Senior Network and Security Engineer

Role overview

Design and delivery responsibilities

• Gather customer requirements and produce HLD and LLD documents for security and data-centre solutions.
• Design segmentation, firewall policies, Zero Trust access, and NAC policy models aligned with customer security standards.
• Review customer environments and recommend hardening, migration, and consolidation paths.
• Lead end-to-end deployments, including staging, configuration, integration, cut-over, and post-go-live support.
• Plan firewall and load-balancer migrations, including policy conversion, rule cleanup, and rollback plans, with minimal downtime.
• Integrate platforms with AD/LDAP, RADIUS/TACACS+, PKI, SIEM, and SOAR.
• Write and run UAT plans; provide as-built documentation and customer knowledge transfer.

Operations and customer responsibilities

• Act as L3 escalation for network and security incidents and lead major-incident root-cause analysis.
• Perform preventive-maintenance health checks, firmware upgrades, and vulnerability remediation during agreed maintenance windows.
• Meet SLA targets on assigned tickets and keep ticketing tools current.
• Support pre-sales with solution sizing, BoQ review, and technical SOW and RFP responses.
• Present technical status to customer stakeholders and internal management.

Minimum qualifications

• Bachelor’s degree in Computer Science, Electrical/Telecom Engineering, or IT, or equivalent experience.
• At least one of CCNP Security or CCNP Enterprise/Data Center; PCNSE; Fortinet NSE 7/FCSS; or F5 Certified Technology Specialist 301/302/303.
• At least 10 years in enterprise networking, including 5+ years delivering network-security projects.
• Minimum skills include Next-Generation Firewall products; Fortinet Security Fabric; Zero Trust/ZTNA/SASE; NAC; F5 BIG-IP; Cisco ACI; Layer 2/3 networking; and Fortinet SD-WAN.

Desired qualifications and skills

• CCIE Security, Data Center, or Enterprise and Cisco ISE or ACI specialist certification are desired.
• UAE/GCC system-integrator or managed-services experience and hands-on multi-vendor firewall and F5 migrations are desired.
• SIEM, EDR, vulnerability scanners, CIS hardening, and Python, Ansible, REST API, or Terraform automation are desired.
• Clear written English, a valid UAE driving licence, maintenance-window availability, and participation in an on-call rota are desired.

Compliance