Senior Cloud Network Security Engineer

Senior Cloud Network Security Engineer (Category – Architect)

Sector:
Oil and Gas

Department: IT Infrastructure & Security

Location:

Doha, Qatar

The Senior Cloud & Network Security Engineer will be responsible for designing, implementing, and safeguarding the company’s core digital and network infrastructure through robust architecture, secure connectivity, and proactive defence strategies. The role encompasses network design, routing and switching, firewalls, load balancers (LB), web application firewalls (WAF), VPNs, and hybrid cloud security across on-premises and cloud (Azure, GCP) environments.

The engineer will ensure high availability, resilience, and compliance of all network and security systems, providing expert guidance to cross‑functional teams and ensuring alignment with corporate cybersecurity and infrastructure standards.

• Design, deploy, and manage secure enterprise network architectures spanning on‑premises data centers, field assets, and multi‑cloud environments (Azure and GCP).
• Configure and maintain routing and switching infrastructure, including VLANs, BGP, OSPF, and WAN/LAN connectivity.
• Manage enterprise firewalls, VPNs, load balancers (F5, Azure Application Gateway), WAFs, and IDS/IPS systems to ensure end‑to‑end network security.
• Implement and enforce network segmentation, access control lists (ACLs), and zero‑trust network policies to secure sensitive environments.
• Ensure availability, performance, and scalability of network services through continuous monitoring, optimization, and proactive capacity planning.
• Integrate network telemetry and logs into enterprise SIEM platforms to support threat detection, visibility, and response.
• Collaborate with Dev Ops, Cloud, and Infrastructure teams to embed security principles within all network and infrastructure deployments.
• Ensure compliance with internal cybersecurity frameworks and external standards such as ISO 27001, NIA Qatar, and energy sector security mandates.

• Design and enforce cloud network topologies and security configurations using native controls such as Azure Virtual Networks, Network Security Groups (NSGs), Firewalls, Private Endpoints, and Google VPC Service Controls.
• Secure interconnectivity between on‑premises and cloud through Express Route, VPN gateways, and hybrid peering.
• Integrate security‑by‑design practices into infrastructure‑as‑code (IaC) and Dev Sec Ops  pipelines to ensure consistent and automated network provisioning.
• Manage cloud‑native load balancing, WAF, DDoS protection, and application gateways for secure application delivery.

• Monitor and analyze network traffic to detect anomalies, intrusions, and advanced threats.
• Respond to network security incidents, coordinate investigation and remediation efforts, and implement corrective actions.
• Maintain configuration baselines, patch management routines, and ensure full compliance with corporate and regulatory security standards.
• Perform periodic risk assessments, vulnerability scans, and network penetration reviews to identify and mitigate risks.

• Participate in design reviews of new digital transformation projects, ensuring alignment with network and security architecture standards.
• Provide technical leadership and mentorship to network and infrastructure teams, fostering a culture of secure design and continuous improvement.
• Advise stakeholders on network resilience, redundancy, and secure connectivity strategies across all business units.

• Bachelor’s degree in Computer Engineering, Cybersecurity, Information Systems, or related field.
• 10+ years of experience in network and infrastructure security within large‑scale enterprise IT or OT environments.
• Proven expertise in:
  • Routing and switching (Cisco, Juniper, or equivalent)
  • Enterprise firewalls (Palo Alto, Fortinet, Cisco ASA)
  • Load balancers (F5, Azure Application Gateway, NGINX Plus)
  • Web Application Firewalls (WAF) and reverse proxy systems
  • VPN, IPSec, SSL/TLS, and Zero Trust network architectures
  • Cloud…