Senior IT Engineer - Network and Security

Confidential Company; Muscat; Vor Ort; OMR 90.000 - 150.000; Vollzeit

Zusammenfassung

Confidential Company in Muscat, Oman seeks a Senior Network Security Engineer to design, implement and maintain Fortinet-based security across HQ and regional sites. You will lead firewall deployments, VPNs, ZTNA and security policy enforcement.

Responsibilities include vulnerability management, incident response, and ensuring compliance with ISO 27001 standards while mentoring junior staff.

Qualifikationen

• 10+ years in IT networking and security, with at least 5 years hands-on work managing FortiGate firewalls across multi-site environments.
• Experience in government or large enterprise settings is preferred.
• Strong knowledge of Fortinet products and security administration.

Aufgaben

• Configure, manage and maintain FortiGate firewalls across HQ and branch sites.
• Design, deploy and support site-to-site VPN, SSL VPN and remote access solutions.
• Implement ZTNA and secure user and device access policies.

Kenntnisse

Fortinet security expertise

VPN & ZTNA

Incident response

Governance & compliance

Ausbildung

Fortinet NSE 4

Fortinet NSE 6

Fortinet NSE 7

CCNP Security

CompTIA Security+

CISSP

Tools

FortiGate

FortiManager

FortiAnalyzer

FortiAP

SSL VPN

Site-to-site VPN

WPA2/WPA3

802.1X

Jobbeschreibung

Firewall Management

Configure manage and maintain FortiGate firewalls across the Ministry HQ and branch sites including security policies NAT traffic inspection and UTM features

Secure Remote Access

Design deploy and support site-to-site VPN SSL VPN and remote access and implement ZTNA Zero Trust Network Access to secure user and device access

Wireless Network Administration

Manage Fortinet access points through FortiGate wireless controllers including SSID setup WPA2 WPA3 encryption and authentication methods such as 802 1X PSK and captive portal

Centralized Policy and Configuration Management

Use FortiManager to manage devices push configurations and keep security policies consistent across all sites

Logging Monitoring and Reporting

Use FortiAnalyzer to collect and analyze logs track network performance and alerts and produce regular security and compliance reports

Automation and AI-Assisted Operations

Apply Fortinet s AI-assisted management tools to support policy orchestration configuration compliance checks and automated workflows that cut manual effort and errors

Security Posture and Vulnerability Management

Run security reviews to find misconfigurations outdated rules and vulnerabilities then recommend and carry out improvements to strengthen the network

Best Practices and Compliance

Make sure all deployments follow Fortinet best practices and the organization s security policies and standards including audit and regulatory requirements

Incident Response and Troubleshooting

Act as the escalation point for network and security incidents diagnose root causes restore services quickly and meet the SLAs set for the FMS contract

Documentation Training and Customer Support

Maintain network diagrams configuration records and SOPs train internal teams and customer staff and work as a customer advocate to understand and address their security needs

Experience:

10+ years in IT networking and security, with at least 5 years of hands‑on work managing FortiGate firewalls across multi‑site (HQ and branch) environments, ideally in a government or large enterprise setting.

Fortinet Technical Expertise:

Strong working knowledge of FortiGate, FortiManager, and FortiAnalyzer, plus Fortinet wireless (FortiAP). Proven skills in site‑to‑site VPN, SSL VPN, ZTNA, WPA2/WPA3, and 802.1X authentication.

Certifications:

Fortinet NSE 4 (mandatory in practice), with NSE 6 or NSE 7 preferred. Other certifications such as CCNP Security, CompTIA Security+, or CISSP are an added advantage.

Security and Compliance Mindset:

Experience in vulnerability assessment, security audits, and policy compliance, with the ability to spot misconfigurations and recommend improvements. Exposure to ISO 27001 environments is a plus.