Senior Network Security Engineer

A leading company that specializes in providing technology solutions and services, particularly focusing on data management and software systems, is looking for a highly qualified Senior Network Security Engineer to join their team in Qatar. The ideal candidate will have over 8 years of hands‑on experience in managing and securing complex networks. The successful candidate will be responsible for designing, implementing and maintaining robust network security solutions to protect our organization’s critical assets.

• Design, implement and maintain network security solutions using ASA 5500 Series with Single/Multiple Context based solutions.
• Deploy Cisco FTD 2100X and 4100X Series Firewalls.
• Configure ASA 5500X Series with Fire Power Services.
• Implement Cisco Identity Services Engine (ISE) and integrate Cisco Umbrella, Cisco AMP.
• Deploy Palo Alto Next‑Generation, Checkpoint and Fortinet Firewalls.
• Configure Cisco Series Switches for core layer routing.
• Implement Sophos XG Firewall, Sophos Wireless, Cyberoam, Sonic Wall, Fortinet UTM Firewalls.
• Set up wired/wireless authentication based on standard Dot1x Suite: EAP‑TLS, MSCHAPv2, EAP‑FAST.
• Implement Cisco IPS inline / promiscuous mode with custom signatures.
• Design and implement secure wireless access with Cisco Wireless LAN Controllers (WLC) integrated with ISE/WSA.
• Deploy and secure Cisco 1142/1252 Access Points.
• Configure Perimeter Security services including intrusion prevention, content security with IPS 4200 series, Palo Alto, Cyberoam, Sophos, Sonic Wall and Watchguard UTMs.
• Implement IPSec VPN (static and dynamic) and DMVPN on Cisco 3800 and 1800 3G series and ISR Series routers.
• Configure Flex VPN (site‑to‑site, server‑client hub‑spoke) GETVPN.
• Configure VRF, VPC, Etherchanneling on Cisco series switch stacks.
• Implement Solarwinds Kiwi Cat tools for network monitoring.
• Set up AAA based on TACACS/RADIUS and Network Policy Server.
• Implement Cisco ACS 5.x and Cisco ISE.
• Use threat identification and mitigation techniques, including deep knowledge of routing protocols (OSPF, RIP, EIGRP, BGP).
• Implement switching protocols: STP, MSTP, RSTP, PVSTP, HSRP, VRRP, VTP, trunking, Ether Channel.
• Apply security features:
  Port Security, DHCP snooping, ARP inspection, PVLANs.
• Design, deploy and manage F5 LTM, GTM, WAF solutions for high availability and application security.
• Configure and manage Palo Alto and Fortigate firewalls to protect the network perimeter and internal segments.
• Implement and maintain DNS, DHCP and IPAM solutions using Infoblox.
• Utilize Forescout for network access control and device visibility.
• Administer and configure Cisco ISE and Aruba Clear Pass for secure network access and policy enforcement.
• Conduct regular security assessments, vulnerability scanning and penetration testing to identify and mitigate risks.
• Develop and enforce security policies, procedures and best practices.
• Monitor network traffic and security alerts and respond to incidents promptly.

• Bachelor’s degree in Computer Science, Information Technology or a related field.
• Minimum 8 years of experience in network security engineering or a related role.
• Strong knowledge of all network and security related technologies, tools and devices used for managing and securing IT infrastructures, including F5 LTM, F5 GTM, F5 WAFAA, Palo Alto, Fortigate, Cisco ISE and Aruba Clear Pass, Forescout, Infoblox.
• Certified CCIE Security.
• Willing to work in Doha, Qatar.