Network & Security Infrastructure Lead

Role overview

Key responsibilities

• Own SWIFT architecture, gateways, cloud-HSM-backed controls, secure zones, and annual Customer Security Programme compliance.
• Lead monitored, certified, and failover-tested connectivity to UAE payment systems and CBUAE services.
• Set standards for firewalls, DDoS protection, intrusion detection and prevention, DNS security, and edge controls.
• Establish network-as-code practices with versioning, automated testing, drift detection, and rollback.
• Architect carrier interconnects, private-cloud links, office networks, and connectivity to in-country cloud regions.
• Govern zero-trust access for workforce, services, and AI agents, including identity-aware, least-privilege, and privileged access.
• Automate vulnerability assessment and remediation; integrate telemetry with SOC and observability platforms.
• Lead disaster-recovery and failover exercises, retaining audit evidence.
• Build and lead the team, set technical direction, manage budgets, and maintain vendor and carrier relationships.

Required experience

• 8+ years in network and security infrastructure, including strategy and technical-team leadership in financial services or another regulated environment.
• Direct experience with SWIFT infrastructure and Customer Security Programme compliance.
• Experience with national payment systems, central-bank services, or similarly regulated connectivity.
• Network-as-code experience including automation, version control, and pipeline-based changes.
• Deep network-security engineering covering firewalls, DDoS, intrusion detection and prevention, segmentation, and perimeter security.
• Strong Azure and AWS networking and private-cloud connectivity knowledge.
• Strong zero-trust, identity-aware, and least-privilege architecture knowledge.
• Experience in automated infrastructure operations, vulnerability management, patching, or remediation.
• Experience with AI-assisted engineering or operations tooling with review, control, and auditability.
• Bachelor's degree in Computer Science, Network Engineering, or related discipline.

Advantageous qualifications

• CCNP/CCIE, NSE, PCNSE, or equivalent security certifications are advantageous.

Technology landscape

• Cloud networking: Azure Virtual WAN, AWS Cloud WAN, ExpressRoute, Megaport, SD-WAN, DNS, and load balancing.
• Security: Palo Alto, Fortinet, Cloudflare, Azure DDoS Protection, intrusion detection and prevention, PKI, and HSM-backed key management.
• Network as code: Terraform, NetBox or Nautobot, Batfish, automated validation, and drift detection.
• Regulated connectivity: SWIFT Alliance components, secure-zone architecture, CSP controls, and payment-system connectivity.
• Zero trust: ZTNA/SASE, Microsoft Entra, SPIFFE/SPIRE, Entra Agent ID, mutual TLS, Istio, Cilium/eBPF, and privileged access controls.
• Operations: network telemetry, flow analysis, behavioural baselining, anomaly detection, SIEM/SOC integration, and AI-assisted network operations.