IT Engineer

AVAR; Dubai; On-site; AED 167,400 - 223,200; Full time

Job summary

A leading technology company in Dubai is seeking an experienced IT Engineer to design, implement, and manage secure network infrastructure. This hands-on role involves end-to-end responsibility for maintaining robust, enterprise-grade systems using a security-first mindset. Ideal candidates will have a minimum of 5 years in IT infrastructure and proven expertise in enterprise networking, firewall deployment, and endpoint protection. Competitive packages offered in a collaborative on-site environment.

Qualifications

• Minimum 5 years of experience in IT infrastructure.
• Hands-on expertise in networking and system engineering.
• Experience in leading IT environments with 100+ users.

Responsibilities

• Design and implement secure enterprise network infrastructure.
• Configure routing, switching, and firewall systems.
• Manage and support IT systems and user environments.

Skills

Enterprise networking expertise

Network security management

VLAN configuration

Firewall deployment

Excellent communication skills

Job description

Role Overview

AVAR is looking for a highly skilled IT Engineer to take full ownership of its IT infrastructure design, implementation, and management. As part of our team in Head Office - Dubai, you'll work in an ONSITE environment applying a security‑first mindset to architect and maintain our robust, enterprise‑grade systems. This is a hands‑on position with end‑to‑end responsibility, blending deep technical expertise in networking, system engineering, and information security. You will lay the foundation for and support a secure, resilient network that meets the needs of users across wired, wireless, and remote environments while driving best practices and compliance in all infrastructure operations.

Responsibilities

• Design and implement secure, segmented enterprise network infrastructure with multi‑VLAN architecture.
• Configure Layer 2/3 switching, routing, and build core IT systems from the ground up.
• Deploy advanced network protection controls such as DHCP snooping, Dynamic ARP Inspection, and port security.
• Configure and manage next‑generation firewalls, adopting a default‑deny model and implementing threat protection mechanisms like IPS, antivirus, and application control.
• Enforce network access control and port‑based authentication (802.1X) and dynamic VLAN assignment.
• Deploy and manage enterprise wireless solutions supporting corporate and secure guest networks.
• Implement secure VPNs with multi‑factor authentication, ensuring remote access maintains consistent security standards.
• Design and manage Active Directory environments, DNS/DHCP integration, Group Policy, and RBAC.
• Implement endpoint protection, including disk encryption, application whitelisting, device control, and patch management.
• Define backup and disaster recovery strategies; conduct recovery tests and ensure data integrity is maintained.
• Maintain clear documentation (network diagrams, VLANs, firewall rules, runbooks), following structured change management processes.
• Ensure all infrastructure aligns with internal security policies and proactively address gaps while supporting audits.
• Provide direct hands‑on support across systems, infrastructure, and end‑user environments, leading incident response for IT outages and disruptions.

Must have requirements

• Minimum 5 years of professional experience in IT infrastructure (network & systems engineering).
• At least 3 years in a lead or ownership position supporting environments with 100+ users.
• Demonstrable hands‑on expertise in enterprise networking (L2/L3), VLANs, high availability routing, AV and firewall deployments (NGFW, IPS, SSL inspection).
• Strong experience with network security, policy management, and enforcement of 802.1X authentication.
• Deep exposure to deployment and management of secure wireless infrastructures (WPA3‑Enterprise, RADIUS), and guest isolation.
• Proven ability to implement VPN technologies (IPsec/SSL, MFA integration).
• Comprehensive knowledge of Active Directory architecture, Group Policy, RBAC, and identity security best practices.
• Proficiency in endpoint security, device hardening, disk encryption, and patch management via centralized tools.
• Backup and recovery management (NAS, enterprise backup tools), hybrid cloud networking (Azure, AWS or similar).
• Exceptional attention to detail, strong ownership mindset, and thorough documentation skills.
• Excellent communication skills aimed at both technical and non‑technical stakeholders.
• Commitment to continuous learning and staying updated with evolving technologies and threats.

Nice to have requirements

• Exposure to penetration testing methods and vulnerability management.
• Experience with SIEM and security monitoring tools.
• Familiarity with detection rules, log analysis, and automated incident response processes.
• Background in mentoring, knowledge sharing, and building team capability.