Role & responsibilities
Build and maintain the device inventory: owner, location, whether it touches patient data, management status.
Engineer the standard laptop image: BitLocker encryption, automatic patching, endpoint protection (Sophos), Intune enrollment, no local admin rights.
Design and pilot an always-on VPN with MFA and device checks; retire shared VPN files site by site.
Inventory every site network: firewall make and model, ISP, who manages it, what connects; then standardize firewall rules and segment guest Wi-Fi.
Keep personal devices off Microsoft 365, the EHR and the corporate network.
Write rollout runbooks local site staff and the service desk can follow, and track rollout status per site.

Preferred candidate profile




5+ years in endpoint and network security across multiple sites.
Hands-on with at least one always-on VPN or ZTNA approach (Windows Always On VPN, Azure VPN Gateway, FortiClient/FortiGate, Palo Alto GlobalProtect, Cisco AnyConnect, Zscaler or similar).
Device management with Intune or a comparable MDM, including Autopilot or imaging at scale.
Firewall administration (Fortinet, SonicWall, Meraki, Palo Alto or similar) and practical network segmentation.
Has rolled out a device or VPN standard to 500+ devices with a site-by-site plan.

📌 Endpoint Network Security Engineer Hyderabad
🏢 Modern Signal Services
📍 Hyderabad