Network Security Engineer

Job Description

411_3416343

Job Description – Network Security Engineer

We are seeking a highly experienced Network Security Engineer with mandatory CCIE certification to design, implement, secure, and support on‑premise enterprise network and security infrastructures.

This role focuses exclusively on physical data centers, campus networks, and WAN environments.

The ideal candidate will have deep hands‑on expertise in routing & switching, next-generation firewalls, access control, VPNs, and enterprise wireless within mission‑critical, high‑availability on‑prem environments.

Mandatory Requirements

• Active CCIE Certification (Mandatory) – Security / Enterprise / Collaboration accepted
• 8–15+ years of hands‑on experience in on‑premise enterprise networks
• Strong experience working in UAE enterprise, government, banking, or system integrator environments

Key Responsibilities

• Design, deploy, and support on‑premise LAN/WAN and Data Center network security architectures
• Implement and manage Next‑Generation Firewalls (NGFW) including policy design, IPS, application control, and threat prevention
• Architect, configure, and troubleshoot Site‑to‑Site VPN, Remote Access VPN, DMVPN, IPsec, and GRE
• Design and implement high‑availability (HA), redundancy, and failover solutions
• Implement Network Access Control (NAC) using 802.1X and Cisco ISE
• Secure east‑west and north‑south traffic within data centers
• Lead PoC, migrations, firewall replacements, and infrastructure upgrades
• Prepare and maintain HLD, LLD, As‑Built diagrams, and implementation documents
• Perform advanced L2/L3 troubleshooting and root‑cause analysis
• Ensure compliance with security standards, audit requirements, and operational best practices

Technical Skills – Mandatory

Routing & Switching

• BGP, OSPF, EIGRP, RIP
• VLAN, STP / RSTP / MSTP, VTP
• HSRP, VRRP, GLBP
• vPC, VDC, FabricPath
• Policy‑Based Routing (PBR)

Network Security

• Firewalls:
• FortiGate
• Firewall clustering and high availability
• IPS, Antivirus, Web Filtering, Application Control
• Secure perimeter and internal segmentation design

VPN & Secure Connectivity

• Remote Access VPN (AnyConnect or equivalent)
• DMVPN, GRE
• Secure WAN interconnects (MPLS, leased lines)

Access Control & NAC

• 802.1X (Wired & Wireless)
• Guest & Sponsored access
• Role‑based and policy‑driven access control

Wireless (On‑Prem Controllers)

• Cisco Wireless (9800 WLC)
• Aruba Controllers
• Enterprise WLAN security design

Email & Web Security (On‑Prem Appliances) – Preferred

• Secure Email Gateways
• Web Security Appliances
• DLP, HTTPS inspection, URL filtering

Documentation & Professional Skills

• Strong experience producing:
• High‑Level Design (HLD)
• Low‑Level Design (LLD)
• Network diagrams and As‑Built documentation
• Excellent troubleshooting and analytical skills
• Strong customer‑facing communication
• Ability to work independently in critical environments

#J-18808-Ljbffr

2026-03-24 08:53:16