Senior Network & Microsoft Security Engineer

Endava

Bucharest, Romania

Job Description

We are seeking a skilled Senior Network & Microsoft Security Engineer to join our team and play a critical role in securing and maintaining our network infrastructure. The ideal candidate will have hands-on experience with one or more major security vendors such as Palo Alto, Fortinet, Check Point, or Cisco within a globally distributed enterprise network, along with strong practical experience with Microsoft Defender and Microsoft Entra ID.

Key Responsibilities:

Administer and maintain Microsoft Defender security solutions across endpoint, identity, and cloud environments;
Configure, manage, and troubleshoot Microsoft Entra ID security features, including Conditional Access, Identity Protection, and authentication policies;
Investigate and respond to security alerts generated by Microsoft Defender and integrate findings into incident response activities;
Managing and maintaining network security solutions using Palo Alto, Fortinet, Check Point, or Cisco technologies;
Configure, maintain, and troubleshoot firewalls, VPNs, IPS, and other security appliances;
Monitor network security, analyze threats, and respond to security incidents in a timely manner;
Develop and enforce security policies, procedures, and best practices;
Perform security risk assessments and recommend solutions to mitigate vulnerabilities;
Configure and troubleshoot network routing protocols as part of security design and optimization;
Conduct network troubleshooting, including packet capture and deep analysis using Wireshark and other network diagnostic tools;
Collaborate with IT teams to ensure seamless integration of security solutions with network infrastructure;
Stay up to date with emerging cybersecurity threats and industry best practices.

Qualifications

Required Skills & Experience:

Hands-on experience with one or more of the following security platforms: Palo Alto, Fortinet, Check Point, or Cisco within a globally distributed enterprise network;
Hands-on experience with Microsoft Defender (Defender XDR/Microsoft Defender security suite);
Hands-on experience administering Microsoft Entra ID, including Conditional Access, Identity Protection, MFA, and authentication policies;
Strong understanding of firewall policies, VPNs, IDS/IPS, and network segmentation;
Hands-on experience with network troubleshooting, packet capture, and deep packet analysis using Wireshark;
Experience with network protocols, routing, switching, and security frameworks;
Experience with SIEM solutions and incident response procedures.