Windows File Share Security Engineer
Nityam SharmaUnited StatesMIDPosted 14d ago
Windows file serversNAS storage devicesNTFSShare permissionsRole-based accessLeast-privilege accessAccess reviewsAuditingFile share monitoringSecurity incident responsePowerShellPower AutomatePower BIActive DirectoryGroup PolicySMB/CIFSNetAppEMCVaronis DatAdvantage
About the Role
You will be a member of a highly technical production support team responsible for managing secure enterprise file sharing environments. This role ensures the confidentiality, integrity, and availability of shared data by managing permissions, enforcing access controls, monitoring usage, and protecting file systems against unauthorized access, data loss, and cyber threats.
Key Responsibilities
• Maintain secure file sharing platforms including Windows file servers and NAS storage devices.
• Administer and manage share-level and NTFS permissions using role-based and least-privilege access models.
• Conduct regular access reviews and audits to ensure appropriate user and group permissions.
• Monitor file share activity for anomalies, unauthorized access, or potential data exfiltration using logging and security tools.
• Troubleshoot access issues and support users while maintaining security standards.
• Respond to security incidents related to file services and participate in remediation efforts.
• Utilize expertise for security-related problem solving and risk mitigation.
• Maintain documentation for file share architecture, access controls, and procedures.
Requirements
• Associate's/Bachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience).
• 5+ years' experience administering Windows file servers or enterprise storage environments.
• Experience with NTFS and share permissions.
• Strong understanding of security principles including least privilege, RBAC, and auditing.
• Experience troubleshooting permissions and access issues in complex environments.
• Experience in handling and administering permissions on storage devices like NetApp, EMC, etc.
• Knowledge of automation tools, such as PowerShell, Power Automate, and Power BI.
• Familiarity with Active Directory and Group Policy.
• Familiarity with SMB/CIFS protocols.
• Working experience on Varonis DatAdvantage a plus.
• Basic Microsoft Office operations.