Role & responsibilities

- Build and maintain the device inventory: owner, location, whether it touches patient data, management status.

- Engineer the standard laptop image: BitLocker encryption, automatic patching, endpoint protection (Sophos), Intune enrollment, no local admin rights.

- Design and pilot an always-on VPN with MFA and device checks; retire shared VPN files site by site.

- Inventory every site network: firewall make and model, ISP, who manages it, what connects; then standardize firewall rules and segment guest Wi-Fi.

- Keep personal devices off Microsoft 365, the EHR and the corporate network.

- Write rollout runbooks local site staff and the service desk can follow, and track rollout status per site.

Preferred candidate profile





- 5+ years in endpoint and network security across multiple sites.

- Hands-on with at least one always-on VPN or ZTNA approach (Windows Always On VPN, Azure VPN Gateway, FortiClient/FortiGate, Palo Alto GlobalProtect, Cisco AnyConnect, Zscaler or similar).

- Device management with Intune or a comparable MDM, including Autopilot or imaging at scale.

- Firewall administration (Fortinet, SonicWall, Meraki, Palo Alto or similar) and practical network segmentation.

- Has rolled out a device or VPN standard to 500+ devices with a site-by-site plan.

📌 Endpoint_Network_Security_Engineer (Hyderabad)
🏢 Modern Signal Services
📍 Hyderabad