Senior Cloud, Network & Security Engineer — Multi-Cloud & NAC

Alkalma Healthcare; Abu Dhabi; On-site; AED 280,000 - 420,000; Full time

Job summary

Alkalma Healthcare is seeking an experienced Network Security Architect to implement and manage the organisation's network and multi-cloud infrastructure across sites in Abu Dhabi. You will handle firewalls, switches, Wi‑Fi, NAC, IP telephony, cloud security, and security monitoring in collaboration with the SOC.

The role requires hands‑on expertise in HPE Aruba, Fortinet, Cisco Meraki, and cloud platforms, with a focus on 802.1X, MFA, and privileged access controls.

Qualifications

• 58 years of relevant experience spanning network infrastructure, network security and cloud security.
• Hands-on experience with HPE Fortinet and Cisco including switching firewalls and enterprise Wi‑Fi.
• Practical experience implementing administering and troubleshooting NAC solutions.
• Strong Azure security expertise and practical experience securing additional cloud platforms.
• Working knowledge of IP telephony VoIP SIP and voice-network troubleshooting.
• Experience with SOC coordination incident response vulnerability management and security audit support.
• Relevant HPE Aruba Fortinet Cisco or cloud security certifications preferred; healthcare-sector experience is an advantage.

Responsibilities

• Manage HPE Aruba Fortinet and Cisco Meraki infrastructure including switching enterprise Wi‑Fi and physical and cloud-hosted FortiGate firewalls.
• Maintain routing VLANs network segmentation VPNs SD‑WAN and high availability; troubleshoot connectivity wireless coverage roaming and performance issues.
• Implement administer and troubleshoot Aruba ClearPass NAC including 802.1X RADIUS/TACACS device profiling guest access certificate-based authentication and access enforcement.
• Support IP telephony VoIP and centralised call centre infrastructure including PBX connectivity SIP trunks call routing QoS and call-quality troubleshooting.
• Secure workloads and applications across Azure AWS Alibaba Cloud and Tencent Cloud covering network protection encryption logging web application firewalls DDoS protection and secure application publishing.
• Administer identity and privileged access controls including Microsoft Entra ID MFA Conditional Access and PAM solutions such as Wallix.
• Support Microsoft Defender and Intune security controls and their integration with NAC and security monitoring.
• Coordinate with the SOC on monitoring coverage incident investigation response and remediation; review service effectiveness.
• Conduct security configuration reviews coordinate vulnerability assessments and penetration testing and track remediation and retesting.
• Support Windows/Linux hardening and core infrastructure services including Active Directory DNS DHCP NTP PKI and TLS certificate management.
• Monitor infrastructure availability and capacity; manage firmware updates configuration backups and changes with appropriate testing and rollback plans.
• Support backup security restoration testing infrastructure failover and disaster recovery planning.
• Automate routine administration and security checks using PowerShell Python or infrastructure-as-code tools.
• Maintain network diagrams operating procedures asset and licence inventories; coordinate vendor support escalations and renewals.
• Support audits against applicable ADHICS DoH and DHA requirements including evidence preparation control validation and closure of findings.

Skills

Network infrastructure

Network security

Cloud security

SOC coordination

Vulnerability management

Penetration testing

Active Directory

PowerShell

Python

Tools

HPE Aruba

Fortinet

Cisco Meraki

Aruba ClearPass NAC

Microsoft Entra ID

PAM (Wallix)

Azure

AWS

Alibaba Cloud

Tencent Cloud

NAC

PowerShell

Python

Job description

Alkalma Healthcare is seeking an experienced Network Security Architect to implement and manage the organisation's network and multi-cloud infrastructure across sites in Abu Dhabi. You will handle firewalls, switches, Wi‑Fi, NAC, IP telephony, cloud security, and security monitoring in collaboration with the SOC.

The role requires hands‑on expertise in HPE Aruba, Fortinet, Cisco Meraki, and cloud platforms, with a focus on 802.1X, MFA, and privileged access controls.