI risk assessment, and acceptable-use policy implementation.

• CISSP, CISM, or equivalent security certification.

• Experience with SHIELD Act obligations, eDiscovery, retention, and information barriers.