Network & Security Infrastructure Engineer

Confidential; Abu Dhabi Emirate; Presencial; AED 420.000 - 690.000; Jornada completa

Descripción de la vacante

Confidential in Abu Dhabi is building a digital-first, AI-enabled financial services platform from the ground up. You will engineer a 100% cloud, software-defined network and security estate, focusing on scalable, automated infrastructure and security controls with auditable changes.

You’ll implement Network-as-Code (Terraform), manage Azure/AWS fabrics, and deploy Zero Trust with identity-aware access. Prior experience in regulated environments, SWIFT-related infrastructure, and advanced

Formación

• 6+ years hands-on Network & Security Infrastructure Engineering.
• Production cloud networking experience across Azure and/or AWS.
• Strong Terraform / Network-as-Code capability.
• Software-defined networking and private cloud connectivity.
• Hands-on next-generation firewalls and network security controls.
• Strong routing, DNS, load balancing, segmentation and resilient design.
• Zero Trust, workload identity, mTLS and identity-aware access exposure.
• CI/CD and Git-based infrastructure delivery.
• Highly automated or AI-assisted infrastructure operations.
• Network observability, incident response, DR and failover experience.
• Experience in regulated or security-sensitive environments; SWIFT exposure is a plus.
• Certifications such as CCNP, PCNSE, NSE or equivalent are advantageous.

Responsabilidades

• Build and operate a 100% cloud, software-defined network and security estate.
• Implement Network-as-Code with Terraform, Git-based workflows, and pre-deployment tests.
• Manage cloud network fabrics across Azure and AWS and ensure resilient connectivity.
• Deploy next-gen firewalls, DDoS protection, IDS/IPS, and secure DNS.
• Enable Zero Trust / ZTNA / SASE with identity-aware access and segmentation.
• Maintain observability, auditability, and incident response capabilities.
• Automate remediation, patching, and change management with auditable controls.
• Support secure Swift/payments or regulated connectivity as a major plus.

Conocimientos

Terraform / Network-as-Code

Cloud networking (Azure & AWS)

Zero Trust / SASE / mTLS

Automation / AI-assisted infra

Next-gen firewalls

Network observability / incident resp.

CI/CD / Git-based deployment

DDoS/IDS/IPS security controls

Regulated environments / SWIFT (adv.)

X.509 PKI / HSM / secure key mgmt

Herramientas

NetBox

Nautobot

Batfish

Istio

Cilium/eBPF

Azure Firewall

Terraform

GitHub Actions

Descripción del empleo

We're excited to be partnering with a leading institution in the UAE that is building a digital-first, AI-enabled financial services organisation from the ground up. This is a unique opportunity to join at an early stage and help shape the technology, data, and platform foundations of a business with significant institutional backing and long-term ambition. If you're passionate about network engineering, cloud security, and building resilient infrastructure at scale, we'd love to hear from you.

This is a rare opportunity to engineer a 100% cloud, software-defined network and security estate from the ground up, with no legacy on-prem infrastructure.

This is not a network administration role. You’ll build and operate production infrastructure as code: configuration in version control, tested before deployment, released through CI/CD, with drift detection, automated remediation and auditable change. A key element of the environment is AI/agent-enabled infrastructure operations. You’ll work with automated workflows that monitor vulnerabilities and advisories, assess infrastructure inventory, test remediation, execute controlled changes and accelerate patching, while maintaining human review, approval and auditability.

What you’ll build and operate:

Cloud network fabrics across Azure and AWS, including private connectivity, Azure Virtual WAN / AWS Cloud WAN, ExpressRoute / Direct Connect, SD-WAN, DNS/DHCP and load balancing.

Cloud-edge and office connectivity, carrier interconnects and resilient/failover architectures.

Next-generation firewalls such as Palo Alto/Fortinet, DDoS protection, IDS/IPS and DNS security.

Terraform-based Network-as-Code, reusable modules, Git-based configuration, pre-deployment testing, rollback and drift detection.

Network source-of-truth and validation tooling such as NetBox, Nautobot and Batfish.

CI/CD-driven infrastructure deployment using tooling such as GitHub Actions.

Zero Trust / ZTNA / SASE, identity-aware access and segmentation.

Workload and agent identity using technologies such as SPIFFE/SPIRE and Microsoft Entra Workload/Agent ID.

Mutual TLS, service mesh and identity-aware segmentation using Istio, Cilium/eBPF or equivalent.

PKI and HSM-backed key management.

Secure egress controls and allow-listing using Azure Firewall/DNS controls. Network telemetry, flow analysis, behavioural baselining and SOC/SIEM integration.

Automated quarantine, security remediation, patching and recovery workflows.

Experience building or operating SWIFT infrastructure, secure zones, Alliance components, payment-system connectivity or similarly regulated/high-security connectivity would be a major advantage.

Relevant experience may include secure gateways, cloud HSMs, SWIFT Customer Security Programme controls, resilient connectivity and evidence-driven compliance.

Key Requirements are:

6+ years hands-on Network & Security Infrastructure Engineering.

Production cloud networking experience across Azure and/or AWS.

Strong Terraform / Network-as-Code capability.

Software-defined networking and private cloud connectivity.

Hands-on next-generation firewalls and network security controls.

Strong routing, DNS, load balancing, segmentation and resilient network design.

Zero Trust, workload identity, mTLS and identity-aware access exposure.

CI/CD and Git-based infrastructure delivery.

Highly automated or AI-assisted infrastructure operations.

Network observability, incident response, DR and failover experience.

Experience in a highly regulated or security-sensitive environment strongly preferred.

SWIFT/payment infrastructure experience is an advantage.

Fluency with AI-assisted engineering tools, combined with strong review and audit disciplines.

Certifications such as CCNP, PCNSE, NSE or equivalent security/network qualifications are advantageous.

We’re interested in engineers who can demonstrate “I built and automated this”, rather than simply administering an established environment.

Hiring #NetworkSecurity #NetworkEngineer #CloudNetworking #Azure #AWS #Terraform #NetworkAutomation #InfrastructureAsCode #ZeroTrust #DevSecOps #CyberSecurity #SWIFT #SASE #AbuDhabi #UAEJobs