Senior Network and Security Engineer

Role overview

Design and delivery

• Gather customer requirements and produce HLD and LLD documents for security and data-centre solutions.
• Design segmentation, firewall policy, Zero Trust access, and NAC policy models to meet customer security standards.
• Review customer environments and recommend hardening, migration, and consolidation paths.
• Lead deployments from staging and configuration through integration, cut-over, and post-go-live support.
• Plan firewall and load-balancer migrations, including policy conversion, rule clean-up, and rollback plans, with minimal downtime.
• Integrate security platforms with AD/LDAP, RADIUS/TACACS+, PKI, SIEM, and SOAR.
• Write and run UAT plans; deliver as-built documentation and customer knowledge transfer.

Operations and customer delivery

• Provide L3 escalation for network and security incidents and lead root-cause analysis for major incidents.
• Perform preventive-maintenance health checks, firmware upgrades, and vulnerability remediation during agreed maintenance windows.
• Meet SLA targets on assigned tickets and keep ticketing tools updated.
• Support pre-sales with solution sizing, BoQ review, and technical SOW and RFP responses.
• Present technical status to customer stakeholders and internal management.

Education, certification, and experience

• Bachelor’s degree in Computer Science, Electrical/Telecom Engineering, or IT, or equivalent experience.
• At least one of CCNP Security, CCNP Enterprise/Data Center, PCNSE, Fortinet NSE 7/FCSS, or F5 Certified Technology Specialist (301/302/303) is required.
• At least 10 years in enterprise networking, including five or more years delivering network security projects.
• Desired: CCIE Security/Data Center/Enterprise or Cisco ISE/ACI specialist certification.
• Desired: system-integrator or managed-services experience in the UAE/GCC and hands-on multi-vendor firewall and F5 migrations.

Technical skills

• Required: Palo Alto, FortiGate, and Cisco FTD/FMC next-generation firewalls, including HA deployments, policy migration, IPS, URL filtering, SSL decryption, and VPN.
• Required: Fortinet Security Fabric products, including FortiManager, FortiAnalyzer, FortiEMS, FortiZTP, FortiSandbox, FortiADC, and FortiMail.
• Required: Zero Trust/ZTNA/SASE rollouts, identity-provider integration with Entra ID or Okta, and MFA.
• Required: Cisco ISE, Aruba ClearPass, or FortiNAC; 802.1X, MAB, guest/BYOD, posture, profiling, and TrustSec.
• Required: F5 BIG-IP LTM, GTM, Advanced WAF, APM, and F5OS/rSeries/VELOS.
• Required: Cisco ACI/APIC and Nexus 9000, including fabric bring-up, tenants/VRF/BD/EPG, L3Out, and service graphs.
• Required: VLANs, STP, LACP, vPC, BGP, OSPF, EIGRP, VRF, HSRP/VRRP, and VXLAN EVPN.
• Required: Fortinet SD-WAN branch rollouts using FortiZTP and FortiManager.
• Desired: SIEM (Splunk or QRadar), EDR, vulnerability scanners, CIS hardening, Python, Ansible, REST APIs, or Terraform.

Additional desired qualifications

• Clear written English for HLD/LLD, method statements, change requests, and customer reports is desired.
• A valid UAE driving licence and willingness to work maintenance windows and join an on-call rota are desired.

Compliance