Network Security Engineer L3

NorthBay Solutions LLC; Pakistan; Hybrid; PKR 1,800,000 - 3,800,000; Full time

Job summary

NorthBay Solutions LLC is seeking an experienced Network Security Engineer (L3) to support and manage enterprise security environments for a UAE-based client. Hybrid work arrangement in Pakistan with strong hands-on firewall and VPN expertise is required.

The role emphasizes security architecture, incident resolution, and operational support across Palo Alto, FortiGate, Check Point, and F5 platforms, with exposure to Zscaler/Forcepoint and ISE/NAC integrations.

Qualifications

• 5+ years of professional experience in Network Security/Cybersecurity/SOC.
• Hands-on L3 network security support and troubleshooting.
• Experience with enterprise firewall technologies and security infrastructure.
• Security architecture, network design (HLD/LLD), and high-availability environments.
• Strong TCP/IP, routing, switching, VPN, DNS, and network segmentation knowledge.
• Experience handling complex security incidents and escalations.
• Familiarity with UAE-based client requirements and working hours preferred.

Responsibilities

• Provide L3 technical support for complex network security incidents, escalations, and service requests.
• Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms.
• Work with Palo Alto, FortiGate, Check Point and other firewall technologies.
• Manage and troubleshoot F5 security and application delivery environments, including WAF-related technologies.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions (Zscaler/Forcepoint).
• Support MFA, VPN token solutions, Cisco ISE/NAC, and remote access security environments.
• Design and review secure network architectures with HLD/LLD, HA, redundancy, segmentation, and controls.
• Perform firewall policy reviews, migrations, and security hardening.
• Troubleshoot VPN, firewall, authentication, and connectivity issues.
• Support WAF and application security requirements.
• Coordinate with IT teams and vendors on incidents and security changes.

Skills

L3 Network Security

Firewall troubleshooting

Security architecture

VPN & MFA

Incident response

Stakeholder management

Time-zone awareness UAE

Tools

Palo Alto

FortiGate

Check Point

F5 BIG-IP

Zscaler

Forcepoint

Cisco ISE

EDR / Threat monitoring tools

Job description

Job Description:

Network Security Engineer

Location: Lahore / Karachi / Islamabad, Pakistan
Work Mode: Hybrid
Client: UAE-based Client
Experience: 5+ Years
Employment Type: Full-Time

About the Role

We are looking for an experienced L3 Network Security Engineer to support and manage enterprise network security environments for a UAE-based client. The role requires strong hands-on expertise in network security technologies, advanced troubleshooting, security architecture, incident resolution, and operational support.

The successful candidate will work on complex L3 security incidents, security infrastructure administration, network security design, troubleshooting, optimization, and implementation of security solutions across enterprise environments.

Key Responsibilities

• Provide L3 technical support for complex network security incidents, escalations, and service requests.
• Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms.
• Work with Palo Alto, FortiGate, Check Point, and other enterprise firewall technologies.
• Manage and troubleshoot F5 security and application delivery environments, including WAF-related technologies.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions, including Zscaler/Forcepoint or equivalent technologies.
• Support MFA, VPN token solutions, Cisco ISE/NAC, and remote access security environments.
• Design and review secure network architectures, including HLD/LLD, high availability, redundancy, segmentation, and security controls.
• Perform firewall policy reviews, rule implementation, configuration changes, migrations, and security hardening.
• Troubleshoot complex VPN, firewall, authentication, network security, and connectivity issues.
• Support WAF and application security requirements.
• Work with endpoint security technologies including EDR, DLP, Trellix/McAfee or equivalent solutions.
• Support vulnerability assessment, security posture improvement, and remediation activities.
• Work with ITSM processes for incident, problem, change, and service request management.
• Maintain technical documentation, configuration records, troubleshooting procedures, and knowledge base articles.
• Coordinate with internal teams, vendors, and client stakeholders for incident resolution and security infrastructure changes.
• Participate in security projects, technology upgrades, migrations, and implementation activities.
• Ensure security operations and changes follow established ITIL, security, compliance, and change-management processes.
• Provide technical guidance to L1/L2 teams and support knowledge transfer where required.

Required Technical Skills

Primary Skills

• Enterprise Firewalls: Palo Alto, FortiGate, Check Point
• Proxy/Secure Web Gateway: Zscaler, Forcepoint, or equivalent
• F5 BIG-IP
• IPS/IDS and DDoS
• MFA and VPN Token Solutions
• Cisco ISE / NAC
• Network Security Architecture and HLD/LLD
• VPN: IPSec, SSL VPN, Site-to-Site and Remote Access VPN

Secondary Skills

• WAF
• IBM Guardium or equivalent database security technology
• Endpoint Security: Trellix/McAfee, EDR, DLP
• SIEM/Security Monitoring platforms
• Vulnerability Assessment tools
• ITSM platforms such as BMC Helix, ServiceNow, or equivalent

Required Experience & Qualifications

• 5+ years of professional experience in Network Security, Cybersecurity, or Security Operations.
• Strong hands-on experience in L3-level network security support and troubleshooting.
• Proven experience working with enterprise firewall technologies and security infrastructure.
• Experience with security architecture, network design, HLD/LLD, and high-availability environments.
• Strong understanding of TCP/IP, routing, switching, VPN, DNS, network segmentation, and security principles.
• Experience handling complex security incidents and escalations.
• Experience working in enterprise, banking, telecom, government, ISP, or managed security environments is preferred.
• Strong communication and stakeholder-management skills.
• Ability to work with UAE-based client teams and support requirements aligned with UAE business hours when required.

Preferred Certifications

Relevant certifications such as:

• Palo Alto PCNSE
• Fortinet NSE / FCP
• Check Point certifications
• Cisco CCNP Security
• ITIL Foundation
• Relevant cybersecurity or network security certifications

Key Competencies

• Advanced troubleshooting and analytical skills
• Network security architecture and design
• Incident and problem resolution
• Security operations and infrastructure management
• Change and configuration management
• Documentation and technical reporting
• Client communication and stakeholder management
• Ability to work independently at L3 level
• Strong ownership of critical security incidents and escalations

Requirements: