Senior Network Security Engineer – Cloud & Zero Trust

Baker Engineering and Risk Consultants, Inc.; San Antonio (TX); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Holiday, vacation and sick leave

Medical/dental insurance

401(k)

ESOP

Year-end bonus

Job summary

BakerEngineering and Risk Consultants, Inc. is seeking a skilled Network Security Engineer to design, implement, and secure enterprise LAN/WAN, cloud connectivity, and hybrid infrastructure.

You will own security operations, MS Entra/AD security, and VMware/Cloud networking in a small team across multiple sites. The role focuses on firewall management, Zero Trust adoption, identity protection, and secure remote access, with collaboration across IT and architecture teams.

Qualifications

• 5+ years of enterprise network engineering experience.
• Demonstrated ability to balance networking, cybersecurity, cloud technologies, operational support, documentation, and project work within a small or mid-sized IT organization.
• Strong experience with Cisco networking technologies, including routing, switching, VPNs, firewalls, and network security controls.
• Experience with Microsoft Azure networking, hybrid cloud connectivity, and secure integration between cloud and on-premises environments.
• Experience supporting Active Directory and Microsoft Entra ID administration and security.
• Experience implementing identity security controls, including Multi-Factor Authentication (MFA), Conditional Access, privileged access controls, and secure authentication practices.
• Experience securing Microsoft 365 environments and cloud-based collaboration platforms.
• Knowledge of network and cybersecurity principles, including Zero Trust, network segmentation, secure remote access, infrastructure hardening, and risk reduction.
• Experience with security monitoring, vulnerability management, remediation planning, incident response, and cybersecurity operations.
• Experience supporting cybersecurity compliance initiatives, security assessments, and NIST-based security frameworks.

Responsibilities

• Design, implement, maintain, and troubleshoot enterprise LAN, WAN, wireless, and data center network infrastructure.
• Configure and manage Cisco, Meraki, and Arista network devices.
• Administer VPN technologies and secure remote access solutions.
• Manage SD-WAN connectivity between offices, cloud environments, and datacenters.
• Maintain IP address management (IPAM), network documentation, and infrastructure diagrams.
• Monitor network performance and availability while proactively identifying capacity and reliability improvements.
• Implement VMWare NSX, NSX-T
• Serve as the primary technical owner for cybersecurity operations, security controls, and vulnerability management.

Skills

Networking fundamentals

Enterprise networking

Firewalls

VPN tech

SD-WAN

Azure networking

MFA/CA

Entra ID

AD administration

Security monitoring

Vulnerability mgmt

Zero Trust

Network segmentation

Education

CCNP Enterprise

CCNP Security

CISSP

CompTIA Security+

AZ-500

Azure Security Engineer

VMware vSphere/VCF

Tools

CrowdStrike Falcon

Microsoft Defender

NSX

VMware NSX

MS365 security

Azure security

Job description

BakerEngineering and Risk Consultants, Inc. is seeking a skilled Network Security Engineer to design, implement, and secure enterprise LAN/WAN, cloud connectivity, and hybrid infrastructure.

You will own security operations, MS Entra/AD security, and VMware/Cloud networking in a small team across multiple sites. The role focuses on firewall management, Zero Trust adoption, identity protection, and secure remote access, with collaboration across IT and architecture teams.