Senior Network and Security Engineer
Ghobash Group is hiring a Senior Network and Security Engineer in Abu Dhabi, United Arab Emirates. Level rates it ; you can apply on Ghobash Group.
Level's read on this job
- On Level's scale, this cybersecurity role is Little AI ●○○○: aI is not part of the work.
- Tools and skills the posting cites include Next Gen Firewalls, F5 and Cisco Aci.
- Level classifies it as a senior role.
- Level lists 141 other open roles at Ghobash Group.
- The role was posted within the past two weeks.
AI in this role
Senior Network and Security Engineer needed at CNS to design, deploy, and support enterprise security and data-centre projects.
CNS is a technology company that powers the future by providing digital solutions essential to support all enterprise and human development. While growing and managing a robust pool of supplier-partners for the benefit of our clients has always been a priority, we are constantly re-inventing ourselves.
Founded in 1987 with more than 35 years of experience, CNS employs over 320 employees including more than 250 certified engineers. We offer in-depth expertise and a range of best-in-class products that support the digital transformation of all major industries. With offices in three countries, we have an extensive reach into, and regional knowledge of the Middle East markets.
A shift into levering our many years of experience to develop pioneering software in-house will add yet another dimension to our highly innovative solutions-portfolio.
Design, deploy and hand over enterprise security and data-centre projects for CNS customers across the UAE. The role is hands-on: the engineer leads implementations end to end - Next-Gen Firewalls, Zero Trust, NAC, F5 application delivery and Cisco ACI - and acts as the technical escalation point for the team.
DUTIES & RESPONSIBILITIES:
Design and architecture
- Gather customer requirements and produce High-Level Design (HLD) and Low-Level Design (LLD) documents for security and data-centre solutions.
- Design segmentation, firewall policy, Zero Trust access and NAC policy models aligned with customer security standards.
- Review existing customer environments and recommend hardening, migration and consolidation paths.
Deployment and migration
- Lead end-to-end deployments: staging, configuration, integration, cut-over and post-go-live support.
- Plan and execute firewall and load-balancer migrations (policy conversion, rule clean-up, rollback plans) with minimal downtime.
- Integrate security platforms with AD/LDAP, RADIUS/TACACS+, PKI, SIEM and SOAR.
- Write and run User Acceptance Test (UAT) plans and deliver as-built documentation and knowledge transfer to customers.
Operations and support
- Act as L3 escalation for network and security incidents; lead root-cause analysis for major incidents.
- Carry out preventive maintenance (PM) health checks, firmware upgrades and vulnerability remediation within agreed maintenance windows.
- Meet SLA targets on assigned tickets and keep ticketing tools up to date.
Team and customer delivery
- Support pre-sales with solution sizing, BoQ review, SOW and RFP technical responses.
- Present technical status to customer stakeholders and internal management.
Education:
Minimum :
- Bachelor’s degree in Computer Science, Electrical/Telecom Engineering or IT (or equivalent experience).
- At least one of: CCNP Security or CCNP Enterprise / Data Center; PCNSE; Fortinet NSE 7 / FCSS; F5 Certified Technology Specialist (301/302/303).
Desired:
- CCIE Security / Data Center / Enterprise.
- Cisco ISE or ACI specialist certification.
Experience:
Minimum:
- Minimum 10 years in enterprise networking, including 5+ years delivering network security projects.
Desired:
- System integrator or managed-services experience in the UAE/GCC.
- Hands-on delivery of multi-vendor firewall and F5 migrations.
Skills & Abilities:
Minimum:
- Next-Gen Firewall - Palo Alto, FortiGate, Cisco FTD/FMC: HA deployments, policy migration, IPS, URL filtering, SSL decryption, VPN.
- Fortinet Security Fabric - FortiManager, FortiAnalyzer, FortiEMS, FortiZTP, FortiSandbox, FortiADC, FortiMail.
- Zero Trust / ZTNA / SASE - ZTNA rollouts replacing legacy VPN; IdP integration (Entra ID, Okta) and MFA.
- Network Access Control - Cisco ISE, Aruba ClearPass, FortiNAC: 802.1X, MAB, guest/BYOD, posture, profiling, TrustSec.
- Application delivery - F5 BIG-IP LTM, GTM, Advanced WAF, APM; F5OS / rSeries / VELOS.
- Data-centre fabric - Cisco ACI (APIC), Nexus 9000: fabric bring-up, tenants/VRF/BD/EPG, L3Out, service graphs.
- Layer 2 / Layer 3 - VLANs, STP, LACP, vPC; BGP, OSPF, EIGRP, VRF, HSRP/VRRP, VXLAN EVPN.
- Zero-touch SD-WAN - Fortinet SD-WAN (FortiZTP + FortiManager) large-scale branch rollouts.
Desired:
- Security operations - SIEM (Splunk, QRadar), EDR, vulnerability scanners, CIS hardening.
- Automation - Python, Ansible, REST APIs, Terraform for bulk configuration and policy migration.
- Clear written English for HLD/LLD, method statements, change requests and customer reports.
- Valid UAE driving licence; willing to work maintenance windows and join an on-call rota.
Compliance with policies and procedures based on the ISO standards adopted by CNS.
How we rate this
Senior Network and Security Engineer at Ghobash Group rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Also common in cybersecurity jobs at this level
Pay
- Typical cybersecurity job
- $159k
This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs
Questions you could be asked
- Tell me about a project where network security was part of your work. What did you do?
- Tell me about a project where zero trust was part of your work. What did you do?
- Tell me about a project where hld lld design was part of your work. What did you do?
- Tell me about a project where incident management was part of your work. What did you do?
- Walk me through how you've used Next Gen Firewalls in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Network Security, Zero Trust, Hld Lld Design, Incident Management, and Next Gen Firewalls. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.
Get new cybersecurity jobs by email
One email a week with the new cybersecurity jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Security roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step