Technology Engineer - Network Security

We are seeking a highly skilled Technology Engineer (Network Security & Automation) to join a leading tier-1 banking institution in Dubai. This role sits within the Core Infrastructure & Security Division and is responsible for driving the continuous product engineering lifecycle, ensuring operational stability, and accelerating infrastructure automation across the enterprise network security stack.

The successful candidate will immediately spearhead critical service decommission initiatives and a major ongoing software upgrade program, while actively collaborating with automation teams to perform regression testing and optimize next-generation infrastructure-as-code tools.

Key Responsibilities

1. Lifecycle Engineering & Decommissioning

• Execute end-to-end service decommissioning initiatives, including the systematic removal of IP addresses, external DNS entries, and SSL certificates across firewalls, load balancers, proxies, and micro-segmentation platforms.
• Lead and execute the ongoing software upgrade program for multi-vendor network security environments.
• Implement planned Disaster Recovery (DR) activities to ensure business continuity and resiliency verification.
• Provide planned, tier-3 go-live and standby support for newly released enterprise projects.

2. Operational Stability & L3 Support

• Troubleshoot priority (P1/P2) infrastructure incidents across the security estate and provide advanced Level 3 support.
• Mentor and guide L2 operational teams, providing technical direction for emergency changes during active incidents.
• Manage change management workflows, including creating comprehensive Runbooks, Standard Operating Procedures (SOPs), and formal Change Requests (CRs) to secure stakeholder approvals.

3. Automation, R&D & Continuous Improvement

• Act as the primary validation user for newly developed automation tools, performing regression testing and delivering practical, production-grade feedback to automation software engineers.
• Drive the reduction of Total Cost of Ownership (TCO) by identifying manual housekeeping workflows and building automated, zero-touch, unattended deployments.
• Evaluate vendor roadmaps, conduct research & development (R&D), and manage the product backlog to ensure infrastructure security controls adapt to emerging external threats.

Required Technical Specifications & Skills

Core Security & Network Products (Essential)

• Firewalls: Strong technical knowledge and upgrade experience with Palo Alto (Panorama), Checkpoint (SmartConsole), and Fortinet Fortigate.
• Load Balancers: Hands-on administration and engineering of F5 products (LTM, GTM, and ASM).
• Web Proxies: Solid engineering experience with Zscaler and Forcepoint.
• IPS Platforms: Experience maintaining and upgrading Cisco FTD and FMC.
• Micro-Segmentation & Edge: Hands-on exposure to Trend Micro micro-segmentation, External DNS (AWS Route53), and CDNs/DDoS mitigation platforms (Cloudflare).

Automation & DevSecOps (Crucial)

• Infrastructure as Code & Scripting: Proven experience with Ansible, Python, or Chef to automate network security changes and deployments.
• Familiarity with containerization and virtualization architectures, including Docker, OpenShift, Kubernetes, VMware ESXi, KVM, or OpenStack.
• Understanding of public cloud network security solutions (AWS/Azure).

Qualifications & Experience

• Education: Bachelor’s degree in Computer Science, Network Engineering, or a strictly equivalent technical field. Relevant professional security certifications (e.g., PCNSE, CCSA/CCSE, F5-CSE, CCNP Security) are highly desirable.
• Experience: Minimum of 5 years of experience in a relevant technical network security engineering position within large-scale, complex enterprise environments.
• Industry Domain: Prior experience within the Banking or Financial Services sector is highly preferred.
• Soft Skills: Strong strategic thinking, an R&D-oriented mindset, adequate understanding of project management methodologies, and exceptional verbal and written communication skills.