Network & Security Infrastructure Engineer

Confidential; Abu Dhabi; Sur place; AED 350 000 - 550 000; Plein temps

Résumé du poste

Confidential is building a 100% cloud, AI-enabled financial services platform in the UAE. You will design and operate production infrastructure as code with automated change management and auditable reviews, focusing on cloud network fabrics, security controls, and resilient connectivity.

You'll work with Terraform-based Network-as-Code, modern firewalls, and secure, scalable architectures across Azure and AWS, driving automation and AI-assisted operations while maintaining strong governance and

Qualifications

• 6+ years hands-on Network & Security Infrastructure Engineering.
• Production cloud networking experience across Azure and/or AWS.
• Strong Terraform / Network-as-Code capability.
• Software-defined networking and private cloud connectivity.
• Hands-on next-generation firewalls and network security controls.
• Strong routing, DNS, load balancing, segmentation and resilient network design.

Responsabilités

• Build and operate production infrastructure as code with CI/CD pipelines.
• Engineer a 100% cloud, software-defined network and security estate.
• Implement Zero Trust / ZTNA / SASE with identity-aware access and segmentation.
• Manage network telemetry, monitoring, and incident response for resilience.
• Integrate security tooling and automation for vulnerabilities and patching.

Connaissances

Cloud networking

Zero Trust

CI/CD

Automation

Incident response

Outils

Terraform

Istio

NetBox

Nautobot

Batfish

GitHub Actions

Azure Firewall

Palo Alto

Fortinet

Description du poste

We're excited to be partnering with a leading institution in the UAE that is building a digital-first, AI-enabled financial services organisation from the ground up. This is a unique opportunity to join at an early stage and help shape the technology, data, and platform foundations of a business with significant institutional backing and long-term ambition. If you're passionate about network engineering, cloud security, and building resilient infrastructure at scale, we'd love to hear from you.

This is a rare opportunity to engineer a 100% cloud, software-defined network and security estate from the ground up, with no legacy on-prem infrastructure.

This is not a network administration role. You'll build and operate production infrastructure as code: configuration in version control, tested before deployment, released through CI/CD, with drift detection, automated remediation and auditable change. A key element of the environment is AI/agent-enabled infrastructure operations. You'll work with automated workflows that monitor vulnerabilities and advisories, assess infrastructure inventory, test remediation, execute controlled changes and accelerate patching, while maintaining human review, approval and auditability.

What you'll build and operate:

Cloud network fabrics across Azure and AWS, including private connectivity, Azure Virtual WAN / AWS Cloud WAN, ExpressRoute / Direct Connect, SD-WAN, DNS/DHCP and load balancing.

Cloud-edge and office connectivity, carrier interconnects and resilient/failover architectures.

Next-generation firewalls such as Palo Alto/Fortinet, DDoS protection, IDS/IPS and DNS security.

Terraform-based Network-as-Code, reusable modules, Git-based configuration, pre-deployment testing, rollback and drift detection.

Network source-of-truth and validation tooling such as NetBox, Nautobot and Batfish.

CI/CD-driven infrastructure deployment using tooling such as GitHub Actions.

Zero Trust / ZTNA / SASE, identity-aware access and segmentation.

Workload and agent identity using technologies such as SPIFFE/SPIRE and Microsoft Entra Workload/Agent ID.

Mutual TLS, service mesh and identity-aware segmentation using Istio, Cilium/eBPF or equivalent.

PKI and HSM-backed key management.

Secure egress controls and allow-listing using Azure Firewall/DNS controls. Network telemetry, flow analysis, behavioural baselining and SOC/SIEM integration.

Automated quarantine, security remediation, patching and recovery workflows.

Experience building or operating SWIFT infrastructure, secure zones, Alliance components, payment-system connectivity or similarly regulated/high-security connectivity would be a major advantage.

Relevant experience may include secure gateways, cloud HSMs, SWIFT Customer Security Programme controls, resilient connectivity and evidence-driven compliance.

Key Requirements are:

6+ years hands-on Network & Security Infrastructure Engineering.

Production cloud networking experience across Azure and/or AWS.

Strong Terraform / Network-as-Code capability.

Software-defined networking and private cloud connectivity.

Hands-on next-generation firewalls and network security controls.

Strong routing, DNS, load balancing, segmentation and resilient network design.

Zero Trust, workload identity, mTLS and identity-aware access exposure.

CI/CD and Git-based infrastructure delivery.

Highly automated or AI-assisted infrastructure operations.

Network observability, incident response, DR and failover experience.

Experience in a highly regulated or security-sensitive environment strongly preferred.

SWIFT/payment infrastructure experience is an advantage.

Fluency with AI-assisted engineering tools, combined with strong review and audit disciplines.

Certifications such as CCNP, PCNSE, NSE or equivalent security/network qualifications are advantageous.

We're interested in engineers who can demonstrate "I built and automated this", rather than simply administering an established environment.

Hiring #NetworkSecurity #NetworkEngineer #CloudNetworking #Azure #AWS #Terraform #NetworkAutomation #InfrastructureAsCode #ZeroTrust #DevSecOps #CyberSecurity #SWIFT #SASE #AbuDhabi #UAEJobs