Senior Network Security Engineer

Malomatia; Doha; Hybrid; QAR 180,000 - 300,000; Full time

Job summary

Malomatia seeks an experienced security engineer in Qatar to own end-to-end Cloudflare delivery including WAF rules, DNS, SSO apps, and Workers, with secondary knowledge of Palo Alto, Fortigate, and F5 platforms.

You will configure and tune WAFs, manage OPSWAT scanning, and ensure secure domain onboarding with robust policy enforcement. A Bachelor's in CS or Info Security is required, with 8+ years in app delivery and content security engineering.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.

Responsibilities

• Manage the Cloudflare environment across all onboarded domains, including DNS, WAF rules, rate limiting rules, custom hostnames, hostname lists, and IP lists.
• Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
• Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
• Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
• Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
• Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
• Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
• Provide administration and support for Palo Alto firewalls, including policy and rule management.
• Provide administration and support for Fortigate firewalls, including policy and rule management.
• Support F5 LTM/WAF administration: virtual servers, pools, health monitors, and WAF policy management.
• Support F5 GTM for global DNS-based load balancing, site failover, and health monitoring.
• Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
• Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
• Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.

Job description

Own end-to-end application delivery, WAF, and content/file threat protection with primary, hands-on expertise across Cloudflare and OPSWAT, and secondary working knowledge of Palo Alto, Fortigate, and F5 (LTM/WAF and GTM). Responsible for Cloudflare domain onboarding and lifecycle, WAF rule and rate-limiting configuration, SSO application setup, custom hostnames, Workers development, hostname/IP list management, and OPSWAT-based file scanning — while providing secondary-level support for traditional firewall and F5 load-balancing/WAF platforms.

Responsibilities

• Manage the Cloudflare environment across all onboarded domains, including DNS, WAF rules , rate limiting rules, custom hostnames, hostname lists, and IP lists.
• Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
• Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
• Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
• Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
• Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
• Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
• Provide administration and support for Palo Alto firewalls, including policy and rule management.
• Provide administration and support for Fortigate firewalls, including policy and rule management.
• Support F5 LTM/WAF administration : virtual servers, pools, health monitors, and WAF policy management.
• Support F5 GTM for global DNS-based load balancing, site failover, and health monitoring.
• Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
• Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
• Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 8+ years' experience in application delivery, WAF, and content security engineering.
• Primary, hands-on expertise with Cloudflare (Domains, WAF Rules, Rate Limiting Rules, SSO Applications, Custom Hostnames, Workers, Hostname Lists, IP Lists) and OPSWAT file scanning platforms.
• Secondary working knowledge of Palo Alto and Fortigate firewalls, and F5 LTM/WAF and GTM platforms.
• Strong understanding of DNS, SSL/TLS, Layer 4–7 traffic management, and file-based threat triage.
• Certifications preferred: Cloudflare Certified (Solutions Associate/Engineer), OPSWAT certification, Palo Alto PCNSA/PCNSE, Fortinet NSE, F5 Certified BIG-IP Administrator.

Technical Skills Matrix

Primary Expertise — Cloudflare

• Domains — onboarding, DNS management, and domain lifecycle across the Cloudflare account.
  • WAF Rules — minimum of 3 WAF rules configured and maintained per domain.
  • Rate Limiting Rules — configuring and tuning rate limiting policies to mitigate abuse and DDoS-style traffic.
  • SSO Applications — configuring SSO/Access applications for secure authentication.
  • Custom Hostnames — managing custom hostname (SaaS) configurations.
  • Workers — developing and deploying edge Workers for custom logic and security automation.
  • Hostname Lists — creating and maintaining hostname lists for policy application.
  • IP Lists — creating and maintaining IP lists for allow/block/rate-limit policies.

About Us

About Malomatia

malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.

Our vision

To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future.

About the Team

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Join us in shaping the future of technology in Qatar