Network Security Engineer (L3)

NorthBay Solutions LLC; Lahore; Hybrid; PKR 1,800,000 - 2,400,000; Full time

Job summary

NorthBay Solutions LLC is seeking an experienced L3 Network Security Engineer to support enterprise security environments for a UAE-based client. The role emphasizes hands-on troubleshooting, security architecture, and incident resolution across diverse firewall platforms and security tooling.

You will work on complex security incidents, design secure networks, and participate in migrations and project work while aligning with UAE business hours when required.

Qualifications

• 5+ years of professional experience in Network Security, Cybersecurity, or Security Operations.

Responsibilities

• Provide L3 technical support for complex network security incidents, escalations, and service requests.
• Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms.
• Work with Palo Alto, FortiGate, Check Point, and other enterprise firewall technologies.
• Manage and troubleshoot F5 BIG-IP and related security infrastructure.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions (Zscaler/Forcepoint).
• Support MFA, VPN token solutions, Cisco ISE/NAC, and remote access security environments.
• Design and review secure network architectures including HLD/LLD, HA, segmentation, and controls.
• Perform firewall policy reviews, rule implementations, migrations, and hardening.
• Troubleshoot VPN, firewall, authentication, and connectivity issues.
• Support WAF and application security requirements.
• Work with EDR and DLP technologies for endpoint security.
• Assist vulnerability assessments and security posture improvements.
• Coordinate with ITSM processes for incidents and changes.
• Maintain documentation and knowledge base.

Skills

Palo Alto

FortiGate

Check Point

Zscaler

Forcepoint

F5 BIG-IP

IPS/IDS

DDoS

MFA

VPN Token Solutions

Cisco ISE / NAC

HLD/LLD

VPN: IPSec/SSL VPN

Tools

WAF

IBM Guardium

Trellix/McAfee

EDR

DLP

SIEM

Vulnerability Assessment

BMC Helix

ServiceNow

Job description

Network Security Engineer

Location: Lahore / Karachi / Islamabad, Pakistan
Work Mode: Hybrid
Client: UAE-based Client
Experience: 5+ Years
Employment Type: Full-Time

About the Role

We are looking for an experienced L3 Network Security Engineer to support and manage enterprise network security environments for a UAE-based client. The role requires strong hands‑on expertise in network security technologies, advanced troubleshooting, security architecture, incident resolution, and operational support.

The successful candidate will work on complex L3 security incidents, security infrastructure administration, network security design, troubleshooting, optimization, and implementation of security solutions across enterprise environments.

Key Responsibilities

• Provide L3 technical support for complex network security incidents, escalations, and service requests.
• Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms.
• Work with Palo Alto, FortiGate, Check Point, and other enterprise firewall technologies.
• Manage and troubleshoot F5 security and application delivery environments, including WAF-related technologies.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions, including Zscaler/Forcepoint or equivalent technologies.
• Support MFA, VPN token solutions, Cisco ISE/NAC, and remote access security environments.
• Design and review secure network architectures, including HLD/LLD, high availability, redundancy, segmentation, and security controls.
• Perform firewall policy reviews, rule implementation, configuration changes, migrations, and security hardening.
• Troubleshoot complex VPN, firewall, authentication, network security, and connectivity issues.
• Support WAF and application security requirements.
• Work with endpoint security technologies including EDR, DLP, Trellix/McAfee or equivalent solutions.
• Support vulnerability assessment, security posture improvement, and remediation activities.
• Work with ITSM processes for incident, problem, change, and service request management.
• Maintain technical documentation, configuration records, troubleshooting procedures, and knowledge base articles.
• Coordinate with internal teams, vendors, and client stakeholders for incident resolution and security infrastructure changes.
• Participate in security projects, technology upgrades, migrations, and implementation activities.
• Ensure security operations and changes follow established ITIL, security, compliance, and change-management processes.
• Provide technical guidance to L1/L2 teams and support knowledge transfer where required.

Required Technical Skills

Primary Skills

• Enterprise Firewalls: Palo Alto, FortiGate, Check Point
• Proxy/Secure Web Gateway: Zscaler, Forcepoint, or equivalent
• F5 BIG-IP
• IPS/IDS and DDoS
• MFA and VPN Token Solutions
• Cisco ISE / NAC
• Network Security Architecture and HLD/LLD
• VPN: IPSec, SSL VPN, Site-to-Site and Remote Access VPN

Secondary Skills

• WAF
• IBM Guardium or equivalent database security technology
• Endpoint Security: Trellix/McAfee, EDR, DLP
• SIEM/Security Monitoring platforms
• Vulnerability Assessment tools
• ITSM platforms such as BMC Helix, ServiceNow, or equivalent

Required Experience & Qualifications

• 5+ years of professional experience in Network Security, Cybersecurity, or Security Operations.
• Strong hands‑on experience in L3-level network security support and troubleshooting.
• Proven experience working with enterprise firewall technologies and security infrastructure.
• Experience with security architecture, network design, HLD/LLD, and high-availability environments.
• Strong understanding of TCP/IP, routing, switching, VPN, DNS, network segmentation, and security principles.
• Experience handling complex security incidents and escalations.
• Experience working in enterprise, banking, telecom, government, ISP, or managed security environments is preferred.
• Strong communication and stakeholder-management skills.
• Ability to work with UAE-based client teams and support requirements aligned with UAE business hours when required.

Preferred Certifications

Relevant certifications such as:

• Palo Alto PCNSE
• Fortinet NSE / FCP
• Check Point certifications
• Cisco CCNP Security
• ITIL Foundation
• Relevant cybersecurity or network security certifications

Key Competencies

• Advanced troubleshooting and analytical skills
• Network security architecture and design
• Incident and problem resolution
• Security operations and infrastructure management
• Change and configuration management
• Documentation and technical reporting
• Client communication and stakeholder management
• Ability to work independently at L3 level
• Strong ownership of critical security incidents and escalations