POSITION OVERVIEW
The Network & Security Engineer is a hands-on implementation role responsible for designing, deploying, and securing customers’ enterprise routing, switching, and firewall infrastructure. The role delivers projects from design through handover, ensures the performance, reliability, and security of customer networks, and works directly with customers, Project Management, Pre-Sales, and vendor teams to deliver solutions in line with networking and security best practices.
KEY RESPONSIBILITIES
1. Switching & Routing
- Design, deploy, configure, and troubleshoot Layer 2 switching technologies on Cisco, Huawei, Aruba, HP, or similar platforms.
- Design, deploy, and troubleshoot Layer 3 routing, including static routing, OSPF, EIGRP, and BGP.
2. Network Security
- Configure, maintain, and optimise enterprise firewalls, including Palo Alto, Fortinet, Cisco ASA/Firepower, and Sophos XG.
- Implement and optimise site-to-site and remote-access VPNs (IPsec, SSL VPN, DMVPN).
- Deploy and troubleshoot load balancing (LB) and web application firewall (WAF) solutions.
- Design, deploy, and manage Network Access Control (NAC) solutions (Cisco, Aruba, or similar).
- Support the deployment and integration of cybersecurity solutions (e.g., SIEM log integration, ZTNA / SASE, secure access) where skills allow.
3. SD-WAN & Wireless
- Implement and support SD-WAN solutions such as FortiGate SD-WAN, Palo Alto, or similar.
- Support the design and deployment of enterprise wireless networks.
4. Project Delivery & Customer Engagement
- Prepare technical documentation, including high-level and low-level designs, implementation plans, test procedures, and as-built documents.
- Execute testing and site acceptance (SAT, FAT) activities, and support customer handover.
- Communicate and present technical solutions clearly to customers and stakeholders.
- Apply security and networking best practices to all delivered solutions.
5. Pre-Sales & Internal Coordination
- Provide technical input to pre-sales activities such as BOQs and scope of work, where required.
- Coordinate with the Project Manager on task status, risks, and schedule, and keep project trackers up to date.
- Raise and follow up vendor TAC cases where required, and share lessons learned with the technical team.
QUALIFICATIONS & SKILLS
Education & Experience
- Bachelor’s degree in Computer Science, Information Technology, Electrical / Communications Engineering, or a related field.
- Minimum 5 years of hands-on implementation experience in enterprise networking and security, preferably in an IT system integrator environment.
- Proven track record of end-to-end delivery — design, deployment, migration, testing, and handover — on enterprise, government, or BFSI projects.
- Strong hands-on, multi-vendor experience with Cisco, Aruba, Huawei, Palo Alto, and Fortinet platforms.
- Experience with network and firewall migrations and complex troubleshooting in live production environments.
Certifications (Mandatory)
- At least one valid expert or senior professional-level certification is mandatory: CCIE Enterprise Infrastructure, CCIE Security, Palo Alto PCNSE, Fortinet NSE 7 / FCSS, or an equivalent (e.g., Check Point CCSE, Aruba ACEP / ACX).
- CCIE (Enterprise Infrastructure or Security) is a strong advantage.
- Additional professional-level certifications (e.g., CCNP Enterprise / Security) are an advantage.
Core Skills & Competencies
- Expert-level skills in routing, switching, wireless networking, and network security technologies.
- Strong analytical and troubleshooting skills.
- Ability to work independently and manage multiple projects against deadlines.
- Customer-focused approach with strong stakeholder management.
- Clear, structured technical documentation skills.
- Excellent communication and presentation skills, with fluency in English.
- Willingness to travel to customer sites as required.
Desirable Skills — Cybersecurity (Optional)
- SIEM / log management (e.g., FortiSIEM, Splunk, QRadar) and SOC integration.
- Endpoint security (EDR / XDR) and email / web security gateways.
- Zero Trust, ZTNA, and SASE solutions (e.g., Prisma Access, FortiSASE, Zscaler).
- Privileged Access Management (PAM) and identity-based access controls.
- Vulnerability assessment tools (e.g., Nessus, Qualys) and security hardening.
- Familiarity with NCA ECC and other Saudi cybersecurity compliance requirements.
