Network Security Engineer-Banking

Dicetek LLC; Abu Dhabi; On-site; AED 260,000 - 460,000; Full time

Job summary

Dicetek LLC is seeking an expert security engineer to design, implement, and optimize firewall and WAF rule lifecycles, SSL/TLS cert and cipher management, and secure remote access across hybrid networks for internet-facing services.

You will build and govern cloud network security in Azure and AWS (VNet/VPC, NSGs, PrivateLink), integrate with SIEM/SOAR, and develop runbooks while embedding guardrails and IaC practices.

Qualifications

• Proven experience designing for high availability, performance and security compliance.
• Strong collaboration across infra, app, SOC and risk teams; mentoring capability.
• Ownership mindset with attention to detail and pragmatic delivery.

Responsibilities

• Design and manage firewall/WAF rule lifecycles and review changes.
• Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services.
• Build and maintain cloud network security (VNet/VPC, NSGs/NACLs, PrivateLink, Transit Gateway).
• Integrate security controls with SIEM/SOAR and network telemetry; develop runbooks.
• Embed guardrails, IaC tagging, security blueprints and DevSecOps workflows.

Skills

Firewall design

WAF optimization

Azure networking

AWS networking

Security policy design

Collaboration with SOC

Threat prevention

Education

Azure Security Engineer AZ-500

AWS Security – Specialty

PCNSE

NSE 4–7 (NSE 7 desirable)

Tools

F5 BIG-IP

Palo Alto Networks

Fortinet FortiGate

Citrix ADC

Job description

Own firewall and WAF rule life-cycle design change review implementation optimization and periodic recertification Manage SSL TLS certificates ciphers and HSTS for internet-facing services enforce secure crypto standards Build and maintain site-to-site VPNs SD-WAN and secure remote access solutions across hybrid networks Integrate network security controls with SIEM SOAR and network telemetry develop actionable runbooks Implement Azure AWS network security VNet VPC design NSGs NACLs PrivateLink Transit Gateway Virtual WAN Firewall IDS IPS Deploy and govern cloud WAF and application gateways integrate with native services where applicable Embed guardrails IaC policy tagging security blueprints and support DevSecOps workflows.

Expert hands-on with:

• F5 BIG-IP (ASM/Advanced WAF): policy tuning, attack signatures, bot and DDoS mitigation, iRules basics.
• Palo Alto Networks: security policy design, App-ID/URL filtering, Threat Prevention/WildFire, Panorama.
• Fortinet FortiGate/FortiManager/FortiAnalyzer: NGFW policies, IPS/AV/web filter, automation, logging.
• Citrix ADC (NetScaler): L7 load balancing, SSL/TLS, content switching, AppFW exposure.

Strong Azure and AWS networking & security:

• VNet/VPC, peering, routing, NSG/NACL, Azure Firewall/AWS Network Firewall, Application Gateway/ALB/WAF, PrivateLink, Transit Gateway/Virtual WAN.

Protocol depth:

• TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.

Proven experience designing for high availability, performance, and security compliance.

Good-to-Have Skills

Security first mindset with pragmatic delivery. Ownership, attention to detail, and strong troubleshooting under pressure. Collaboration across infra, app, SOC, and risk teams; mentoring capability.

Certifications Required

• F5: 301a/b (BIG-IP LTM), 302 (ASM/Advanced WAF) or equivalent practical mastery.
• Palo Alto: PCNSE.
• Fortinet: NSE 4–7 (NSE 7 highly desirable).
• Citrix: CCA-N/CCP-N (ADC).
• Cloud: Azure Security Engineer (AZ-500), AWS Security – Specialty (or Architect certs with strong security exposure).