Network Security Lead- Cloud Infrastructure
Key Skills for This Role
Full Job Posting
Qualifications
- 10–12 years of experience in cloud infrastructure, network operations, and cybersecurity engineering, including hands-on ownership of designing, deploying, and operating secure network infrastructure.
- Demonstrable depth across at least two of Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure (all three strongly preferred).
- Proven experience designing and operating infrastructure to meet 24/7 availability, redundancy, and disaster recovery requirements.
- Demonstrated experience overseeing or coordinating multi-disciplinary operations (network + security) and reporting outcomes to leadership.
- Strong skills in preparing operational reports, dashboards, and presentations for leadership and stakeholder audiences.
- Proven track record running operational meetings and driving structured escalation handling to resolution.
- Hands-on experience managing major changes, including change planning, risk assessment, CAB processes, and post-implementation review.
- Hands-on expertise with enterprise routers, switches, firewalls, NVAs, and cloud-native network security monitoring tools.
- Experience hardening network and cloud infrastructure against security frameworks and remediating audit findings.
- Strong troubleshooting and incident-response experience across routing, switching, cloud networking, and security domains.
- Excellent coordination and communication skills, with the ability to work closely with leadership and cross-functional stakeholders.
- Willing and able to participate in an on-call rotation and travel to datacenter/client sites as needed to maintain 24/7 availability.
- Required Certifications
- Cisco CCNP (Enterprise / Security) or equivalent vendor-neutral routing & switching certification.
- Microsoft Certified: Azure Network Security Engineer Associate (or Azure Solutions Architect Expert).
- Google Professional Cloud Network Engineer / Cloud Security Engineer.
- Oracle Cloud Infrastructure (OCI) Network Security Professional or Architect Professional.
- CISSP (Certified Information Systems Security Professional) or working toward certification.
- Firewall/NGFW vendor certification (e.g., Palo Alto PCNSA/PCNSE, Fortinet NSE, or Check Point CCSA/CCSE).
- Preferred: CCIE, CISM, CEH. At least two of Azure, GCP, and OCI required; all three strongly preferred. Certifications must be current; equivalent recognized credentials considered subject to approval.
Responsibilities
- Design secure reference architectures for hub-spoke topologies, VNet/VPC/VCN environments, subnetting, IP/CIDR planning, and static/BGP dynamic routing across Azure, GCP, and OCI, as well as on-prem routing and switching infrastructure.
- Architect secure connectivity patterns — VPN, peering, and dedicated interconnects (ExpressRoute, Interconnect, FastConnect) — and lead network security design reviews with actionable, best-practice recommendations.
- Lead deployment and configuration of network security environments: Site-to-Site VPNs with redundant tunnels and BGP routing, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next-gen firewalls, and Internet/NAT/Service Gateways for new builds and migrations.
- Design, deploy, and operate infrastructure to meet 24/7 availability targets, including redundancy, failover, load balancing, and disaster recovery across hybrid and multi-cloud environments.
- Own round-the-clock operational management of the network and security environment: change management, patching/upgrades of NVAs, vulnerability tracking and remediation, and coordination of patch windows and incident response.
- Manage and oversee day-to-day network and security operations across routing, switching, and cybersecurity engineering, keeping leadership informed of status, risks, and escalations.
- Configure and maintain monitoring, logging, and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs) to proactively detect and resolve availability, performance, and security issues.
- Harden network device and cloud configurations against industry benchmarks (e.g., CIS, NIST) and internal security baselines; remediate findings from internal/external audits.
- Prepare and present operational reports, dashboards, and presentations summarizing network/security performance, availability, incidents, and risk posture to leadership and stakeholders.
- Plan and run operational meetings — daily/weekly stand-ups, service reviews, and incident review sessions — driving action items to closure.
- Act as the senior escalation point for critical operational and security issues across all managed platforms, ensuring timely resolution and clear communication.
- Own and handle major changes end-to-end — planning, risk assessment, change advisory board (CAB) submissions, implementation, and post-change validation — with minimal impact to 24/7 availability.
- Design, deploy, and validate backup and restore procedures for NVAs, firewall policies, and network configuration state; own disaster recovery and cross-region DR networking design.
- Coordinate cross-functional activities with cloud, security, application, and operations teams to ensure consistent security posture and always-on availability across the environment.
- Maintain accurate architecture documentation, network diagrams, runbooks, and operational procedures; ensure changes follow proper governance, risk, and change-control processes.
- Mentor engineers and act as a point of technical escalation for complex operational or security issues.
- Participate in an on-call rotation and respond to critical incidents outside business hours to maintain 24/7 availability; travel to datacenter or client sites as needed.
About malomatia
Qatar-based technology services provider driving digital transformation and innovation.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at malomatia
Consultant -Data Portal
, QAT
The employer is seeking an experienced full-stack web developer to build and maintain a data dissemination portal. The work spans React front-end development, API and semantic-layer integration, architecture, and collabo
AI Security SME
, QAT
The employer seeks an AI Security SME to lead security architecture, governance, and assurance for ML, LLM, and agentic platforms. Candidates need extensive cybersecurity and AI/ML security experience, hands-on cloud and
Executive Assistant
, QAT
The employer is seeking an experienced Executive Assistant to provide strategic and administrative support to the Chief of SBU. The role manages communications, meetings, records, expenses, and follow-up on key deliverab
Engineer – System
, QAT
The employer is seeking a Senior Systems Engineer with 8+ years of experience to administer Linux and Windows systems and enterprise infrastructure in a 24/7 SOC Fusion Center environment. The role covers virtualization,
Engineer - Information Security Operations
, QAT
The employer is seeking an Information Security Operations Engineer to monitor security alerts, investigate incidents, and improve detection and response. The role includes managing security tools, applying threat intell
Consultant -Data Portal
, QAT
AI Security SME
, QAT
Executive Assistant
Doha, QAT
Executive Assistant
, QAT
Engineer – System
, QAT
Engineer - Information Security Operations
, QAT
Engineer – System
Doha, QAT
Consultant – Assurance & Validation, GPU Infrastructure
, QAT