Senior Network & Firewall Engineer (L3)

HUMAN-AI-Z Nexus Technology; Dubai; On-site; AED 350,000 - 520,000; Full time

Job summary

HUMAN-AI-Z Nexus Technology in UAE seeks a Senior Network & Security Engineer with 8–14 years' hands-on experience to design, implement, and manage enterprise networks and security architectures. You will lead SD-WAN migrations, firewall deployments, ISE-based access control, and VPN connectivity across multi-vendor environments, ensuring robust, scalable solutions.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Electronics & Communication Engineering, or equivalent.
• CCIE Enterprise Infrastructure / Routing & Switching (Mandatory & Active)
• Additional certifications like PCNSE, CCNP Security, or Cisco SD-WAN Specialist are an added advantage.

Responsibilities

• Design, configure, and troubleshoot complex multi-protocol enterprise environments using BGP (iBGP/eBGP), OSPF, EIGRP, and MPLS (L2VPN, L3VPN, VRF-Lite).
• Deploy, manage, and optimize Cisco SD-WAN and Cisco SD-Access architectures.
• Administer, configure, and maintain NGFWs (Palo Alto, Fortinet FortiGate, Cisco Firepower/ASA) including policies, NAT, Content-ID, and HA deployments.
• Deploy and manage Cisco ISE for wired/wireless 802.1X authentication, guest access, and AAA policies.
• Implement and maintain Site-to-Site IPsec VPNs, DMVPN (Phase 3), and remote-access SSL VPNs (GlobalProtect / AnyConnect).
• Lifecycle management and escalation support on Cisco Catalyst, Nexus, and ASR/ISR routers.
• Create High-Level and Low-Level Designs, Network Diagrams, Migration Plans, and SOPs.

Skills

BGP

OSPF

MPLS

SD-WAN

Firewalls

Cisco ISE

VPN/IPsec

Nexus/Catalyst

Troubleshooting

Network security

Education

Bachelor's degree in Computer Science or related field

Tools

SolarWinds

PRTG

Wireshark

Prime Infrastructure

Job description

Location: UAE (Dubai / Abu Dhabi)

Position Type: Full-time

Experience: 8 – 14 Years

Mandatory Requirement (Non-Negotiable)

• Must possess an active Cisco Certified Internetwork Expert (CCIE) Certification in Enterprise Infrastructure or Routing & Switching (R&S).

• A valid, verifiable 5-digit or 6-digit CCIE number is strictly required.

• Note: Candidates with "CCIE Written only," "Lab Attempted," or "CCIE Trained" status will not be considered.

Role Overview

We are seeking an experienced Senior Network & Security Engineer to design, implement, optimize, and manage complex, enterprise-scale campus networks, data centers, and multi-vendor security infrastructures. The ideal candidate must have deep hands-on expertise in advanced routing/switching, software‑defined networking (Cisco SD-WAN / SD-Access), and enterprise firewall deployments.

Key Responsibilities

• Enterprise Routing & Switching: Design, configure, and troubleshoot complex multi-protocol enterprise environments utilizing BGP (iBGP/eBGP, path manipulation, route policies), OSPF, EIGRP, and MPLS (L2VPN, L3VPN, VRF-Lite).

• Software-Defined Networking: Deploy, manage, and optimize Cisco SD-WAN (vManage, vSmart, vBond, vEdge/cEdge) and Cisco SD-Access / DNA Center (Catalyst Center) architectures.

• Network Security & Firewalls: Administer, configure, and maintain Next-Generation Firewalls (Palo Alto Networks, Fortinet FortiGate, Cisco Firepower/ASA), including security policies, NAT, Content-ID, and High Availability (HA) deployments.

• Access Control & Identity: Deploy and manage Cisco ISE (Identity Services Engine) for wired/wireless 802.1X authentication, guest access, and AAA network access policies.

• VPN & Remote Connectivity: Implement and maintain Site-to-Site IPsec VPNs, DMVPN (Phase 3), and remote-access SSL VPNs (GlobalProtect / AnyConnect).

• Hardware & Platforms: Perform lifecycle management, configuration, and L3/L4 escalation support on Cisco Catalyst (9000 series), Cisco Nexus (3K/5K/7K/9K), and Cisco ASR/ISR routers.

• Architecture & Documentation: Create High-Level Designs (HLD), Low-Level Designs (LLD), Network Diagrams, Migration Plans, and Standard Operating Procedures (SOPs).

Required Skills & Qualifications

• Education: Bachelor’s degree in Computer Science, Information Technology, Electronics & Communication Engineering, or equivalent.

• Certifications:

  • CCIE Enterprise Infrastructure / Routing & Switching (Mandatory & Active)

  • Additional certifications like PCNSE, CCNP Security, or Cisco SD-WAN Specialist are an added advantage.

• Core Technologies: BGP, OSPF, MPLS L3VPN, DMVPN, Cisco SD-WAN, Cisco ISE, Palo Alto (Panorama), Fortinet FortiGate.

• Monitoring & Tools: SolarWinds, PRTG, Cisco Prime Infrastructure, Wireshark.

• Soft Skills: Strong analytical and troubleshooting mindset, excellent communication skills, and experience handling mission-critical P1/P2 incidents.

Desired Candidate Profile

We are seeking an active CCIE Enterprise Infrastructure (or CCIE Routing & Switching) certified Senior Network & Security Engineer with 8 to 14 years of hands-on experience. The ideal candidate will have demonstrated expertise in complex enterprise routing, campus fabrics, SD-WAN migrations, and perimeter Next-Generation Firewall (NGFW) administration.