Network Security Engineer | Cygnus IT | Riyadh, KSA

Cygnus IT; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Benefits offered by this job

On-site in Riyadh

Job summary

Cygnus IT is seeking an experienced Network Security Engineer in Riyadh, KSA. The role covers firewall administration, network segmentation, and OT security across enterprise environments, with emphasis on Fortinet FortiGate and Cisco platforms.

You will manage PROFINET/Modbus/OPC/IEC 61850 protocols, implement Purdue-based segmentation, and ensure secure, resilient 24/7 operations while delivering thorough RCA and risk assessments.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or related discipline.
• 5–8 years of enterprise network security experience.
• Strong knowledge of Layer 2/3 networking, VLANs, routing, trunking, multicast, and QoS.
• Hands-on Fortinet FortiGate firewall configuration and Cisco security platform experience.
• Understanding of OT network segmentation and Purdue model architecture.
• Experience troubleshooting OT protocols (PROFINET, Modbus TCP/IP, OPC, DNP3, IEC 61850).
• Familiarity with redundancy protocols (STP, RSTP, HSR, PRP, VRRP, HSRP).
• Excellent RCA, risk assessment, and documentation in 24/7 environments.

Responsibilities

• Design, configure, review, and document firewall rules, ACLs, NAT policies, VPN tunnels, and HA configurations.
• Administer Cisco switches and Fortinet/FortiGate firewalls in an enterprise setting.
• Implement Layer 2/3 configs including VLANs, routing, trunking, multicast, and QoS.
• Manage industrial network segmentation and Purdue model zones/conduits.
• Troubleshoot PROFINET, Modbus TCP/IP, OPC, DNP3, IEC 61850 protocols.
• Deploy industrial network redundancy and high-availability methods.
• Conduct RCA, risk assessments, and security audits in 24/7 production environments.
• Collaborate with IT/OT teams for change management and secure handovers.

Skills

Layer 2/3 networking

Firewall configuration

Industrial networking

OT security concepts

RCA & risk assessment

Documentation skills

VPN and tunneling

Education

Bachelor's degree in CS/IT or related

Tools

Fortinet FortiGate

Cisco security platforms

Job description

Position Summary:

Cygnus IT is actively seeking an experienced, analytical, and highly technical Network Security Engineer with 5 to 8 years of professional experience to join our expanding team in Riyadh, KSA on a full-time permanent basis. In this critical infrastructure and security role, you will be responsible for designing, configuring, reviewing, and troubleshooting enterprise network security architectures, firewalls, and industrial automation networks. You will leverage your deep practical proficiency in Layer 2/3 routing and switching, Fortinet/FortiGate firewalls, Cisco security platforms, industrial networking protocols (PROFINET, Modbus, IEC 61850), and OT network segmentation to ensure uncompromised grid communication security. This opportunity requires an elite security professional with strong RCA and documentation capabilities in a 24/7 production environment.

Detailed Job Description:

As a Network Security Engineer based in Riyadh, KSA via Cygnus IT, you will take full operational and technical ownership of enterprise firewall administration, network segmentation, and industrial communication security. Your day-to-day responsibilities include configuring and reviewing firewall rules, ACLs, NAT, VPN tunnels, High Availability (HA) clusters, and controlled access changes across Cisco switches and Fortinet/FortiGate firewalls. You will design and troubleshoot OT network segmentation utilizing the Purdue model, manage industrial protocols (PROFINET, EtherNet/IP, Modbus TCP/IP, OPC, DNP3, IEC 61850), and implement network redundancy methods (STP, RSTP, MSTP, REP, MRP, HSR, PRP, VRRP, HSRP). Furthermore, you will conduct rigorous root cause analysis (RCA), risk assessments, and maintain meticulous documentation within 24/7 production environments.

Key Responsibilities:

• Design, configure, review, troubleshoot, and document firewall rules, ACLs, NAT policies, VPN tunnels, and HA configurations.
• Administer enterprise-grade networking and security equipment including Cisco switches and Fortinet/FortiGate firewalls.
• Implement robust Layer 2 and Layer 3 networking configurations including VLANs, routing, trunking, multicast, and QoS.
• Manage industrial network segmentation, Purdue model zones and conduits, remote access controls, and critical grid interfaces.
• Troubleshoot complex industrial protocols and communication paths including PROFINET, EtherNet/IP, Modbus TCP/IP, OPC, DNP3, and IEC 61850.
• Deploy and maintain industrial network redundancy and high-availability methods (STP, RSTP, MSTP, REP, MRP, HSR, PRP, VRRP, HSRP).
• Conduct rigorous root cause analysis (RCA), risk assessments, and security audits across 24/7 production environments.
• Collaborate closely with IT/OT operations teams to ensure seamless change management, system backups, and secure handovers.

Required Qualifications & Skills:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or a related discipline.
• Minimum of 5 to 8 years of professional hands-on experience in enterprise network security and infrastructure engineering.
• Expert-level practical knowledge of Layer 2 and Layer 3 networking, VLANs, routing, trunking, multicast, and QoS.
• Extensive hands-on experience configuring and managing Fortinet/FortiGate firewalls and Cisco security platforms.
• Strong understanding of OT network segmentation, Purdue model architecture, zones, conduits, and critical grid communication.
• Proven experience troubleshooting industrial communication protocols (PROFINET, Modbus TCP/IP, OPC, DNP3, IEC 61850).
• Solid familiarity with industrial redundancy protocols (STP, RSTP, HSR, PRP, VRRP, HSRP) and fiber optic connectivity.
• Exceptional technical documentation, RCA, risk assessment, and communication skills for 24/7 production environments.

Nice-to-Have Skills:

• Professional security certifications such as CISSP, CISM, Fortinet NSE 4/7, or Cisco CCNP Security.
• Prior professional experience within industrial automation, SCADA security, oil & gas, or power utility sectors.
• Specialized knowledge of Belden/Hirschmann, Rockwell, and Siemens industrial wireless platforms.
• Strong background in scripting and automation (Python/Bash) for security log parsing and configuration backups.
• Experience supporting 24/7 Security Operations Center (SOC) incident response workflows.

Application Information:

• Recruiter: Cygnus IT Recruitment Team
• Contact Name: Amreen Shaikh
• Email: [e-mail]
• Phone:
• Application URL:
• Salary/Rate: Market Competitive / Standard Enterprise Package
• Deadline: Open until filled
• Notice Period: Immediate to 30 Days
• Contract Duration: Permanent / Full-Time On-Site (Riyadh, KSA)

Recruitment Pro Tip:

When applying for this Network Security Engineer position via Cygnus IT, ensure your CV explicitly highlights your Fortinet/FortiGate firewall experience, OT network segmentation (Purdue model) expertise, and industrial protocol troubleshooting background.