Senior Network and Security Engineer

Ghobashgroup; Abu Dhabi; In loco; AED 260.000 - 520.000; Tempo pieno

Descrizione del lavoro

Ghobashgroup is seeking an experienced security & data‑centre engineer in the UAE. The role leads implementations end‑to‑end, including Next‑Gen Firewalls, Zero Trust, NAC, F5 application delivery and Cisco ACI.

You will design, deploy and hand over complex solutions, and act as the technical escalation point for the team across UAE projects. Strong borderless delivery and customer communication are essential.

Competenze

• Bachelor’s degree in Computer Science, Electrical/Telecom Engineering or IT or equivalent experience.
• At least one of CCNP Security or CCNP Enterprise/Data Center; PCNSE; Fortinet NSE 7; F5 CST.

Mansioni

• Design and architecture: produce HLD/LLD for security and data‑centre solutions.
• Deployment and migration: lead end‑to‑end deployments and migrations with minimal downtime.
• Operations and support: L3 escalation for incidents; perform preventive maintenance and patches.
• Team and customer delivery: assist pre‑sales; present status to stakeholders.
• Education: create method statements, change requests and customer reports.

Conoscenze

Next‑Gen Firewall

Zero Trust

NAC

F5 BIG‑IP

Cisco ACI

Palo Alto

Fortinet NSE

CCNP Security / Enterprise

Formazione

Bachelor’s degree in Computer Science/Engineering or IT

Strumenti

Palo Alto

FortiGate

Cisco FTD/FMC

FortiNAC

F5 BIG‑IP

Cisco ACI (APIC)

Descrizione del lavoro

Design, deploy and hand over enterprise security and data-centre projects for CNS customers across the UAE. The role is hands‑on: the engineer leads implementations end to end - Next-Gen Firewalls, Zero Trust, NAC, F5 application delivery and Cisco ACI - and acts as the technical escalation point for the team.

DUTIES & RESPONSIBILITIES

Design and architecture

Gather customer requirements and produce High-Level Design (HLD) and Low-Level Design (LLD) documents for security and data-centre solutions.

Design segmentation, firewall policy, Zero Trust access and NAC policy models aligned with customer security standards.

Review existing customer environments and recommend hardening, migration and consolidation paths.

Deployment and migration

Lead end-to-end deployments: staging, configuration, integration, cut-over and post-go-live support.

Plan and execute firewall and load-balancer migrations (policy conversion, rule clean-up, rollback plans) with minimal downtime.

Integrate security platforms with AD/LDAP, RADIUS/TACACS+, PKI, SIEM and SOAR.

Write and run User Acceptance Test (UAT) plans and deliver as-built documentation and knowledge transfer to customers.

Operations and support

Act as L3 escalation for network and security incidents; lead root‑cause analysis for major incidents.

Carry out preventive maintenance (PM) health checks, firmware upgrades and vulnerability remediation within agreed maintenance windows.

Meet SLA targets on assigned tickets and keep ticketing tools up to date.

Team and customer delivery

Support pre‑sales with solution sizing, BoQ review, SOW and RFP technical responses.

Present technical status to customer stakeholders and internal management.

Education

Minimum

• Bachelor's degree in Computer Science, Electrical/Telecom Engineering or IT (or equivalent experience).
• At least one of: CCNP Security or CCNP Enterprise / Data Center; PCNSE; Fortinet NSE 7 / FCSS; F5 Certified Technology Specialist (301/302/303).

Desired

• CCIE Security / Data Center / Enterprise.
• Cisco ISE or ACI specialist certification.

Experience

Minimum

Minimum 10 years in enterprise networking, including 5+ years delivering network security projects.

Desired

• System integrator or managed‑services experience in the UAE/GCC.
• Hands‑on delivery of multi‑vendor firewall and F5 migrations.

Skills & Abilities

Minimum

• Next‑Gen Firewall - Palo Alto, FortiGate, Cisco FTD/FMC: HA deployments, policy migration, IPS, URL filtering, SSL decryption, VPN.
• Fortinet Security Fabric - FortiManager, FortiAnalyzer, FortiEMS, FortiZTP, FortiSandbox, FortiADC, FortiMail.
• Zero Trust / ZTNA / SASE - ZTNA rollouts replacing legacy VPN; IdP integration (Entra ID, Okta) and MFA.
• Network Access Control - Cisco ISE, Aruba ClearPass, FortiNAC: 802.1X, MAB, guest/BYOD, posture, profiling, TrustSec.
• Application delivery - F5 BIG‑IP LTM, GTM, Advanced WAF, APM; F5OS / rSeries / VELOS.
• Data‑centre fabric - Cisco ACI (APIC), Nexus 9000: fabric bring‑up, tenants/VRF/BD/EPG, L3Out, service graphs.
• Layer 2 / Layer 3 - VLANs, STP, LACP, vPC; BGP, OSPF, EIGRP, VRF, HSRP/VRRP, VXLAN EVPN.
• Zero‑touch SD‑WAN - Fortinet SD‑WAN (FortiZTP + FortiManager) large‑scale branch rollouts.

Desired

• Security operations - SIEM (Splunk, QRadar), EDR, vulnerability scanners, CIS hardening.
• Automation - Python, Ansible, REST APIs, Terraform for bulk configuration and policy migration.
• Clear written English for HLD/LLD, method statements, change requests and customer reports.
• Valid UAE driving licence; willing to work maintenance windows and join an on‑call rota.

Compliance with policies and procedures based on the ISO standards adopted by CNS.