Windows File Share Security Engineer

We are seeking an experienced Windows File Share Security Engineer to join a highly technical production support team responsible for securing enterprise unstructured data environments. The engineer will manage secure file-sharing platforms, permissions, access controls, auditing, and security-related incidents across Windows file servers and enterprise storage environments.

Key Responsibilities:

• Manage and secure Windows file servers and NAS storage environments.
• Administer NTFS and share-level permissions using RBAC and least-privilege principles.
• Perform access reviews and audits of users and groups.
• Monitor file-share activity for unauthorized access, anomalies, and potential data exfiltration.
• Troubleshoot complex file-share permissions and access issues.
• Respond to security incidents involving file services and assist with remediation.
• Support security-related problem solving and risk mitigation.
• Maintain documentation for file-share architecture, permissions, access controls, and procedures.
• Collaborate with technical teams and business stakeholders on security initiatives.

Required Skills:

• 8+ years of relevant IT/infrastructure/security experience.
• 5+ years administering Windows file servers or enterprise storage environments.
• Strong hands-on experience with NTFS and Windows share permissions.
• Experience with NetApp, EMC, NAS, or similar enterprise storage platforms.
• Strong understanding of RBAC, least privilege, access controls, and auditing.
• Experience troubleshooting complex permissions and access issues.
• Experience with Active Directory and Group Policy.
• Knowledge of SMB/CIFS protocols.
• Strong PowerShell/scripting experience.
• Experience securing enterprise data and file-sharing environments.
• Strong communication, documentation, critical-thinking, and problem-solving skills.

Preferred / Nice to Have:

• Experience with Varonis DatAdvantage.
• Experience with Power Automate and Power BI.
• Security/infrastructure certifications such as Security+, CISSP, Microsoft, or similar.
• Associate's or Bachelor's degree in IT, Cybersecurity, or related field, or equivalent experience.

Additional Information:

• Local candidates to Quincy, MA only.
• Must be available to work onsite 2 days/week for the first 3 months.
• Position transitions to remote after 3 months.
• W2 only - $48/hr.
• USC, GC, and EAD candidates only.