microsoft security engineer

Intelligent Technical Solutions

<div><p><b>Job Description</b></p>
<p>
We are seeking a <b>CMMC Security Engineer</b> to design and build compliant Azure and Microsoft 365 environments for our CMMC consulting clients. This is a hands-on technical role. You will provision GCC and GCC High tenants, architect network security (Azure Firewall, VPN, NSGs), configure Entra ID with Conditional Access and Privileged Identity Management, deploy Intune for endpoint management, stand up Microsoft Sentinel for SIEM/SOAR, configure Purview for data protection, and deploy Defender for Endpoint across client environments. You will work from documented SOPs and a Control-Task Tracker that maps each NIST 800-171 control to specific Azure/M365 configurations. You will also capture technical evidence (screenshots, configuration exports, audit logs) to support the compliance documentation created by our GRC Consultants.</p>
<p><b>
Job Responsibilities</b></p>
<ul>
<li>Design and deploy CMMC-compliant enclave architectures in Azure: cloud-only (GCC/GCC High), hybrid (on-prem + GCC), and on-premises environments. Select and implement the appropriate topology (hub-spoke, segmented) based on client requirements.</li>
<li>Provision and configure Microsoft 365 GCC and GCC High tenants including initial setup, domain verification, licensing assignment, and tenant hardening.</li>
<li>Configure Microsoft Entra ID: user provisioning, Security Groups, Administrative Units, Conditional Access policies (MFA, device compliance, location-based, session controls), Privileged Identity Management (PIM), and Identity Protection risk policies.</li>
<li>Deploy and configure Microsoft Intune: device enrollment, compliance policies, configuration profiles, security baselines (CIS/STIG), BitLocker encryption with FIPS 140-2 compliance, Windows Update for Business rings, and application management via Company Portal.</li>
<li>Deploy and configure Microsoft Sentinel: Log Analytics workspace setup, data connector deployment (M365, Entra ID, Defender, Azure Activity, Firewall, NSG flow logs), KQL-based analytics rules, automation playbooks (Logic Apps), and CMMC compliance workbooks/dashboards.</li>
<li>Deploy and configure Microsoft Defender for Endpoint: device onboarding, antivirus policies, Attack Surface Reduction (ASR) rules, endpoint DLP, network protection, web content filtering, and vulnerability management.</li>
<li>Configure Microsoft Purview: sensitivity labels (CUI, FCI, Public), auto-labeling policies, DLP policies across Exchange, SharePoint, Teams, and endpoints, and information barriers where required.</li>
<li>Design and implement Azure networking: Virtual Networks, subnets, NSGs, Azure Firewall, Azure Bastion, VPN Gateway (site-to-site and point-to-site), Private Endpoints, route tables, and DDoS Protection.</li>
<li>For hybrid environments: configure Azure AD Connect (or Cloud Sync), hybrid device join, pass-through authentication or password hash sync, split DNS, and Azure Arc for on-premises server management.</li>
<li>Configure encryption across the environment: BitLocker (XTS-AES 256), FIPS 140-2 compliance mode, TLS 1.2+ enforcement, VPN encryption (IKEv2/AES-256), and Purview encryption for CUI-labeled content.</li>
<li>Execute remediation tasks from the CMMC Remediation Tracker as assigned by the GRC Consultant. Each task maps a specific NIST 800-171 control objective to an Azure/M365 configuration with step-by-step instructions.</li>
<li>Capture and organize technical evidence for each implemented control: configuration screenshots, policy exports (JSON), audit log samples, compliance reports, and test results.</li>
<li>Support incident response capability deployment: Sentinel playbook creation, automated notification workflows, and incident response procedure testing.</li>
<li>Perform client environment migrations to GCC/GCC High (tenant-to-tenant migration using BitTitan, ShareGate, or native Microsoft tools).</li>
<li>Work across 4-7 concurrent client environments at various stages of build and remediation.</li>
</ul>
<p><b>Job Qualifications</b><br>
<b>Required Technical Experience</b></p>
<ul>
<li>Willing to work in a hybrid setup&mdash;remotely or on-site at client locations, as required.</li>
<li>3+ years hands-on experience administering Microsoft Azure and M365 environments in a professional capacity (not lab-only).</li>
<li>Direct experience configuring Conditional Access policies, Entra ID PIM, and identity architecture (cloud-only and hybrid with Azure AD Connect).</li>
<li>Direct experience deploying and managing Microsoft Intune for endpoint compliance, configuration profiles, security baselines, and BitLocker management.</li>
<li>Direct experience deploying Microsoft Sentinel including data connectors, KQL query writing, analytics rules, and automation playbooks.</li>
<li>Experience configuring Azure networking: VNets, NSGs, Azure Firewall or third-party NVA, VPN Gateway, and network security architecture.</li>
<li>Experience deploying Microsoft Defender for Endpoint including device onboarding, ASR rules, and vulnerability management.</li>
<li>Proficiency with PowerShell and Microsoft Graph API for automation and bulk configuration tasks.</li>
<li>Understanding of NIST SP 800-171 controls and how they map to specific Azure/M365 technical implementations.</li>
</ul>
<p><b>Strongly Preferred Technical Experience</b></p>
<ul>
<li>Experience with Microsoft 365 GCC or GCC High environments (tenant provisioning, licensing nuances, feature differences from commercial M365).</li>
<li>Experience with tenant-to-tenant migrations (commercial to GCC/GCC High) using BitTitan MigrationWiz, ShareGate, or native Microsoft tools.</li>
<li>Experience configuring Microsoft Purview: sensitivity labels, auto-labeling, DLP policies across Exchange, SharePoint, Teams, and endpoints.</li>
<li>Experience with FIPS 140-2 configuration and DISA STIG or CIS benchmark implementation via Intune or GPO.</li>
<li>Experience supporting defense industrial base (DIB) or federal contractor IT environments.</li>
<li>Experience with Azure Arc for hybrid server management and Azure Bastion for secure remote administration.</li>
</ul>
<p><b>Required Certifications</b></p>
<p>
(must hold at least two from this list):</p>
<ul>
<li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Architecture design and decision-making.</li>
<li>Microsoft Certified: Azure Administrator Associate (AZ-104) - Core Azure resource management.</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200) - Sentinel, Defender, and security operations.</li>
<li>Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Entra ID, Conditional Access, PIM.</li>
<li>Microsoft Certified: Information Protection and Compliance Administrator (SC-400) - Purview, DLP, sensitivity labels.</li>
<li>Microsoft Certified: Endpoint Administrator Associate (MD-102) - Intune and device management.</li>
</ul>
<p><b>Preferred Certifications</b></p>
<p>
(significant advantage):</p>
<ul>
<li>CompTIA Security+ (SY0-701)</li>
<li>CMMC Registered Practitioner (RP) - Understanding of CMMC framework from technical perspective.</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft 365 Certified: Administrator Expert (MS-102)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>GIAC certifications (GSEC, GCIA, GCIH) - Deep security operations knowledge.</li>
</ul>
<p><b>Skills &amp; Competencies</b></p>
<ul>
<li>Execution-focused: ability to follow SOPs and runbooks precisely while identifying when something does not match documented steps and escalating appropriately.</li>
<li>Multi-tenant management: comfortable switching between 4-7 different client Azure/M365 environments daily without cross-contaminating configurations.</li>
<li>Documentation discipline: every configuration change is documented, every evidence artifact is captured, every deviation from the SOP is noted.</li>
<li>Troubleshooting: when Conditional Access blocks legitimate users, when Sentinel data connectors go unhealthy, or when WDAC blocks a required application, you can diagnose and resolve without waiting for escalation.</li>
<li>Security mindset: you understand why least privilege matters, why default-deny is the correct network posture, and why FIPS-validated encryption is required for CUI.</li>
<li>Clear written communication: when you find something in the client environment that does not match what the GRC Consultant scoped, you can document it clearly so the team can make decisions.</li>
</ul>
<p><b>Compensation</b></p>
<p>
 Pay rate ranges from <b>$120,000.00/annum up to $170,000.00/annum</b> and may vary by experience and location.</p>
<p><b>
Benefits</b></p>
<ul>
<li>Medical Insurance Plan</li>
<li>Dental &amp; Vision</li>
<li>Life Insurance</li>
<li>Disability Coverage</li>
<li>Paid Time Off (starts at 15 days per year)</li>
<li>Maternity/Paternity Leave</li>
<li>Paid US Holiday</li>
<li>Retirement Plan</li>
<li>Salary Advancement/Loan</li>
<li>Health &amp; Wellness Program</li>
<li>Company-paid training and certification</li>
<li>Supplemental Life Insurance (Employee-paid)</li>
<li>Supplemental Health Plans (Employee-paid)</li></ul></div><p></p>

CMMC Security Engineer (US Hybrid)

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Cybersecurity Engineer - Sr. Job Description</b></h1><b>
Position Title: </b>Cybersecurity Engineer Sr<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cybersecurity Engineer - Sr. supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cybersecurity engineering, security operations, systems hardening, cloud security, zero trust architecture, and enterprise cyber defense support services.<br>
The Cybersecurity Engineer - Sr. serves as a senior technical leader responsible for designing, implementing, integrating, securing, and optimizing enterprise security architectures across on-premises, cloud, hybrid, and SaaS environments. The position supports 24x7x365 Security Operations Center (SOC) activities and works closely with federal stakeholders, engineers, SOC analysts, architects, incident responders, and program leadership to enhance the cybersecurity posture of SBA enterprise systems and critical assets.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide senior-level cybersecurity engineering support for SBA ECS enterprise cybersecurity operations.</li><li>
Support Task Areas 3.5.3 and 3.5.3.9 by designing, implementing, and maintaining secure enterprise security architectures and cybersecurity engineering solutions.</li><li>
Develop and maintain cybersecurity engineering standards, architecture diagrams, implementation strategies, and technical security documentation.</li><li>
Engineer and implement security controls aligned with NIST, FISMA, Zero Trust Architecture (ZTA), and federal cybersecurity requirements.</li><li>
Design, integrate, configure, and support security technologies including SIEM, SOAR, IDS/IPS, EDR, DLP, MFA, PKI, NAC, firewalls, secure web gateways, and cloud-native security solutions.</li><li>
Provide advanced engineering support for Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network environments.</li><li>
Support cybersecurity monitoring, detection, containment, remediation, and recovery activities within the SOC environment.</li><li>
Perform enterprise systems hardening, vulnerability remediation, security baseline implementation, and secure configuration management.</li><li>
Conduct cybersecurity architecture assessments, threat modeling, security engineering reviews, and technical risk analysis activities.</li><li>
Support implementation and optimization of Zero Trust security capabilities including identity security, micro-segmentation, continuous monitoring, and least privilege access models.</li><li>
Design and implement cybersecurity solutions supporting cloud migration, DevSecOps, container security, and automation initiatives.</li><li>
Support incident response investigations by providing engineering expertise, log analysis, root cause analysis, and remediation recommendations.</li><li>
Collaborate with cybersecurity operations teams to develop detection logic, security use cases, automated workflows, and threat response procedures.</li><li>
Perform system security engineering activities throughout the system development lifecycle (SDLC) and support Authority to Operate (ATO) initiatives.</li><li>
Develop and maintain security architecture roadmaps, engineering plans, and technology modernization strategies.</li><li>
Perform security engineering analysis of enterprise applications, APIs, databases, cloud services, and network infrastructures.</li><li>
Support cybersecurity compliance efforts related to NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA guidance, and federal cybersecurity mandates.</li><li>
Provide technical leadership and mentoring to junior cybersecurity engineers, SOC personnel, and technical staff.</li><li>
Prepare technical reports, engineering documentation, executive briefings, and operational recommendations.</li><li>
Research emerging cyber threats, adversary tactics, and evolving security technologies to improve enterprise defense capabilities.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Systems Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 10 years of experience supporting cybersecurity engineering, cybersecurity operations, enterprise security architecture, or SOC environments.</li><li>
Demonstrated experience designing and implementing enterprise cybersecurity architectures and engineering solutions.</li><li>
Hands-on experience with SIEM, SOAR, EDR, IDS/IPS, firewalls, vulnerability management, IAM, cloud security, and security automation technologies.</li><li>
Strong knowledge of NIST cybersecurity frameworks, federal security standards, and Zero Trust Architecture principles.</li><li>
Experience supporting Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network infrastructures.</li><li>
Experience performing system hardening, secure configuration management, and vulnerability remediation.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting RMF, ATO, continuous monitoring, and federal cybersecurity compliance activities.</li><li>
Strong analytical, troubleshooting, technical writing, and communication skills.</li><li>
Ability to present technical findings and cybersecurity recommendations to executive leadership and technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
GIAC Certified Enterprise Defender (GCED)</li><li>
GIAC Security Expert (GSE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA Security+</li><li>
CompTIA CySA+</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Cybersecurity Architect Expert</li><li>
Cisco Certified CyberOps Professional</li></ul><p>
</p><p>Q92uPhlSIK</p></div>

SBA - Cybersecurity Engineer - Sr

NTT DATA

<b>Req ID:</b> 366997
<br><br>
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
<br><br>
We are currently seeking a Azure Cloud Engineer to join our team in Richmond, Virginia (US-VA), United States (US).
<br><br>
Azure Cloud Engineer
<br><br>
NTT Data is seeking a highly capable Azure Cloud Engineer with at least 5 years of hands-on experience designing, deploying, automating, and supporting Microsoft Azure environments. This role requires a well-rounded engineer with strong expertise across Infrastructure as Code (IaC), IaaS, PaaS, and SaaS, and the ability to work across infrastructure, platform services, security, automation, and operational support.
<br><br>
The ideal candidate will have deep technical knowledge of Azure services, strong scripting and automation skills, and a proven ability to build scalable, secure, and reliable cloud solutions. This individual should be comfortable working independently and collaboratively, supporting both project-based implementations and day-to-day cloud operations.
<br><br>
Key Responsibilities
<br><br>
<ul>
<li>Design, deploy, configure, and support cloud solutions in Microsoft Azure</li>
<li>Build and maintain Infrastructure as Code (IaC) using tools such as Terraform, Bicep, ARM templates, or similar</li>
<li>Engineer, manage, and optimize Azure IaaS services including virtual machines, networking, storage, backup, and disaster recovery</li>
<li>Implement and support Azure PaaS services such as App Services, Azure SQL, Key Vault, Functions, API Management, Logic Apps, and storage services</li>
<li>Administer and integrate Azure-related SaaS offerings including Azure AD/Entra ID, and other enterprise cloud applications as needed</li>
<li>Design and manage Azure networking components including VNets, NSGs, Load Balancers, Application Gateways, VPNs, ExpressRoute, DNS, and firewalls</li>
<li>Implement identity and access management using Microsoft Entra ID (Azure AD), RBAC, conditional access, and privileged access controls</li>
<li>Support CI/CD pipelines and cloud automation for repeatable, secure, and efficient deployments</li>
<li>Monitor system performance, availability, cost, and security posture using Azure-native and third-party tools</li>
<li>Troubleshoot issues across compute, storage, networking, identity, security, and application hosting layers</li>
<li>Ensure cloud environments align with organizational standards for security, governance, compliance, and operational excellence</li>
<li>Collaborate with architects, developers, security teams, and business stakeholders to deliver cloud solutions that meet technical and operational requirements</li>
<li>Develop and maintain technical documentation, diagrams, standards, and operational procedures</li>
<li>Provide support for cloud migration, modernization, optimization, and continuous improvement initiatives</li>
</ul>
Required Qualifications
<br><br>
<ul>
<li>5+ years of experience working as an Azure Engineer, Cloud Engineer, Systems Engineer.</li>
<li>3+ years of experience with Microsoft Azure across infrastructure and platform services</li>
<li>Experience implementing Infrastructure as Code</li>
<li>Experience supporting IaaS, PaaS, and SaaS solutions in Azure environments</li>
<li>Experience with Azure compute, storage, networking, monitoring, backup, and identity services</li>
<li>Experience with Azure governance, security, and best practices</li>
<li>Experience with scripting and automation using PowerShell, Bash, Python, or similar</li>
<li>Experience with CI/CD tools such as Azure DevOps, GitHub Actions, or equivalent</li>
</ul>
Required Certifications
<br><br>
Candidates must hold active Azure certifications, preferably including one or more of the following:
<br><ul>
<li>Microsoft Certified: Azure Administrator Associate</li>
<li>Microsoft Certified: Azure Solutions Architect Expert</li>
<li>Microsoft Certified: Azure Security Engineer Associate</li>
<li>Microsoft Certified: Azure Network Engineer Associate</li>
<li>Other relevant Microsoft Azure certifications may also be considered</li>
</ul>
Preferred Qualifications
<br><br>
<ul>
<li>Experience with hybrid cloud or multi-cloud environments</li>
<li>Experience with security hardening, compliance frameworks, and governance policies</li>
<li>Experience with backup, disaster recovery, and business continuity planning</li>
<li>Familiarity with Kubernetes, containers, and Azure Kubernetes Service (AKS)</li>
<li>Experience supporting enterprise-scale Azure environments</li>
<li>Experience with cost optimization and Azure resource management</li>
<li>Familiarity with ITSM, DevSecOps, and cloud operational support models</li>
<li>Strong troubleshooting, analytical, and problem-solving skills</li>
<li>Ability to work across multiple disciplines and function as a well-rounded cloud engineer</li>
<li>Strong verbal and written communication skills</li>
<li>With at least 5 years of hands-on experience designing, deploying, automating, and supporting Microsoft Azure environments. This role requires a well-rounded engineer with strong expertise across Infrastructure as Code (IaC), IaaS, PaaS, and SaaS, and the ability to work across infrastructure, platform services, security, automation, and operational support.</li>
<li>The ideal candidate will have deep technical knowledge of Azure services, strong scripting and automation skills, and a proven ability to build scalable, secure, and reliable cloud solutions. This individual should be comfortable working independently and collaboratively, supporting both project-based implementations and day-to-day cloud operations.</li>
</ul>
Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this remote role is $94,736 – $ 150,525. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate’s actual work location, relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and ADD insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.
<br><br>
About NTT DATA
<br><br>
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
<br><br>
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
<br><br>
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Azure Cloud Engineer

Creative Information Technology India

<div></div><div><div><div><div><div><div><b>About us<br>
</b></div></div><div><div>Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.<br>
</div><div></div><br>
<div>Join us in driving growth and seizing new business opportunities.<br>
</div></div></div><br>
<div><div><div><b>Role and Responsibilities<br>
</b></div></div><div></div><br>
<div><div><b>Vulnerability SE I: </b>This role performs the function of a system engineer level I that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE I role will primarily be responsible for working with the vulnerability management system to identify specific vulnerabilities to be remediated, research the correct remediation configuration and develop or update dashboards within the vulnerability management system to track remediation. The position may also assist a system engineer level II and the cybersecurity team in developing, deploying, and validating specific deployment scripts, automations, and/or installer packages to remediate specific vulnerabilities.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Research and identify specific configurations to remediate identified vulnerabilities.
</li><li>Work with the System Engineer II to develop automations, scripts, deployment packages, and/or customized installers to remediate vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Familiar with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience working with client management platforms e.g. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Knowledge of PowerShell, VBScript, and/or batch scripting.
</li>Knowledge of security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public platforms.<br>
<li>
</li></ul><div></div><br>
<div><b>Vulnerability SE II: </b>This role performs the function of a system engineer level II that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE II role will primarily be responsible for working with the vulnerability management system and system engineer I to remediate identified vulnerabilities, develop deployment objects, deploy remediations and correct any existing vulnerability deployment objects. The role will work with the city&rsquo;s cybersecurity team to develop communications and follow city requirements with regards to change management.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Develop Active Directory group policies, automations, scripts, deployment packages and/or customized installers to remediate vulnerabilities.
</li><li>Assist in the identification and research of remediation configurations for identified vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Experience with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience with client management platforms i.e. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Experience with PowerShell, VBScript, and/batch scripting.
</li><li>Experience working with Microsoft Active Directory and Active Directory Group Policies
</li><li>Experience working with Microsoft Entra.
</li>Experience with security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public cloud platforms.<br>
<li>
</li></ul></div></div><br>
<div><div><div><b>Minimum Qualification<br>
</b></div></div><div><div><b>Minimum/Special/Additional Requirements Vulnerability SE I:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus two (2) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to six (6) years in fields utilizing the knowledge, skills and abilities in technology systems, systems 3 functions and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator or Programmer Analyst.
</li>May be required to have a current and valid driver&rsquo;s license.<br>
<li>
</li></ul><div></div><div><b>Vulnerability SE II:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus four (4) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to eight (8) years in fields utilizing the knowledge, skills, and abilities in technology systems, systems 3 functions, and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator, or Programmer Analyst.
</li><li>May be required to have a current and valid driver&rsquo;s license.</li></ul></div></div></div></div></div>

Senior Vulnerability Systems Engineer – Virginia Beach, VA

Ceenex Global LLC

<p>We are Hiring!!!</p><p><b>#UAEjobs</b> <b>#DubaiJobs</b> <b>#NetworkEngineer</b><br/><b>#CCIE</b> <b>#Senior</b> <b>#L3</b></p><p>Position<br/>- Senior L3 Network Admin&ndash; Security, Cloud &amp; Enterprise Networks</p><p>Location<br/>- Dubai, UAE</p><p>Experience<br/>- 8+ years</p><p>Salary<br/>- Max 20000 AED + Benefits</p><p>Job<br/>Summary</p><p>We are seeking a highly senior L3 Network Engineer / Network Architect with 8&ndash;10<br/>years of hands-on enterprise experience to provide architecture-level support, lead complex network design validation, and drive network optimization, security posture, and availability improvements across enterprise and hybrid cloud environments. The<br/>role requires CCIE-level expertise, deep Azure networking skills at L3 level,<br/>and strong leadership in critical escalations, Zero Trust implementation, and governance.</p><p>Experience</p><p>&middot; 8&ndash;10 years of experience in enterprise network engineering, with senior L3 / architect-level ownership</p><p>&middot; Proven experience leading large-scale, mission-critical network environments</p><p>Technical Expertise (Mandatory)</p><p>&middot; CCIE (Enterprise Infrastructure or<br/>Security) &ndash; <b>#mandatory</b></p><p>&middot; Palo Alto Firewalls (expert level,<br/>including segmentation &amp; Zero Trust)</p><p>&middot; Cisco Firepower Threat Defense (FTD)</p><p>&middot; Microsoft Azure Networking &ndash; L3<br/>level</p><p>&middot; Cisco DNAC, Cisco ISE, Cisco WLC</p><p>&middot; F5 Load Balancers</p><p>&middot; Strong expertise in BGP, OSPF,<br/>SD-WAN, LAN/WAN</p><p>&middot; Solid understanding of DNS, DHCP,<br/>and enterprise network services</p><p>Certifications<br/>(Mandatory / Preferred)</p><p>&middot; CCIE &ndash; Enterprise Infrastructure or<br/>Security (<b>#Mandatory</b>)</p><p>&middot; Palo Alto Networks: PCNSE (strongly<br/>preferred)</p><p>&middot; Microsoft Azure: AZ-700 (Azure<br/>Network Engineer Associate)</p><p>&middot; F5 Networks: F5 Certified<br/>Administrator / Specialist</p><p>&middot; ITIL&reg; 4 Foundation (preferred)</p><p>APPLY AS SOON AS POSSIBLE!</p><p>Email- greeshma@ceenexglobal.com</p><p>Job Type: Full-time</p><p>Pay: AED16,000.00 - AED20,000.00 per month</p><p>Work Location: In person</p>

Senior L3 Network Admin– Security, Cloud & Enterprise

Seneca Resources Company, LLC

<div>
 <p>
  <strong>
   Position Title:
  </strong>
  Cybersecurity Engineer - Data Loss Prevention &amp; Messaging Security
  <br/>
  <strong>
   Location:
  </strong>
  Remote (VA, AL, DC, DE, FL, GA, IL, IN, KS, KY, LA, MI, MD, MN, MO, NC, NE, NJ, OH, PA, SC, TX, VA, WV)
  <br/>
  <strong>
   Pay Rate:
  </strong>
  $90.00/hr
  <br/>
  <strong>
   Position Description:
   <br/>
  </strong>
  <br/>
  Join a dynamic team as a Cybersecurity Engineer specializing in Data Loss Prevention (DLP) and Messaging Security. This remote contract role focuses on securing cloud and email communications within a regulated banking environment. You will lead the deployment and governance of ShareFile integrations with Microsoft 365, ensuring data protection, identity security, and compliance. The position offers the chance to apply your expertise in DLP, email security, endpoint protection, and network security to protect sensitive financial data. Collaborate with diverse teams to implement security controls, enhance lifecycle management, and improve overall security posture in a fast-paced financial services organization. This is an excellent opportunity to leverage your cybersecurity skills and make a meaningful impact on enterprise data security.
  <br/>
  <br/>
  <br/>
  <br/>
  <strong>
   Top Requirements:
  </strong>
 </p>
 <ul>
  <li>
   Banking or financial services industry experience (strongly preferred)
  </li>
  <li>
   Hands-on Data Loss Prevention (DLP) engineering experience (email, endpoint, network)
  </li>
  <li>
   Microsoft 365 / Exchange / Outlook security expertise
  </li>
  <li>
   Check Point Smart-1 &amp; Endpoint Security experience
  </li>
  <li>
   5+ years of enterprise cybersecurity engineering experience
  </li>
 </ul>
 <p>
  At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.
 </p>
 <p>
  When you work with Seneca, you&rsquo;re choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path. Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.
 </p>
 <p>
  Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.
 </p>
</div>


Cybersecurity Engineer - Data Loss Prevention & Messaging Security

HBD Industries

<div>
 <p>
  <strong>
   Position Summary
  </strong>
 </p>
 <p>
  The IT Systems Engineer (Associate) supports the design, maintenance, and reliability of HBD&rsquo;s enterprise IT systems across manufacturing and corporate environments. This role is designed for an individual transitioning from IT Support into systems engineering and will focus on building foundational infrastructure, cloud, and security skills under senior engineer guidance.
 </p>
 <p>
  <br/>
 </p>
 <p>
  The Systems Engineer will assist with server administration, Microsoft 365, endpoint management, identity services, and documentation while developing deeper engineering capabilities aligned with HBD&rsquo;s cybersecurity, compliance, and operational reliability requirements.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Principle Duties and Responsibilities
   </u>
  </strong>
 </p>
 <p>
  Serve as main point of contact (POC) between HBD IT and MSP
 </p>
 <ul>
  <li>
   Assist senior engineers with:
  </li>
  <li>
   System maintenance, upgrades, and troubleshooting
  </li>
  <li>
   Microsoft 365 and identity related administration tasks
  </li>
  <li>
   Perform system checks and basic remediation following documented procedures
  </li>
  <li>
   Support endpoint and user lifecycle activities (onboarding/offboarding)
  </li>
  <li>
   Participate in incident response and root cause analysis under supervision
  </li>
  <li>
   Create and maintain technical documentation and SOPs
  </li>
  <li>
   Learn and apply HBD cybersecurity, CUI, and NIST aligned controls
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical Skills
  </strong>
 </p>
 <ul>
  <li>
   Troubleshooting system‑level issues beyond the desktop tier
  </li>
  <li>
   Assisting with server, application, and infrastructure changes
  </li>
  <li>
   Monitoring system health and escalating when necessary
  </li>
  <li>
   Supporting system documentation, diagrams, and runbooks
  </li>
  <li>
   Following standardized change and security processes
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Behavioral &amp; Professional Capabilities
  </strong>
 </p>
 <ul>
  <li>
   Analytical problem‑solving with a systems‑thinking mindset
  </li>
  <li>
   Strong written documentation and verbal communication
  </li>
  <li>
   Ability to learn new platforms quickly and apply feedback
  </li>
  <li>
   Comfort working in manufacturing environments with operational constraints
  </li>
  <li>
   Willingness to follow and enforce security and compliance requirements
  </li>
 </ul>
 <p>
  <strong>
  </strong>
 </p>
 <p>
  <strong>
   <u>
    Experience and Education Required
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s Degree in IT, MIS or equivalent work experience
  </li>
  <li>
   2&ndash;4 years of experience in IT Support, Help Desk, or Technical Support roles with exposure to enterprise environments
  </li>
  <li>
   Demonstrated experience supporting:
  </li>
  <li>
   Windows workstations and basic Windows Server concepts
  </li>
  <li>
   Active Directory users, groups, and permissions
  </li>
  <li>
   Microsoft 365 services (Outlook, Teams, OneDrive, SharePoint fundamentals)
  </li>
  <li>
   Familiarity with basic networking concepts (DNS, DHCP, TCP/IP)
  </li>
  <li>
   Experience documenting procedures, troubleshooting steps, and system changes
  </li>
  <li>
   Strong customer service mindset with the ability to translate technical concepts for non‑technical users
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  HBD Industries is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
 </p>
 <p>
  <br/>
 </p>
 <p>
  HBD NOTICE OF COLLECTION - CALIFORNIA &ndash; December 2022
 </p>
 <p>
  Please click on this link to view the notice.
 </p>
 <p>
 </p>
</div>


Information Technology System Engineer

Search 10000+ Microsoft security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.