Endpoint_Network_Security_Engineer
Posted Updated
Summary
Endpoint and network security engineer in Hyderabad securing a multi-site healthcare environment: build a device inventory, standardize laptop images (BitLocker, Sophos, Intune), roll out an always-on VPN with MFA, and standardize firewalls and network segmentation across sites.
Role & responsibilities
- Build and maintain the device inventory: owner, location, whether it touches patient data, management status.
- Engineer the standard laptop image: BitLocker encryption, automatic patching, endpoint protection (Sophos), Intune enrollment, no local admin rights.
- Design and pilot an always-on VPN with MFA and device checks; retire shared VPN files site by site.
- Inventory every site network: firewall make and model, ISP, who manages it, what connects; then standardize firewall rules and segment guest Wi-Fi.
- Keep personal devices off Microsoft 365, the EHR and the corporate network.
- Write rollout runbooks local site staff and the service desk can follow, and track rollout status per site.
Preferred candidate profile
- 5+ years in endpoint and network security across multiple sites.
- Hands-on with at least one always-on VPN or ZTNA approach (Windows Always On VPN, Azure VPN Gateway, FortiClient/FortiGate, Palo Alto GlobalProtect, Cisco AnyConnect, Zscaler or similar).
- Device management with Intune or a comparable MDM, including Autopilot or imaging at scale.
- Firewall administration (Fortinet, SonicWall, Meraki, Palo Alto or similar) and practical network segmentation.
- Has rolled out a device or VPN standard to 500+ devices with a site-by-site plan.