Senior Network & Security Engineer

Senior Network & Security Engineer

We are looking for an experienced Sr. Network & Security Engineer to take ownership of enterprise network and security infrastructure across a multi-vendor environment.The role combines hands‑on engineering, security operations, network optimization and infrastructure transformation. The ideal candidate will have strong experience with enterprise firewalls, routing and switching, VPN technologies, high‑availability environments and large-scale migration projects.You will play a key role in maintaining a secure, resilient and high‑performing network environment while driving technology refresh and migration initiatives.

Key Responsibilities: Network & Firewall Security

• Manage, configure and optimize enterprise firewall and security platforms across Palo Alto, FortiGate, Cisco FTD/ASA and Check Point.
• Configure and manage Palo Alto GlobalProtect VPN, including Gateway/Portal, Active Directory and SAML integrations.
• Administer FortiGate Site-to-Site VPN, security policies, security profiles, NAT, routing, HA and firmware upgrades.
• Manage Cisco FTD/ASA environments, including ACLs, access policies, IPS, DNS filtering, AMP, Security Intelligence and HA.
• Manage Check Point perimeter and core firewall environments, including security policies and remote-access VPN.
• Troubleshoot complex network and security issues and drive issues through to resolution.

Routing, Switching & Network Infrastructure

• Manage enterprise Cisco Catalyst and Nexus switching environments.
• Work with technologies including VLANs, STP, EtherChannel/Port Channel, StackWise, VPC, ACLs and Port Security.
• Configure and optimize FortiGate WAN and SD-WAN environments, including interfaces, zones, policies and WAN links.
• Perform advanced troubleshooting across routing, switching, firewall and connectivity layers.
• Support network resilience and high-availability design across critical infrastructure.

Migration & Transformation

• Lead or contribute to major network transformation initiatives, Example:
  • Check Point → FortiGate migrations
  • Cisco ASA → Cisco FTD migrations
  • Network and switch hardware refresh projects
  • Firewall and network architecture enhancements
• Develop migration strategies, implementation plans, rollback plans and execution procedures.
• Coordinate technical activities with internal teams, vendors and stakeholders to ensure controlled and low-risk changes.

Monitoring & Operational Management

• Manage network monitoring through SolarWinds, OpManager, Site24x7, PRTG, Zabbix, NewRelic, including node management, polling, alerts and device backups.
• Monitor network health, performance and availability and proactively identify potential issues.
• Participate in incident resolution, problem management and infrastructure improvement initiatives.
• Follow structured Change Management, Incident Management and operational processes.
• Carry out Preventive Maintenance

Documentation & Governance

• Create and maintain accurate network topology diagrams and architecture documentation.
• Develop Change Requests (CRs), migration plans, rollback plans and SOPs.
• Ensure network and security configurations are properly documented and kept current.
• Maintain documentation required for operational continuity, audits and knowledge transfer.

Essential Technical Experience

• Strong hands‑on experience with multiple enterprise firewall platforms, preferably:
  • Palo Alto Networks
  • Fortinet FortiGate
  • Cisco FTD / ASA
  • Check Point
• Strong experience with Cisco Catalyst and Nexus switching.
• Practical knowledge of:
  • VLANs, STP, VPC, StackWise and EtherChannel
  • ACLs and network segmentation
  • Routing and NAT
  • VPN technologies
  • High Availability
  • SD-WAN
• Hands-on experience with FortiGate SD-WAN and WAN configuration.
• Experience with SolarWinds or comparable enterprise NMS platforms.
• Proven experience delivering firewall migrations, network refreshes and infrastructure transformation projects.
• Strong troubleshooting and analytical skills.
• Good understanding of structured Change Management and IT Service Management practices.
• Strong technical documentation and communication skills.

Education & Certifications (Preferred):

• Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity.
• CCNP Enterprise / CCNP Security
• Palo Alto PCNSE
• Fortinet NSE 4 / NSE 7
• Equivalent hands‑on experience and expertise will also be considered.

Driving License:

• Valid UAE Driving License is mandatory.
• Own vehicle is preferred, particularly for occasional travel to client sites or project locations.
• Willingness to travel within the UAE when required.

Languages: English. #J-18808-Ljbffr