Network_Security_Techinical_Lead

Malomatia; Doha; On-site; QAR 150,000 - 190,000; Full time

Benefits offered by this job

On-call rotation

Travel to datacenter/client sites

Job summary

Malomatia seeks a senior network security architect to own end-to-end architecture across cloud (Azure, GCP, OCI) and on-prem environments. You will design, deploy, and manage highly available networks with strong security controls and audit readiness, while leading deployment and operations around the clock.

The role requires hands-on ownership, 10+ years of experience, and the ability to coordinate across cloud and security teams.

Qualifications

• 10–12 years of cloud infrastructure, network operations, and cybersecurity engineering experience.
• Experience across two or more cloud providers (Azure, GCP, OCI) is highly preferred.
• Proven ability to design, deploy, and operate secure, highly available networks with audit readiness.

Responsibilities

• Design secure reference architectures for hub-spoke topologies across cloud and on-prem networks.
• Architect secure connectivity patterns (VPN, peering, interconnects) and lead reviews.
• Lead deployment and configuration of network security environments (NVAs, next-gen firewalls, NSGs).
• Plan for 24/7 availability with redundancy, failover, and DR across multi-cloud environments.
• Own change management, patching, vulnerability tracking, and incident response.
• Mentor engineers and provide technical escalation for complex issues.

Skills

Cloud Networking

Security Engineering

Leadership

Distributed Systems

Network Architecture

Vendor Certifications

Tools

Azure

GCP

OCI

On-Prem Networking

Job description

Job De ion

Own the end-to-end architecture, design, deployment, and 24/7 operational management of secure network and security infrastructure across cloud (Azure, GCP, OCI) and on-premises environments — spanning routing, switching, and cybersecurity engineering. Act as the technical authority responsible for designing highly available, resilient architectures; leading deployment and configuration of new environments; and operating the infrastructure around the clock to ensure it remains stable, secure, and audit-ready. Skilled in preparing operational reports and presentations, running operational meetings, handling escalations, and managing major changes — while retaining hands-on accountability for daily operations.

Responsibilities

• Design secure reference architectures for hub-spoke topologies, VNet/VPC/VCN environments, subnetting, IP/CIDR planning, and static/BGP dynamic routing across Azure, GCP, and OCI, as well as on-prem routing and switching infrastructure.
• Architect secure connectivity patterns — VPN, peering, and dedicated interconnects (ExpressRoute, Interconnect, FastConnect) — and lead network security design reviews with actionable, best-practice recommendations.
• Lead deployment and configuration of network security environments: Site-to-Site VPNs with redundant tunnels and BGP routing, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next-gen firewalls, and Internet/NAT/Service Gateways for new builds and migrations.
• Design, deploy, and operate infrastructure to meet 24/7 availability targets, including redundancy, failover, load balancing, and disaster recovery across hybrid and multi-cloud environments.
• Own round-the-clock operational management of the network and security environment: change management, patching/upgrades of NVAs, vulnerability tracking and remediation, and coordination of patch windows and incident response.
• Manage and oversee day-to-day network and security operations across routing, switching, and cybersecurity engineering, keeping leadership informed of status, risks, and escalations.
• Configure and maintain monitoring, logging, and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs) to proactively detect and resolve availability, performance, and security issues.
• Harden network device and cloud configurations against industry benchmarks (e.g., CIS, NIST) and internal security baselines; remediate findings from internal/external audits.
• Prepare and present operational reports, dashboards, and presentations summarizing network/security performance, availability, incidents, and risk posture to leadership and stakeholders.
• Plan and run operational meetings — daily/weekly stand-ups, service reviews, and incident review sessions — driving action items to closure.
• Act as the senior escalation point for critical operational and security issues across all managed platforms, ensuring timely resolution and clear communication.
• Own and handle major changes end-to-end — planning, risk assessment, change advisory board (CAB) submissions, implementation, and post-change validation — with minimal impact to 24/7 availability.
• Design, deploy, and validate backup and restore procedures for NVAs, firewall policies, and network configuration state; own disaster recovery and cross-region DR networking design.
• Coordinate cross-functional activities with cloud, security, application, and operations teams to ensure consistent security posture and always-on availability across the environment.
• Maintain accurate architecture documentation, network diagrams, runbooks, and operational procedures; ensure changes follow proper governance, risk, and change-control processes.
• Mentor engineers and act as a point of technical escalation for complex operational or security issues.

Qualifications

• 10–12 years of experience in cloud infrastructure, network operations, and cybersecurity engineering, including hands-on ownership of designing, deploying, and operating secure network infrastructure.
• Demonstrable depth across at least two of Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure (all three strongly preferred).
• Proven experience designing and operating infrastructure to meet 24/7 availability, redundancy, and disaster recovery requirements.
• Demonstrated experience overseeing or coordinating multi-disciplinary operations (network + security) and reporting outcomes to leadership.
• Strong skills in preparing operational reports, dashboards, and presentations for leadership and stakeholder audiences.
• Proven track record running operational meetings and driving structured escalation handling to resolution.
• Hands-on experience managing major changes, including change planning, risk assessment, CAB processes, and post-implementation review.
• Hands-on expertise with enterprise routers, switches, firewalls, NVAs, and cloud-native network security monitoring tools.
• Experience hardening network and cloud infrastructure against security frameworks and remediating audit findings.
• Strong troubleshooting and incident-response experience across routing, switching, cloud networking, and security domains.
• Excellent coordination and communication skills, with the ability to work closely with leadership and cross-functional stakeholders.
• Willing and able to participate in an on-call rotation and travel to datacenter/client sites as needed to maintain 24/7 availability.

Required Certifications

• Cisco CCNP (Enterprise / Security) or equivalent vendor-neutral routing & switching certification.
• Microsoft Certified: Azure Network Security Engineer Associate (or Azure Solutions Architect Expert).
• Google Professional Cloud Network Engineer / Cloud Security Engineer.
• Oracle Cloud Infrastructure (OCI) Network Security Professional or Architect Professional.
• CISSP (Certified Information Systems Security Professional) or working toward certification.
• Firewall/NGFW vendor certification (e.g., Palo Alto PCNSA/PCNSE, Fortinet NSE, or Check Point CCSA/CCSE).

Preferred: CCIE, CISM, CEH. At least two of Azure, GCP, and OCI required; all three strongly preferred. Certifications must be current; equivalent recognized credentials considered subject to approval.

About Malomatia

ABOUT US

malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar's businesses and governments to leap into the digital future with agile, knowledge-driven solutions.

Our vision

To become Qatar's trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar's digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation's vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar's sustainable future.

About The Team

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Join us in shaping the future of technology in Qatar