> Markdown version of [/jobs/ext/4549960-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/4549960-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Security Engineer - **Company:** Tixy Services LLC - **Location:** Rochester, NY, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Application Firewall, Authentication Protocols, Software as a Service, Cyber Security, Information Leak Prevention, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Multi-Factor Authentication, Identity and Access Management, Virtual Private Networks (VPN), Network Security, Microsoft Servers, Wireless Security, Network Segmentation, Azure Active Directory, Anti-Phishing, Service Pack, Software Vulnerability Management, Data Classification, In-Plane Switching (IPS), Microsoft InTune, Azure Security Center, National Institute of Standards and Technology Cybersecurity Framework, Sender Policy Framework (SPF), Patch Management, Fortinet, CIS Benchmarks, Firewall Services Module, Vulnerability Analysis - **Published:** November 3, 2026 - **Apply:** https://www.dice.com/job-detail/4d1114b2-ce96-4f9f-b655-7406b449bb3c ## About the Role This role is primarily focused on hands-on network and information security administration within a hybrid Microsoft environment. The ideal candidate should have strong experience with FortiGate firewalls, Microsoft 365 security, endpoint protection, identity management, data loss prevention, and incident response. Key Technical Requirements * 5+ years of hands-on network or information security experience. * Strong FortiGate firewall administration, including firewall policies, VPN, IPS, network segmentation, and wireless security. * Experience with CrowdStrike Falcon and Microsoft Defender for endpoint detection and response (EDR). * Strong Microsoft 365 security administration, including email security, phishing protection, and threat filtering. * Hands-on experience with Microsoft Entra ID, Active Directory, and Intune in a hybrid environment. * Knowledge of MFA, Conditional Access, privileged access management, device compliance, and encryption. * Experience with Microsoft Purview, including data classification, sensitivity labels, and Data Loss Prevention (DLP). * Knowledge of email authentication protocols: SPF, DKIM, and DMARC. * Experience with vulnerability assessment, patch management, security monitoring, and incident response. * Familiarity with NIST CSF, CIS Controls, or ISO 27001 security frameworks. * Experience supporting security audits, vendor assessments, and client security questionnaires., * Previous experience working in a law firm or professional services environment. * Understanding of client confidentiality and privileged information protection. * AI governance, AI risk assessment, and acceptable-use policy implementation. * CISSP, CISM, or equivalent security certification. * Experience with SHIELD Act obligations, eDiscovery, retention, and information barriers. ## Description * Administer and maintain FortiGate firewalls and network security controls. * Manage endpoint security solutions, including CrowdStrike and Microsoft Defender. * Maintain identity and access management across Entra ID and Active Directory. * Implement and maintain Microsoft Purview DLP and data classification policies. * Monitor and investigate security alerts from managed security monitoring services. * Perform incident investigation, threat containment, remediation, and recovery. * Manage vulnerability remediation and security patching across infrastructure. * Conduct cloud application and vendor security assessments. * Support AI governance and acceptable-use controls. * Assist with security audits, compliance documentation, and client security questionnaires.