Senior Network Engineer - Saudi National - Riyadh, KSA

DS DeepSource; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

DS DeepSource is seeking a Senior Network Engineer to lead enterprise IP migration from public to private addressing across applications, databases, servers, and network devices in on‑prem, cloud, or hybrid environments. The role emphasizes secure, resilient, uninterrupted service delivery through careful planning, execution, validation, and documentation.

You will assess all assets, design private IP ranges, coordinate firewall, DNS, NAT changes, and perform post‑migration testing while

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field.
• Certifications such as CCNP/CCIE or equivalent preferred.
• Strong expertise in IP addressing, subnetting, and routing protocols.

Responsibilities

• Lead migration from public to private IP addressing across applications, databases, servers and network devices.
• Develop detailed IP migration plans with timelines and rollback procedures.
• Coordinate firewall, DNS, NAT, and routing changes with security and operations teams.
• Perform post-migration validation to ensure service availability and performance.
• Document migration steps, issues, root causes and fixes for audit trails.

Skills

Network design

IP addressing

Subnetting

Routing protocols

DNS/NAT/VPNs

High availability

Education

Bachelor’s degree in Computer Science/IT or related

CCNP/CCIE or equivalent certifications

Tools

Firewalls

Load balancers

DNS

NAT

VPNs

Job description

The Senior Network Engineer is responsible for leading and executing enterprise-wide migration initiatives from public to private IP addressing across applications, databases, servers, and network devices. This role ensures secure, resilient, and uninterrupted service delivery through careful planning, dependency analysis, execution, validation, and documentation of network changes in complex on-premises, cloud, or hybrid environments.

Key Responsibilities

• Conduct a comprehensive assessment of all servers, applications, databases, and network devices currently using public IP addresses.
• Develop a detailed IP migration plan covering timelines, phased execution, backup strategies, and service rollback procedures when required.
• Perform application and service dependency analysis to identify and mitigate the impact of IP address migration on interconnected systems.
• Design and allocate new private IP address ranges, ensuring full compatibility with the existing network architecture and infrastructure standards.
• Execute the migration from public to private IP addresses in a secure and controlled manner, while maintaining continuous operation of business‑critical applications and services.
• Coordinate with security, systems, application, and operations teams to align firewall rules, routing, NAT, DNS, and access controls with the new private addressing model.
• Perform post‑migration validation and testing to confirm service availability, performance, and network stability.
• Prepare and maintain comprehensive documentation for all migration phases, including implemented changes, encountered issues, root causes, and applied solutions.
• Assess and analyze all DNS records to identify unused, obsolete, or outdated entries.
• Classify DNS records based on criticality, activity level, and operational validity.
• Remove or update invalid, obsolete, or unnecessary DNS entries in accordance with approved change procedures.
• Ensure that DNS cleanup activities do not impact applications, services, or end users.
• Establish periodic review procedures to maintain the accuracy and health of DNS records on an ongoing basis.
• Document all DNS review, cleanup activities, and applied changes for audit, compliance, and operational reference.
• Strong expertise in enterprise network design, IP addressing (IPv4/IPv6), subnetting, and routing protocols.
• Hands‑on experience with IP address migration projects in large‑scale environments (on‑prem, cloud, or hybrid).
• Solid knowledge of firewalls, load balancers, DNS, NAT, VPNs, and network security controls.
• Experience working with high‑availability and mission‑critical environments, ensuring zero or minimal downtime.
• Ability to analyze complex application‑to‑network dependencies.
• Familiarity with change management, rollback planning, and disaster recovery practices.
• Bachelor’s degree in Computer Science, Information Technology, or a related field
• Relevant certifications such as CCNP/CCIE, JNCIP/JNCIE, Infoblox Technical Certifications or equivalent are highly prefer.