Senior Network Security Engineer

About Acrisure  

Essential Duties and Responsibilities:  

• Play a key technical role in IT Security as Acrisure integrates its newly acquired companies at record pace. Your expertise will be invaluable in ensuring a smooth and secure transition process. 

• Collaborate effectively with our diverse IT teams, including Datacenter, Network Operations, and Cloud teams. You'll provide critical input on secure architecture, design, and implementation, helping to elevate our IT security infrastructure. 

• Conduct thorough security architecture design reviews and provide informed recommendations for proposed IT solutions. Your input will shape the safety and resilience of our evolving IT infrastructure. 

• Design, implement, and manage enterprise network security architecture across on-premises and cloud environments.  

• Deploy and maintain network security controls including next-generation firewalls, IDS/IPS, WAF, and DDoS protection.  

• Lead network segmentation and Zero Trust Network Access (ZTNA) initiatives to reduce attack surface and enforce least-privilege access. 

• Stay ahead of the curve by understanding emerging threats and recommending necessary remediation steps to mitigate the current threat landscape. Your vigilance will keep our IT systems one step ahead. 

• Design, build, and maintain security architectures for cloud and hybrid environments, mainly Azure/M365 with a focus on Zero Trust privilege models, with some emphasis on Conditional Access Policies, Hardening Guidelines, Microsoft security controls, etc.  

• Monitor, analyze, and respond to threats using network telemetry (NetFlow, PCAP, IDS alerts) and security tools.  

• Secure hybrid connectivity solutions including site-to-site VPNs, remote access VPNs, and private cloud networking (e.g., ExpressRoute).  

• Partner with security and infrastructure teams to investigate and remediate network-based incidents and improve detection capabilities.  

• Automate network security deployments and configurations using Infrastructure as Code (Terraform, scripting, APIs). 

This description is not meant to be all-inclusive and may be modified from time to time at the discretion of management.  

Education and/or Experience: 

• 7+ years of experience in IT security engineering, architecture or a related field 

• Strong knowledge of security technologies and best practices 

• Experience collaborating with network, datacenter, and systems teams 

• Experience with risk assessments, vulnerability testing, and incident response 

• Deep understanding of Microsoft 365, Azure AD, Cloud and container security, and conditional access.  

• Deep understanding of networking fundamentals and protocols (TCP/IP, DNS, HTTP/S, BGP, routing and switching) and how they relate to security architecture and threat vectors.  

• Hands-on experience with leading network security platforms (e.g., Palo Alto, Fortinet, Check Point) and network monitoring/analysis tools (e.g., Wireshark, Zeek, NetFlow analyzers). 

• Expertise with tools such as CSPM, CWPP, Defender suite, SIEM/SOAR 

• Experience with Infrastructure as Code and cloud automation (Terraform, Powershell, Azure CLI, etc) 

• Strong communication and collaboration skills 

• Security certifications such as CISSP, Azure Security Engineering, MCCA, GIAC or equivalent desired