Senior Network & Security Engineer
We are looking for an experienced Sr. Network & Security Engineer to take ownership of enterprise network and security infrastructure across a multi-vendor environment.
The role combines hands-on engineering, security operations, network optimization and infrastructure transformation. The ideal candidate will have strong experience with enterprise firewalls, routing and switching, VPN technologies, high-availability environments and large-scale migration projects.
You will play a key role in maintaining a secure, resilient and high-performing network environment while driving technology refresh and migration initiatives.
Key Responsibilities:
Network & Firewall Security
- Manage, configure and optimize enterprise firewall and security platforms across Palo Alto, FortiGate, Cisco FTD/ASA and Check Point.
- Configure and manage Palo Alto GlobalProtect VPN, including Gateway/Portal, Active Directory and SAML integrations.
- Administer FortiGate Site-to-Site VPN, security policies, security profiles, NAT, routing, HA and firmware upgrades.
- Manage Cisco FTD/ASA environments, including ACLs, access policies, IPS, DNS filtering, AMP, Security Intelligence and HA.
- Manage Check Point perimeter and core firewall environments, including security policies and remote-access VPN.
- Troubleshoot complex network and security issues and drive issues through to resolution.
Routing, Switching & Network Infrastructure
- Manage enterprise Cisco Catalyst and Nexus switching environments.
- Work with technologies including VLANs, STP, EtherChannel/Port Channel, StackWise, VPC, ACLs and Port Security.
- Configure and optimize FortiGate WAN and SD-WAN environments, including interfaces, zones, policies and WAN links.
- Perform advanced troubleshooting across routing, switching, firewall and connectivity layers.
- Support network resilience and high-availability design across critical infrastructure.
Migration & Transformation
- Lead or contribute to major network transformation initiatives, Example:
- Check Point → FortiGate migrations
- Cisco ASA → Cisco FTD migrations
- Network and switch hardware refresh projects
- Firewall and network architecture enhancements
- Develop migration strategies, implementation plans, rollback plans and execution procedures.
- Coordinate technical activities with internal teams, vendors and stakeholders to ensure controlled and low-risk changes.
Monitoring & Operational Management
- Manage network monitoring through SolarWinds, OpManager, Site24x7, PRTG, Zabbix, NewRelic, including node management, polling, alerts and device backups.
- Monitor network health, performance and availability and proactively identify potential issues.
- Participate in incident resolution, problem management and infrastructure improvement initiatives.
- Follow structured Change Management, Incident Management and operational processes.
- Carry out Preventive Maintenance
Documentation & Governance
- Create and maintain accurate network topology diagrams and architecture documentation.
- Develop Change Requests (CRs), migration plans, rollback plans and SOPs.
- Ensure network and security configurations are properly documented and kept current.
- Maintain documentation required for operational continuity, audits and knowledge transfer.
Essential Technical Experience
- Strong hands-on experience with multiple enterprise firewall platforms, preferably:
- Palo Alto Networks
- Fortinet FortiGate
- Cisco FTD / ASA
- Check Point
- Strong experience with Cisco Catalyst and Nexus switching.
- Practical knowledge of:
- VLANs, STP, VPC, StackWise and EtherChannel
- ACLs and network segmentation
- Routing and NAT
- VPN technologies
- High Availability
- SD-WAN
- Hands-on experience with FortiGate SD-WAN and WAN configuration.
- Experience with SolarWinds or comparable enterprise NMS platforms.
- Proven experience delivering firewall migrations, network refreshes and infrastructure transformation projects.
- Strong troubleshooting and analytical skills.
- Good understanding of structured Change Management and IT Service Management practices.
- Strong technical documentation and communication skills.
Education & Certifications (Preferred):
- Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity.
- CCNP Enterprise / CCNP Security
- Palo Alto PCNSE
- Fortinet NSE 4 / NSE 7
- Equivalent hands-on experience and expertise will also be considered.
Driving License:
- Valid UAE Driving License is mandatory.
- Own vehicle is preferred, particularly for occasional travel to client sites or project locations.
- Willingness to travel within the UAE when required.
Languages:
English.