Network Security Lead - Cloud Infrastructure

Malomatia; Doha; On-site; QAR 540,000 - 720,000; Full time

Job summary

Malomatia is seeking a Network Security Lead to own end-to-end architecture, design, deployment, and 24/7 management of secure network infrastructure across Azure, GCP, OCI and on-prem environments. You will drive reference architectures, security reviews, and resilient configurations for multi-cloud deployments.

The role requires extensive hands-on experience with routing, switching, NVAs, firewalls, and cloud security monitoring, plus strong leadership and incident management skills to keep

Qualifications

• 10–12 years of experience in cloud infrastructure and security engineering.
• Experience in multi-cloud design across Azure, GCP, OCI and on-premise networks.
• Proven ability to lead complex network security projects end-to-end.

Responsibilities

• Design reference architectures for hub-spoke topologies and VNet/VPC environments.
• Lead deployment of secure connectivity patterns and security reviews.
• Manage 24/7 operations, incident response, and change management.
• Oversee monitoring, logging, and diagnostics across clouds and on-prem.
• Present dashboards and risk posture to leadership and stakeholders.

Skills

Cloud networking

Network operations

Cybersecurity engineering

Architectural design

Operational governance

On-call readiness

Leadership / mentoring

Education

Cisco CCNP

Azure Network Security Engineer

OCI Network Security Professional

CISSP

Tools

Azure Monitor

GCP Cloud Monitoring

OCI Monitoring

Job description

Network Security Lead - Cloud Infrastructure

Own the end-to-end architecture, design, deployment, and 24/7 operational management of secure network and security infrastructure across cloud (Azure, GCP, OCI) and on-premises environments — spanning routing, switching, and cybersecurity engineering. Act as the technical authority responsible for designing highly available, resilient architectures; leading deployment and configuration of new environments; and operating the infrastructure around the clock to ensure it remains stable, secure, and audit-ready. Skilled in preparing operational reports and presentations, running operational meetings, handling escalations, and managing major changes — while retaining hands-on accountability for daily operations.

Key Responsibilities

• Design secure reference architectures for hub-spoke topologies, VNet/VPC/VCN environments, subnetting, IP/CIDR planning, and static/BGP dynamic routing across Azure, GCP, and OCI, as well as on-prem routing and switching infrastructure.


• Architect secure connectivity patterns — VPN, peering, and dedicated interconnects (ExpressRoute, Interconnect, FastConnect) — and lead network security design reviews with actionable, best-practice recommendations.


• Lead deployment and configuration of network security environments: Site-to-Site VPNs with redundant tunnels and BGP routing, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next-gen firewalls, and Internet/NAT/Service Gateways for new builds and migrations.


• Design, deploy, and operate infrastructure to meet 24/7 availability targets, including redundancy, failover, load balancing, and disaster recovery across hybrid and multi-cloud environments.


• Own round-the-clock operational management of the network and security environment: change management, patching/upgrades of NVAs, vulnerability tracking and remediation, and coordination of patch windows and incident response.


• Manage and oversee day-to-day network and security operations across routing, switching, and cybersecurity engineering, keeping leadership informed of status, risks, and escalations.


• Configure and maintain monitoring, logging, and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs) to proactively detect and resolve availability, performance, and security issues.


• Harden network device and cloud configurations against industry benchmarks (e.g., CIS, NIST) and internal security baselines; remediate findings from internal/external audits.


• Prepare and present operational reports, dashboards, and presentations summarizing network/security performance, availability, incidents, and risk posture to leadership and stakeholders.


• Plan and run operational meetings — daily/weekly stand-ups, service reviews, and incident review sessions — driving action items to closure.


• Act as the senior escalation point for critical operational and security issues across all managed platforms, ensuring timely resolution and clear communication.


• Own and handle major changes end-to-end — planning, risk assessment, change advisory board (CAB) submissions, implementation, and post-change validation — with minimal impact to 24/7 availability.


• Design, deploy, and validate backup and restore procedures for NVAs, firewall policies, and network configuration state; own disaster recovery and cross-region DR networking design.


• Coordinate cross-functional activities with cloud, security, application, and operations teams to ensure consistent security posture and always-on availability across the environment.


• Maintain accurate architecture documentation, network diagrams, runbooks, and operational procedures; ensure changes follow proper governance, risk, and change-control processes.


• Mentor engineers and act as a point of technical escalation for complex operational or security issues.


• Participate in an on-call rotation and respond to critical incidents outside business hours to maintain 24/7 availability; travel to datacenter or client sites as needed.

Required Certifications

• Cisco CCNP (Enterprise / Security) or equivalent vendor-neutral routing & switching certification.


• Microsoft Certified: Azure Network Security Engineer Associate (or Azure Solutions Architect Expert).


• Oracle Cloud Infrastructure (OCI) Network Security Professional or Architect Professional.


• CISSP (Certified Information Systems Security Professional) or working toward certification.

Preferred: CCIE, CISM, CEH. At least two of Azure, GCP, and OCI required; all three strongly preferred. Certifications must be current; equivalent recognized credentials considered subject to approval.

Experience Required

• 10–12 years of experience in cloud infrastructure, network operations, and cybersecurity engineering, including hands-on ownership of designing, deploying, and operating secure network infrastructure.


• Demonstrable depth across at least two of Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure (all three strongly preferred).


• Proven experience designing and operating infrastructure to meet 24/7 availability, redundancy, and disaster recovery requirements.


• Demonstrated experience overseeing or coordinating multi-disciplinary operations (network + security) and reporting outcomes to leadership.


• Strong skills in preparing operational reports, dashboards, and presentations for leadership and stakeholder audiences.


• Proven track record running operational meetings and driving structured escalation handling to resolution.


• Hands-on experience managing major changes, including change planning, risk assessment, CAB processes, and post-implementation review.


• Hands-on expertise with enterprise routers, switches, firewalls, NVAs, and cloud-native network security monitoring tools.


• Experience hardening network and cloud infrastructure against security frameworks and remediating audit findings.


• Strong troubleshooting and incident-response experience across routing, switching, cloud networking, and security domains.


• Excellent coordination and communication skills, with the ability to work closely with leadership and cross-functional stakeholders.


• Willing and able to participate in an on-call rotation and travel to datacenter/client sites as needed to maintain 24/7 availability.