Hands-On Network Security Engineer – Onsite Rochester

Woods Oviatt Gilman LLP; City of Rochester, Northern (NY, KY); Hybrid; USD 100,000 - 120,000; Full time

Job summary

Woods Oviatt Gilman LLP in Rochester, NY is seeking a Network Security Engineer to design, implement, and manage the firm’s security controls across a hybrid environment, including FortiGate firewalls, endpoint protection, and Microsoft 365.

Under the Director of Information Technology, you will oversee identity and access, Intune administration, vulnerability management, incident response, privacy/compliance, and work closely with attorneys and staff to ensure secure operations and regulatory

Qualifications

• Bachelor's degree in IT, cybersecurity, CS, or related field.
• Five+ years of hands-on network security engineering with substantial responsibility.
• Experience implementing controls aligned with NIST/CIS/ISO frameworks.

Responsibilities

• Administer FortiGate firewalls, VPN, IPS, and content filtering.
• Manage endpoint protection via CrowdStrike and Microsoft Defender.
• Configure Entra ID/AD, MFA, and conditional access in hybrid environments.
• Oversee Intune in hybrid configurations and device encryption.
• Lead vulnerability management and remediation tracking.
• Monitor security events and coordinate with SOC/IT leadership.

Skills

FortiGate administration

Endpoint protection

M365 security

Identity and access

Intune administration

Vulnerability management

Incident response

Networking fundamentals

Security monitoring

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

FortiGate

CrowdStrike

Microsoft 365

Microsoft Entra ID

Microsoft Intune

Active Directory

Job description

Woods Oviatt Gilman LLP in Rochester, NY is seeking a Network Security Engineer to design, implement, and manage the firm’s security controls across a hybrid environment, including FortiGate firewalls, endpoint protection, and Microsoft 365.

Under the Director of Information Technology, you will oversee identity and access, Intune administration, vulnerability management, incident response, privacy/compliance, and work closely with attorneys and staff to ensure secure operations and regulatory