Network Security Engineer (L3)

NorthBay Solutions LLC; Karachi Division; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

NorthBay Solutions LLC seeks an experienced L3 Network Security Engineer to support enterprise firewall environments for a UAE-based client. The role demands hands-on expertise in security architecture, incident resolution, and operational support across multi-site networks.

The candidate will design secure network architectures and troubleshoot complex VPN, firewall, and authentication issues while coordinating with UAE-based teams and clients during security projects and migrations.

Qualifications

• 5+ years of professional experience in Network Security or Cybersecurity.
• Hands-on L3-level network security support and troubleshooting.
• Proven experience with enterprise firewall technologies and security infrastructure.
• Experience with security architecture, network design (HLD/LLD) and high-availability.
• Strong understanding of TCP/IP, routing, switching, VPN, DNS and segmentation.
• Experience handling complex security incidents and escalations.
• Experience in enterprise, banking, telecom, government, ISP, or MSS environments is preferred.
• Certifications in Palo Alto, Fortinet, Check Point, Cisco CCNP Security or ITIL Foundation are a plus.

Responsibilities

• Provide L3 technical support for complex network security incidents and escalations.
• Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms.
• Work with Palo Alto, FortiGate, Check Point and other enterprise firewall technologies.
• Manage and troubleshoot F5 BIG-IP and WAF-related environments.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions (Zscaler/Forcepoint or equal).
• Support MFA, VPN token solutions, and Cisco ISE/NAC, including remote access security.
• Design and review secure network architectures (HLD/LLD), HA, segmentation and controls.
• Perform firewall policy reviews, migrations, and security hardening.
• Coordinate with internal teams and client stakeholders for incident resolution.

Skills

Palo Alto

FortiGate

Check Point

F5 BIG-IP

IPS/IDS

MFA & VPN

Cisco ISE / NAC

HLD/LLD

VPN Solutions

WAF

EDR / DLP

SIEM

ITSM Tools

Tools

Palo Alto

FortiGate

Check Point

Zscaler/Forcepoint

F5 BIG-IP

IPS/IDS

Cisco ISE/NAC

WAF

EDR (Trellix/McAfee)

DLP

Job description

Network Security Engineer

Location: Lahore / Karachi / Islamabad, Pakistan
Work Mode: Hybrid
Client: UAE-based Client
Experience: 5+ Years
Employment Type: Full-Time

About the Role

We are looking for an experienced L3 Network Security Engineer to support and manage enterprise network security environments for a UAE-based client. The role requires strong hands‑on expertise in network security technologies, advanced troubleshooting, security architecture, incident resolution, and operational support.

The successful candidate will work on complex L3 security incidents, security infrastructure administration, network security design, troubleshooting, optimization, and implementation of security solutions across enterprise environments.

Key Responsibilities

• Provide L3 technical support for complex network security incidents, escalations, and service requests.
• Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms.
• Work with Palo Alto, FortiGate, Check Point, and other enterprise firewall technologies.
• Manage and troubleshoot F5 security and application delivery environments, including WAF-related technologies.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions, including Zscaler/Forcepoint or equivalent technologies.
• Support MFA, VPN token solutions, Cisco ISE/NAC, and remote access security environments.
• Design and review secure network architectures, including HLD/LLD, high availability, redundancy, segmentation, and security controls.
• Perform firewall policy reviews, rule implementation, configuration changes, migrations, and security hardening.
• Troubleshoot complex VPN, firewall, authentication, network security, and connectivity issues.
• Support WAF and application security requirements.
• Work with endpoint security technologies including EDR, DLP, Trellix/McAfee or equivalent solutions.
• Support vulnerability assessment, security posture improvement, and remediation activities.
• Work with ITSM processes for incident, problem, change, and service request management.
• Maintain technical documentation, configuration records, troubleshooting procedures, and knowledge base articles.
• Coordinate with internal teams, vendors, and client stakeholders for incident resolution and security infrastructure changes.
• Participate in security projects, technology upgrades, migrations, and implementation activities.
• Ensure security operations and changes follow established ITIL, security, compliance, and change-management processes.
• Provide technical guidance to L1/L2 teams and support knowledge transfer where required.

Required Technical Skills

Primary Skills

• Enterprise Firewalls: Palo Alto, FortiGate, Check Point
• Proxy/Secure Web Gateway: Zscaler, Forcepoint, or equivalent
• F5 BIG-IP
• IPS/IDS and DDoS
• MFA and VPN Token Solutions
• Cisco ISE / NAC
• Network Security Architecture and HLD/LLD
• VPN: IPSec, SSL VPN, Site-to-Site and Remote Access VPN

Secondary Skills

• WAF
• IBM Guardium or equivalent database security technology
• Endpoint Security: Trellix/McAfee, EDR, DLP
• SIEM/Security Monitoring platforms
• Vulnerability Assessment tools
• ITSM platforms such as BMC Helix, ServiceNow, or equivalent

Required Experience & Qualifications

• 5+ years of professional experience in Network Security, Cybersecurity, or Security Operations.
• Strong hands‑on experience in L3-level network security support and troubleshooting.
• Proven experience working with enterprise firewall technologies and security infrastructure.
• Experience with security architecture, network design, HLD/LLD, and high-availability environments.
• Strong understanding of TCP/IP, routing, switching, VPN, DNS, network segmentation, and security principles.
• Experience handling complex security incidents and escalations.
• Experience working in enterprise, banking, telecom, government, ISP, or managed security environments is preferred.
• Strong communication and stakeholder-management skills.
• Ability to work with UAE-based client teams and support requirements aligned with UAE business hours when required.

Preferred Certifications

Relevant certifications such as:

• Palo Alto PCNSE
• Fortinet NSE / FCP
• Check Point certifications
• Cisco CCNP Security
• ITIL Foundation
• Relevant cybersecurity or network security certifications

Key Competencies

• Advanced troubleshooting and analytical skills
• Network security architecture and design
• Incident and problem resolution
• Security operations and infrastructure management
• Change and configuration management
• Documentation and technical reporting
• Client communication and stakeholder management
• Ability to work independently at L3 level
• Strong ownership of critical security incidents and escalations