Network Security Engineer in Banking domain

TAT IT Technolgies; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

TAT IT Technolgies is seeking an experienced Network Security Engineer for its Abu Dhabi projects in the banking domain. You will design, implement, and manage firewall, WAF, VPN, and SD-WAN across hybrid and cloud environments, with hands-on work on F5 BIG-IP, Palo Alto, Fortinet, and Citrix ADC.

Role emphasizes UAE banking regulations, incident response leadership, and resilient architectures with DR capabilities. 5+ years of relevant experience and UAE banking exposure are required.

Qualifications

• Minimum 5 years in network security engineering.
• UAE banking experience preferred.
• Certifications in F5, PCNSE, NSE, Citrix, Azure/AWS Security are required.

Responsibilities

• Own firewall and WAF rule lifecycle: design, review, implementation, optimization, and recertification.
• Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.
• Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions.
• Integrate network security controls with SIEM/SOAR and telemetry; develop actionable runbooks.
• Implement Azure/AWS network security (VNet/VPC, NSGs/NACLs, PrivateLink, Transit Gateway/Virtual WAN, Firewall/IDS/IPS).
• Deploy and govern cloud WAF and application gateways; embed guardrails (IaC policy, tagging, security blueprints).
• Support DevSecOps workflows and resilient architecture design.

Skills

Firewall/WAF lifecycle

Cloud security

Incident response

VPN/SD-WAN

UAE banking regulations

Tools

F5 BIG-IP

Palo Alto Networks

Fortinet FortiGate

Citrix ADC

Azure/AWS security

Job description

We have an urgent requirement for Network Security Engineer in Banking domain is required for our banking clients in Abu Dhabi ,UAE Design, implement, and manage firewall/WAF lifecycle, VPNs, SD-WAN, and secure remote access across hybrid and cloud environments (Azure/AWS). Must Hands-on with F5 BIG-IP, Palo Alto, Fortinet, Citrix ADC, plus deep knowledge of TCP/IP, routing protocols, TLS, VPNs, and cloud-native security controls. Must Ensure compliance with UAE banking regulations, perform penetration test remediation, lead L3 incident response, and design resilient architectures with failover/DR capabilities. Must UAE Banking Exposure Required mandatory certifications (F5, PCNSE, NSE, Citrix, Azure/AWS Security), strong troubleshooting and collaboration skills.

Role Overview

We are hiring a Network Security Engineer with 5+ years of experience to design, implement, and manage advanced network security solutions across hybrid and cloud environments. The role requires expertise in firewall/WAF lifecycle management, cloud security, and compliance with UAE banking regulations.

Key Responsibilities

• Own firewall and WAF rule lifecycle: design, review, implementation, optimization, and recertification.
• Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.
• Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions.
• Integrate network security controls with SIEM/SOAR and telemetry; develop actionable runbooks.
• Implement Azure/AWS network security (VNet/VPC, NSGs/NACLs, PrivateLink, Transit Gateway/Virtual WAN, Firewall/IDS/IPS).
• Deploy and govern cloud WAF and application gateways; embed guardrails (IaC policy, tagging, security blueprints).
• Support DevSecOps workflows and resilient architecture design.

Required Skills

• Hands-on expertise with:
• F5 BIG-IP (ASM/Advanced WAF) – policy tuning, attack signatures, bot/DDoS mitigation, iRules basics.
• Palo Alto Networks – App-ID/URL filtering, Threat Prevention/WildFire, Panorama.
• Fortinet FortiGate/FortiManager/FortiAnalyzer – NGFW policies, IPS/AV/web filter, automation, logging.
• Citrix ADC (NetScaler) – L7 load balancing, SSL/TLS, content switching, AppFW.
• Strong Azure & AWS networking/security (VNet/VPC, routing, NSGs/NACLs, Firewalls, WAF, PrivateLink, Transit Gateway).
• Deep protocol knowledge: TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.
• Proven experience in high availability, performance, and compliance design.

Required Experience

• Minimum 5 years in network security engineering.
• UAE banking experience preferred.
• Strong troubleshooting under pressure, collaboration across infra/app/SOC/risk teams, and mentoring capability.

Good-to-Have Skills

• Security-first mindset with pragmatic delivery.
• Ownership, attention to detail, and ability to lead incident response.

Key Deliverables

• Align controls to UAE banking regulations (Central Bank, NESA/IAA, SWIFT CSP, PCI DSS).
• Perform penetration test remediation and audit support.
• Maintain detailed artifacts: HLD/LLD, diagrams, SOPs, risk registers, audit evidence.
• Lead L3 incident response (exploits, DDoS, lateral movement) with RCA and post-mortems.
• Design resilient architectures (HA pairs, GSLB, multi-AZ/region) and conduct failover/DR exercises.

Skills: network security,bank,security