Network Security Engineer

• Administer and maintain FortiGate firewalls and network security controls.
• Manage endpoint security solutions, including CrowdStrike and Microsoft Defender.
• Maintain identity and access management across Entra ID and Active Directory.
• Implement and maintain Microsoft Purview DLP and data classification policies.
• Monitor and investigate security alerts from managed security monitoring services.
• Perform incident investigation, threat containment, remediation, and recovery.
• Manage vulnerability remediation and security patching across infrastructure.
• Conduct cloud application and vendor security assessments.
• Support AI governance and acceptable-use controls.
• Assist with security audits, compliance documentation, and client security questionnaires.

This role is primarily focused on hands-on network and information security administration within a hybrid Microsoft environment. The ideal candidate should have strong experience with FortiGate firewalls, Microsoft 365 security, endpoint protection, identity management, data loss prevention, and incident response.

Key Technical Requirements

• 5+ years of hands-on network or information security experience.
• Strong FortiGate firewall administration, including firewall policies, VPN, IPS, network segmentation, and wireless security.
• Experience with CrowdStrike Falcon and Microsoft Defender for endpoint detection and response (EDR).
• Strong Microsoft 365 security administration, including email security, phishing protection, and threat filtering.
• Hands-on experience with Microsoft Entra ID, Active Directory, and Intune in a hybrid environment.
• Knowledge of MFA, Conditional Access, privileged access management, device compliance, and encryption.
• Experience with Microsoft Purview, including data classification, sensitivity labels, and Data Loss Prevention (DLP).
• Knowledge of email authentication protocols: SPF, DKIM, and DMARC.
• Experience with vulnerability assessment, patch management, security monitoring, and incident response.
• Familiarity with NIST CSF, CIS Controls, or ISO 27001 security frameworks.
• Experience supporting security audits, vendor assessments, and client security questionnaires., * Previous experience working in a law firm or professional services environment.
• Understanding of client confidentiality and privileged information protection.
• AI governance, AI risk assessment, and acceptable-use policy implementation.
• CISSP, CISM, or equivalent security certification.
• Experience with SHIELD Act obligations, eDiscovery, retention, and information barriers.