Network Security Engineer

Position: Network Security Engineer (Palo Alto / Microsoft Defender / Purview)Location: New York, NY (100% Onsite)Duration: 6 MonthsExperience: 6–10 YearsJob SummaryWe are seeking an experienced Network Security Engineer to support enterprise security initiatives focused on firewall management, Microsoft Defender, Microsoft Purview, Zero Trust architecture, and network segmentation. The ideal candidate should have strong hands-on experience with Palo Alto Firewalls, enterprise firewall policy management, IDS/IPS, SIEM integration, and Microsoft Security technologies.Key ResponsibilitiesDesign, implement, and manage enterprise Network Security solutions.Configure and administer Palo Alto Firewalls and Panorama.Create, maintain, and optimize firewall rules and security policies.Perform firewall rule cleanup and rule-base optimization.Configure and tune:App-IDUser-IDContent-IDIPS/IDS SignaturesSSL Decryption PoliciesManage Firepower Management Center (FMC) configurations.Integrate firewall logs with SIEM platforms.Design and implement secure access control policies.Deploy and manage Microsoft Defender Security Suite.Configure Attack Surface Reduction (ASR) rules.Implement and support Endpoint Detection & Response (EDR).Develop advanced KQL queries for threat hunting and investigations.Automate security workflows using Microsoft Defender APIs.Improve security posture through Microsoft Secure Score recommendations.Design and implement Network Segmentation and Micro-Segmentation strategies.Support Zero Trust Architecture and least-privilege access models.Perform traffic flow analysis and dependency mapping.Collaborate with infrastructure and security teams to reduce lateral movement risks.Required Skills6–10 years of Network Security experience.Strong hands-on experience with:Palo Alto FirewallsPanoramaFirewall Policy ManagementRule Base OptimizationSSL DecryptionApp-ID, User-ID, Content-IDIPS/IDSSIEM IntegrationExperience with:Microsoft DefenderMicrosoft PurviewEndpoint Detection & Response (EDR)KQL Query LanguageStrong understanding of:Network SegmentationMicro-SegmentationZero Trust SecurityTCP/IPRouting & SwitchingVPN TechnologiesNAC SolutionsPreferred SkillsCheck Point FirewallFortinet FirewallCisco Firepower / FMCCloud SecurityThreat HuntingSecurity AutomationMicrosoft Defender APISecure ScoreAzure SecurityEducationBachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field.