Network & Security Infrastructure Engineer
We're excited to be partnering with a leading institution in the UAE that is building a digital-first, AI-enabled financial services organisation from the ground up. This is a unique opportunity to join at an early stage and help shape the technology, data, and platform foundations of a business with significant institutional backing and long-term ambition. If you're passionate about network engineering, cloud security, and building resilient infrastructure at scale, we'd love to hear from you.
This is a rare opportunity to engineer a 100% cloud, software-defined network and security estate from the ground up, with no legacy on-prem infrastructure.
This is not a network administration role. You'll build and operate production infrastructure as code: configuration in version control, tested before deployment, released through CI/CD, with drift detection, automated remediation and auditable change. A key element of the environment is AI/agent-enabled infrastructure operations. You'll work with automated workflows that monitor vulnerabilities and advisories, assess infrastructure inventory, test remediation, execute controlled changes and accelerate patching, while maintaining human review, approval and auditability.
What you'll build and operate:
Cloud network fabrics across Azure and AWS, including private connectivity, Azure Virtual WAN / AWS Cloud WAN, Express Route / Direct Connect, SD-WAN, DNS/DHCP and load balancing.
Cloud-edge and office connectivity, carrier interconnects and resilient/failover architectures.
Next-generation firewalls such as Palo Alto/Fortinet, DDoS protection, IDS/IPS and DNS security.
Terraform-based Network-as-Code, reusable modules, Git-based configuration, pre-deployment testing, rollback and drift detection.
Network source-of-truth and validation tooling such as Net Box, Nautobot and Batfish.
CI/CD-driven infrastructure deployment using tooling such as Git Hub Actions.
Zero Trust / ZTNA / SASE, identity-aware access and segmentation.
Workload and agent identity using technologies such as SPIFFE/SPIRE and Microsoft Entra Workload/Agent .
Mutual TLS, service mesh and identity-aware segmentation using Istio, Cilium/eBPF or equivalent.
PKI and HSM-backed key management.
Secure egress controls and allow-listing using Azure Firewall/DNS controls. Network telemetry, flow analysis, behavioural baselining and SOC/SIEM integration.
Automated quarantine, security remediation, patching and recovery workflows.
Experience building or operating SWIFT infrastructure, secure zones, Alliance components, payment-system connectivity or similarly regulated/high-security connectivity would be a major advantage.
Relevant experience may include secure gateways, cloud HSMs, SWIFT Customer Security Programme controls, resilient connectivity and evidence-driven compliance.
Key Requirements are:
6+ years hands-on Network & Security Infrastructure Engineering.
Production cloud networking experience across Azure and/or AWS.
Strong Terraform / Network-as-Code capability.
Software-defined networking and private cloud connectivity.
Hands-on next-generation firewalls and network security controls.
Strong routing, DNS, load balancing, segmentation and resilient network design.
Zero Trust, workload identity, mTLS and identity-aware access exposure.
CI/CD and Git-based infrastructure delivery.
Highly automated or AI-assisted infrastructure operations.
Network observability, incident response, DR and failover experience.
Experience in a highly regulated or security-sensitive environment strongly preferred.
SWIFT/payment infrastructure experience is an advantage.
Fluency with AI-assisted engineering tools, combined with strong review and audit disciplines.
Certifications such as CCNP, PCNSE, NSE or equivalent security/network qualifications are advantageous.
We're interested in engineers who can demonstrate "I built and automated this", rather than simply administering an established environment.
Hiring #Network Security #Network Engineer #Cloud Networking #Azure #AWS #Terraform #Network Automation #Infrastructure As Code #Zero Trust #Dev Sec Ops #Cyber Security #SWIFT #SASE #Abu Dhabi #UAEJobs
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).