Senior Network Engineer

Jumbo Group; Dubai; On-site; AED 312,000 - 502,000; Full time

Job summary

Jumbo Group is seeking a hands-on Senior Network Engineer to manage and secure enterprise network infrastructure across retail and service center operations.

You will design, configure, and maintain switching, wireless, firewall, and cloud security stacks, with emphasis on SASE/Zero Trust and Microsoft security tooling across multi-site locations.

Qualifications

• Extensive experience designing and maintaining enterprise network infrastructure across multi-site environments.
• Hands-on administration of switching, wireless, firewall, and cloud security stacks.
• Strong knowledge of SASE/Zero Trust architectures and Microsoft security tooling.

Responsibilities

• Design, configure, and maintain enterprise switching across multiple sites including VLANs and routing protocols.
• Manage wireless environments with RF planning, 802.1X, and roaming for retail and warehouses.
• Administer firewall platforms (Check Point/Fortinet) with policy reviews and migrations.
• Oversee VPN, site-to-site, and remote access connectivity; drive SASE/ZTNA adoption.
• Administer Microsoft Entra ID, Intune, and AD/PKI for secure access and device security.
• Implement network segmentation, NAC, MFA, and micro-segmentation across environments.
• Support cloud networking (Azure/AWS) with VNet design and hybrid connectivity.
• Monitor health with SIEM; perform RCA and lead incident resolution with vendors.

Skills

Networking

Switching

Wireless

Firewall

VPN

SASE/ZTNA

Microsoft Entra

Intune

AD/PKI

DNS/DHCP

NAC

Cloud networking

SIEM

HA/DR

RCA

Tools

Check Point

Fortinet

Aruba

Cisco

Microsoft Intune

Job description

Jumbo Group is looking for a hands‑on Senior Network Engineer to manage and secure enterprise network infrastructure across retail and service center operations, spanning switching, wireless, firewall, SASE/Zero Trust, and Microsoft cloud security stacks.

Enterprise Switching & Wireless

• Design, configure, and maintain enterprise switching infrastructure (VLANs, STP, LACP, OSPF, BGP) across multi-site retail and corporate locations
• Manage enterprise wireless environments (Aruba/Cisco), including RF planning, 802.1X authentication, and seamless roaming for retail floor and warehouse coverage

Firewall & Perimeter Security

• Administer and optimize firewall infrastructure (Check Point and/or Fortinet) — NAT, IPS, and Application Control policies
• Conduct regular rule‑base reviews, cleanups, and migrations with minimal business disruption

VPN & Remote Connectivity

• Manage IPSec and SSL VPN infrastructure for site‑to‑site and remote access connectivity between stores, warehouses, and corporate offices
• Drive adoption and ongoing management of SASE and Zero Trust architecture (ZTNA, SWG, CASB, FWaaS) to secure distributed retail locations and remote users

Identity & Endpoint Security (Microsoft Stack)

• Manage Microsoft Entra ID and Conditional Access policies for secure, risk‑based access control
• Administer Microsoft Intune for endpoint management, compliance policies, and device security across the organization
• Own Active Directory, DNS, DHCP, PKI, and NPS/RADIUS infrastructure supporting authentication and network access

Network Security & Segmentation

• Implement and maintain network segmentation, Network Access Control (NAC), MFA, and micro‑segmentation strategies to reduce attack surface across retail and back‑office environments
• Support and extend cloud networking on Azure and/or AWS, including VNet design and VPN gateway connectivity between on‑prem and cloud environments

Availability, Monitoring & Resilience

• Manage load balancers, WAF, and reverse proxy configurations for critical applications
• Monitor network health using SIEM and packet‑level analysis tools; proactively identify and resolve performance and security anomalies
• Design and maintain High Availability (HA) and Disaster Recovery (DR) configurations for critical network infrastructure
• Lead root cause analysis (RCA) for critical network incidents, coordinating with vendors and internal stakeholders through to resolution
• Provide L3 escalation support for complex network and security issues across retail, service center, and corporate environments