Security Infra Management Specialist - L3 at Wajda International Technology Services

Wajda International Technology Services; Muscat; On-site; OMR 18,000 - 26,000; Full time

Job summary

Wajda International Technology Services seeks an L3 Security Infrastructure Management Specialist to design, optimize, and troubleshoot critical telecom security infrastructure. You will lead complex security deployments, mentor junior staff, and collaborate with architects on strategic initiatives.

Ideal candidates bring 6–9 years in security engineering/architecture, hands-on experience with enterprise-grade firewalls, IPS/IDS, and DDoS mitigation, plus scripting and API familiarity.

Qualifications

• 6–9 years in network security engineering or architecture.
• Experience designing, implementing, and optimizing large-scale security infrastructure.

Responsibilities

• Lead design and implementation of complex network security solutions (high-availability firewalls, advanced IPS, DDoS mitigation).
• Perform advanced troubleshooting and root-cause analysis for critical security infrastructure issues.
• Develop and implement security hardening standards and best practices for network devices.
• Evaluate new security technologies and recommend infrastructure enhancements.
• Provide expert guidance and mentorship to L1/L2 specialists.
• Collaborate with security architects and engineering teams on strategic initiatives.

Skills

Firewalls

IPS/IDS

DDoS mitigation

Python

Ansible

APIs

Tools

Python

Ansible

Security device APIs

Job description

Role Summary

The L3 Security Infrastructure Management Specialist is a subject matter expert responsible for the advanced design, optimization, and complex troubleshooting of critical network security infrastructure within the telecom environment.

Key Responsibilities

• Lead the design and implementation of complex network security solutions (e.g., high-availability firewalls, advanced IPS deployments, DDoS mitigation systems).
• Perform advanced troubleshooting and root cause analysis for critical security infrastructure issues.
• Develop and implement security hardening standards and best practices for network devices.
• Evaluate new security technologies and recommend solutions for infrastructure enhancement.
• Provide expert guidance and mentorship to L1/L2 specialists.
• Collaborate with security architects and engineering teams on strategic initiatives.

Essential Qualifications

• Relevant Experience: 6-9 years in network security engineering or architecture, with significant experience in designing, implementing, and optimizing large-scale security infrastructure.

Certifications (Optional/Good to Have)

• CISSP, CCNP Security, Fortinet NSE 7/8, Palo Alto PCNSE, Juniper JNCIE-SEC.

Typical Skills

• Expertise in designing, deploying, and managing enterprise-grade firewalls, IPS/IDS, and DDoS mitigation solutions.
• Deep understanding of network routing (BGP, OSPF, MPLS) and switching in a large-scale telecom environment.
• Proficiency in scripting/automation (e.g., Python, Ansible) for infrastructure as code and operational efficiency.
• Experience with security device APIs and orchestration.
• Strong knowledge of security best practices, hardening techniques, and compliance requirements.

Communication Skills

Excellent written communication for architectural documentation, design specifications, and technical reports; strong verbal communication for leading technical discussions and presenting solutions.

Analytical Skills

Exceptional analytical and problem-solving skills to diagnose and resolve complex infrastructure challenges, optimize performance, and design resilient security systems.

Basic Telecom Network Knowledge

Expert-level understanding of telecom network architecture, including IGW operations, FW, IDS/IPS, VPN, International peering, transit IP traffic, and the intricate integration of security infrastructure.

Work Location

In person