Network and Security Engineer

Category; Oman; On-site; OMR 18,000 - 30,000; Full time

Job summary

Goodman Masson is partnering with a new financial markets infrastructure venture in Oman, hiring at the build stage to stand up critical market infrastructure from a blank sheet.

The Network and Security Engineer will design, build and run the platform's network, ensuring low-latency performance, secure connectivity to counterparties, and robust incident response from day one in Muscat.

Qualifications

• Degree in computer science, networking, information security, or equivalent hands-on experience.
• At least six years in network engineering with hands-on responsibility for network security.
• Strong network design and operation: segmentation and zoning, routing and switching, firewalls, load balancing, secure remote access, and low-latency design.
• Direct experience owning first-line network security including firewalls, hardening, certificates, and secure connectivity.
• Experience securing external-facing connectivity in a regulated or high-assurance setting.
• Experience leading the first response to a live network or security incident.
• Fluent English, written and spoken.

Responsibilities

• Design and then build the network: segmentation and zoning, routing and switching, firewalls, load balancing, DNS, and time synchronisation, engineered for steady low-latency performance.
• Set up and secure connectivity to external counterparties such as custodians, settlement banks, and market systems.
• Own perimeter and internal network security in the first line: firewalls, segmentation, secure and privileged remote access, and certificate and encryption management.
• Keep network devices patched and hardened, support penetration testing, and close network findings.
• Lead the first response to network and security incidents, and elevate cleanly when needed.
• Keep the network documented to a standard that holds up under review.

Skills

Network engineering

Network security

Firewalls

Low-latency design

DNS

Routing & switching

Packet capture

English fluency

Education

Degree in computer science or networking

Tools

Wireshark

Packet capture

Terraform

Ansible

Job description

Goodman Masson is partnering with a new financial markets infrastructure venture under formation in Oman.

Backed by prominent institutional investors, the business is building a greenfield platform from the ground up, and is now hiring at the build stage.

This is a rare chance to help stand up critical market infrastructure from a blank sheet and then run what you have built.

The role

The Network and Security Engineer builds and looks after the network the platform runs on, and keeps it secure at the same time.

In the build phase you help design and then stand up the network from the ground up.

In the run phase you keep it working, watch it, and fix it when something breaks.

What you will do

Help design and then build the network: segmentation and zoning, routing and switching, firewalls, load balancing, DNS, and time synchronisation, engineered for steady low-latency performance

Set up and secure connectivity to external counterparties such as custodians, settlement banks, and market systems

Own perimeter and internal network security in the first line: firewalls, segmentation, secure and privileged remote access, and certificate and encryption management

Keep network devices patched and hardened, support penetration testing, and close network findings

Lead the first response to network and security incidents, and elevate cleanly when needed

Keep the network documented to a standard that holds up under review

Location and terms

Based in Muscat, Oman.

Permanent for Omani nationals; two-year fixed-term contract for expatriate hires.

What you will bring

Degree in computer science, networking, information security, or a related field, or equivalent hands-on experience At least six years in network engineering, with direct hands-on responsibility for network security as well as the network itself Strong network design and operation: segmentation and zoning, routing and switching, firewalls, load balancing, secure remote access, and low-latency design Direct experience owning first-line network security including firewalls, hardening, certificates, and secure connectivity Experience securing external-facing connectivity in a regulated or high-assurance setting Experience leading the first response to a live network or security incident Hands-on credibility: able to configure a firewall and a switch, segment a network, read a packet capture, and challenge a vendor design Fluent English, written and spoken

Also of interest

Experience in financial services or financial market infrastructure such as a central securities depository, central counterparty, exchange, or payment system Experience with secure connectivity to SWIFT, Bloomberg, or the international central securities depositories Infrastructure-as-code and automation experience such as Terraform or Ansible Relevant certifications in networking such as CCNP or CCIE, and in security such as CISSP