Network and Security Engineer

Goodman Masson Muscat; Muscat; On-site; OMR 24,000 - 42,000; Full time

Job summary

Goodman Masson Muscat partners with a new financial markets infrastructure venture in Oman and is seeking a Network and Security Engineer to design, build, and operate the platform’s network. You will own security in the first line and ensure low-latency connectivity to external counterparties.

You will lead incident response, manage certificates and encryption, and maintain robust network documentation in a greenfield environment based in Muscat.

Qualifications

• Degree or equivalent hands-on experience in computing or networking.
• Minimum six years in network engineering with hands-on security responsibility.
• Experience securing external connectivity in regulated/high-assurance settings.
• Ability to design, build, and operate a low-latency network.

Responsibilities

• Design and build the network, including segmentation, routing, switching, firewalls, load balancing, DNS, and time sync for low-latency performance.
• Set up secure connectivity to custodians, settlement banks, and market systems.
• Own perimeter and internal network security in first line: firewalls, segmentation, remote access, certificates, and encryption management.
• Keep devices patched, support pentesting, and close network findings.
• Lead first response to network or security incidents and escalate when needed.
• Maintain network documentation to a review-ready standard.

Skills

Fluent English

Network design

Security operations

Firewall configuration

Packet capture analysis

Low-latency networking

Incident response

Fernwork experience

Network security in regulated env

Education

Degree in computer science or related field

Tools

Terraform

Ansible

Job description

Goodman Masson is partnering with a new financial markets infrastructure venture under formation in Oman.

Backed by prominent institutional investors, the business is building a greenfield platform from the ground up, and is now hiring at the build stage. This is a rare chance to help stand up critical market infrastructure from a blank sheet and then run what you have built.

The role

The Network and Security Engineer builds and looks after the network the platform runs on, and keeps it secure at the same time. In the build phase you help design and then stand up the network from the ground up. In the run phase you keep it working, watch it, and fix it when something breaks.

What you will do

• Help design and then build the network: segmentation and zoning, routing and switching, firewalls, load balancing, DNS, and time synchronisation, engineered for steady low-latency performance
• Set up and secure connectivity to external counterparties such as custodians, settlement banks, and market systems
• Own perimeter and internal network security in the first line: firewalls, segmentation, secure and privileged remote access, and certificate and encryption management
• Keep network devices patched and hardened, support penetration testing, and close network findings
• Lead the first response to network and security incidents, and escalate cleanly when needed
• Keep the network documented to a standard that holds up under review

Requirements

What you will bring

• Degree in computer science, networking, information security, or a related field, or equivalent hands-on experience
• At least six years in network engineering, with direct hands-on responsibility for network security as well as the network itself
• Strong network design and operation: segmentation and zoning, routing and switching, firewalls, load balancing, secure remote access, and low-latency design
• Direct experience owning first-line network security including firewalls, hardening, certificates, and secure connectivity
• Experience securing external-facing connectivity in a regulated or high-assurance setting
• Experience leading the first response to a live network or security incident
• Hands-on credibility: able to configure a firewall and a switch, segment a network, read a packet capture, and challenge a vendor design
• Fluent English, written and spoken

Also of interest

• Experience in financial services or financial market infrastructure such as a central securities depository, central counterparty, exchange, or payment system
• Experience with secure connectivity to SWIFT, Bloomberg, or the international central securities depositories
• Infrastructure-as-code and automation experience such as Terraform or Ansible
• Relevant certifications in networking such as CCNP or CCIE, and in security such as CISSP

Benefits

Location and terms

Based in Muscat, Oman.

Permanent for Omani nationals; two-year fixed-term contract for expatriate hires. Omani nationals are strongly encouraged to apply.