Network Security Engineer

Responsibilities

• Act as the final escalation point for complex incidents involving firewalls, VPN, proxy, IPS, and DDoS protection
• Design, implement, and tune policies on Palo Alto, Cisco ASA/FTD, and Fortinet firewalls
• Manage VPN services, including authentication and MFA integration
• Administer Forcepoint Web proxy and SSL decryption policies
• Operate Gigamon SSL inspection, Arbor DDoS, and network IPS/ATP solutions
• Contribute to low-level designs and network security architectures
• Lead network security incident response and produce detailed Root Cause Analysis (RCA)
• Mentor L2 Network Security Engineers and review high-risk changes
• Ensure compliance with SAMA Cybersecurity Framework and NCA ECC requirements

Requirements

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or a related field
• Minimum 7 years in network security engineering
• 3 to 5 years managing multi-vendor firewalls, VPN, proxy, IPS, and DDoS in large enterprises
• Deep understanding of TCP/IP, routing, VPN protocols, TLS, HTTP/HTTPS, and DNS
• Proven track record in incident response and complex troubleshooting
• Hands-on expertise with Palo Alto, Cisco, Fortinet, Forcepoint, and Gigamon

Preferred Qualifications

• Palo Alto PCNSE or PCNSA certification
• Cisco CCNP Security or equivalent
• Fortinet NSE4 or higher
• ITIL Foundation certification
• CISSP or CISM certification
• Experience with automation, scripting, and Wireshark packet analysis

About the Company

IT Security C&T is an innovative, fast-growing security consulting and training company delivering comprehensive security solutions across the MENA region.