Network Security Engineer

DAG Group; Dubai; On-site; AED 180,000 - 240,000; Full time

Job summary

DAG Group is hiring a hands-on Network & Security Engineer in Dubai to secure the enterprise network and run day-to-day security operations across head office, warehouses and branch sites.

You will design secure architectures, administer firewalls, VPNs, NAC, and Zero Trust, and manage SIEM/XDR, IAM, SSO/MFA across AD and Entra ID while ensuring email security and compliance with UAE standards.

Qualifications

• Hands-on administration of enterprise firewalls (SonicWall, Fortinet, Palo Alto or equivalent) and switching and wireless (HPE Aruba or equivalent).
• Strong knowledge of VLANs, secure routing, VPN, NAC, IDS/IPS and Zero Trust.
• Experience with ManageEngine, SIEM, EPP and XDR platforms.
• Experience with IAM, PAM, Active Directory, Entra ID, SSO, MFA and Conditional Access.
• Experience with email security platforms (Barracuda, Check Point, Microsoft Defender or equivalent).
• Ability to produce architecture diagrams, security policies and documentation.

Responsibilities

• Design and maintain a secure network architecture across head office, warehouses and branches.
• Administer enterprise firewalls (policies, IPS, web filtering, application control) and site-to-site and remote-access VPNs.
• Secure switching and wireless networks; implement VLAN segmentation, NAC and Zero Trust access.
• Administer the ManageEngine security suite and enterprise platforms: IAM, PAM, SIEM, EPP, MDM and DLP.
• Manage email security (anti-phishing, SPF, DKIM, DMARC) and XDR, integrated with SIEM.
• Manage SSO, MFA and Conditional Access across Active Directory and Microsoft 365 (Entra ID).
• Monitor and respond to security alerts and incidents across network, endpoint, email and Microsoft 365.
• Run vulnerability and patch management, investigations and remediation, including with external vendors.
• Maintain security policies, architecture diagrams and technical documentation.
• Support compliance with ISO 27001, UAE Information Assurance standards and UAE PDPL.
• Identify and implement security automation and improvements.

Skills

Network Security

Firewall Administration

VPN & NAC

SIEM & XDR

IAM & Entra ID

MFA & SSO

Email Security

Architecture Diagrams

Tools

ManageEngine

SonicWall

Fortinet

Palo Alto

Active Directory

Job description

Job Description

Position: Network & Security Engineer Location: Dubai Reporting To: CTO

Role Overview

We are seeking a hands-on Network & Security Engineer to secure our enterprise network and run day-to-day security operations across head office, warehouses and branch sites.

Key Responsibilities

Network Security

• Design and maintain a secure network architecture across head office, warehouses and branches.
• Administer enterprise firewalls (policies, IPS, web filtering, application control) and site-to-site and remote-access VPNs.
• Secure switching and wireless networks; implement VLAN segmentation, NAC and Zero Trust access.

Security Platforms

• Administer the ManageEngine security suite and enterprise platforms: IAM, PAM, SIEM, EPP, MDM and DLP.
• Manage email security (anti-phishing, SPF, DKIM, DMARC) and XDR, integrated with SIEM.
• Manage SSO, MFA and Conditional Access across Active Directory and Microsoft 365 (Entra ID).

Security Operations

• Monitor and respond to security alerts and incidents across network, endpoint, email and Microsoft 365.
• Run vulnerability and patch management, investigations and remediation, including with external vendors.

Governance & Improvement

• Maintain security policies, architecture diagrams and technical documentation.
• Support compliance with ISO 27001, UAE Information Assurance standards and UAE PDPL.
• Identify and implement security automation and improvements.

Required Skills & Experience

• Hands-on administration of enterprise firewalls (SonicWall, Fortinet, Palo Alto or equivalent) and switching and wireless (HPE Aruba or equivalent).
• Strong knowledge of VLANs, secure routing, VPN, NAC, IDS/IPS and Zero Trust.
• Experience with ManageEngine, SIEM, EPP and XDR platforms.
• Experience with IAM, PAM, Active Directory, Entra ID, SSO, MFA and Conditional Access.
• Experience with email security platforms (Barracuda, Check Point, Microsoft Defender or equivalent).
• Ability to produce architecture diagrams, security policies and documentation.

Preferred candidate profile

• Hands-on administration of enterprise firewalls (SonicWall, Fortinet, Palo Alto or equivalent) and switching and wireless (HPE Aruba or equivalent).
• Strong knowledge of VLANs, secure routing, VPN, NAC, IDS/IPS and Zero Trust.
• Experience with ManageEngine, SIEM, EPP and XDR platforms.
• Experience with IAM, PAM, Active Directory, Entra ID, SSO, MFA and Conditional Access.
• Experience with email security platforms (Barracuda, Check Point, Microsoft Defender or equivalent).
• Ability to produce architecture diagrams, security policies and documentation.