Principal Cloud & Network Security Engineer

Franklin Fitch; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Franklin Fitch is seeking a Principal Security Engineer to lead the implementation and enhancement of cybersecurity controls across a complex, multi-site environment. You will work hands-on across Azure, network, endpoint, identity, and cloud security while maturing the organization’s technical security capabilities.

You’ll own technical security initiatives, implement controls, and deliver projects against a roadmap, collaborating with IT, MSP, vCISO, and Legal teams to strengthen security

Qualifications

• 7+ years of hands-on IT and cybersecurity experience, with experience leading a security program.
• Strong Azure security experience with solid enterprise networking fundamentals.
• Hands-on experience with Microsoft Sentinel, SentinelOne, AD/Entra ID, firewalls, VPNs, IDS/IPS, and endpoint security.
• Strong PowerShell and/or Python scripting experience.
• Experience implementing controls aligned with NIST CSF, ISO 27001, CIS, and SOX/ITGC.
• Proven ability to personally deliver technical security projects in fast-paced, regulated environments.

Responsibilities

• Drive the implementation and optimization of security controls across network, endpoint, identity, Azure, and cloud environments.
• Design and maintain firewalls, network segmentation, VPNs, IDS/IPS, EDR, and MFA controls.
• Manage and tune SIEM, EDR, and email security platforms, including detection rules, alerts, and dashboards.
• Lead incident response, vulnerability management, patch remediation, and technical security projects.

Skills

Azure security

Security program leadership

Networking fundamentals

Scripting: PowerShell/Python

Security frameworks (NIST CSF, ISO 270

Incident response

Tools

Microsoft Sentinel

SentinelOne

AD/Entra ID

Firewalls

VPNs

IDS/IPS

EDR

MFA controls

PowerShell

Python

Job description

Franklin Fitch is seeking a Principal Security Engineer to lead the implementation and enhancement of cybersecurity controls across a complex, multi-site environment. You will work hands-on across Azure, network, endpoint, identity, and cloud security while maturing the organization’s technical security capabilities.

You’ll own technical security initiatives, implement controls, and deliver projects against a roadmap, collaborating with IT, MSP, vCISO, and Legal teams to strengthen security