Network Engineer

Responsibilities Fortinet Security Infrastructure Design

deploy configure and manage Fortinet Forti Gate Next-Generation Firewalls NGFW across all Group sites and entities Administer and maintain Forti Manager for centralised policy management device provisioning and configuration across the multi-site Fortinet estate Configure and manage Forti

WAF Web Application Firewall to protect web-facing applications and portals against OWASP Top 10 threats and application-layer attacks Develop review and enforce firewall security policies NAT rules VPN configurations IPSec and SSL and traffic shaping policies Maintain and optimise Fortinet Security Fabric integrations including Forti Analyzer Forti Switch Forti

AP and Forti Client where deployed Conduct regular firewall rule base reviews and clean-up exercises to ensure policies align with the principle of least privilege Manage firmware upgrades and patch cycles across all Fortinet devices in accordance with the Group s change management and patch management processes

Configure manage and maintain Network Access Control NAC solutions to enforce device compliance and access policies across wired and wireless networks Implement 802 1X port-based authentication for all corporate network access points integrated with Active Directory and RADIUS Forti Authenticator or equivalent Define and enforce NAC policies for endpoint compliance checks including operating system patch level antivirus status and certificate validity before granting network access Manage guest network access BYOD policies and quarantine VLAN procedures for non-compliant or unrecognised devices Maintain and audit NAC access logs and generate periodic compliance reports for IT management review

Architecture Design and maintain network segmentation architecture including VLANs DMZ zones and micro-segmentation to limit lateral movement and enforce security boundaries Administer routing protocols BGP OSPF EIGRP and switching technologies STP LACP VTP across campus and data centre environments Manage SD-WAN configurations and WAN link failover across multi-site Group locations Maintain site-to-site and remote access VPN infrastructure for secure connectivity across Group entities and remote users Monitor network performance and capacity across all sites using network monitoring tools Solar Winds PRTG Forti Analyzer or equivalent Respond to and resolve network incidents within defined SLA time frames performing root cause analysis and preventive action documentation

Manage and execute the network infrastructure patch management lifecycle including vulnerability identification patch testing scheduling deployment and post-patch verification Maintain an up-to-date patch status register for all network devices including firewalls switches routers wireless controllers and access points Coordinate firmware and software upgrades for all network infrastructure in compliance with the Group s change management process and approved maintenance windows Monitor vendor security advisories Fortinet PSIRT Cisco PSIRT and equivalent and assess applicability and urgency of security patches within the Group environment Produce monthly patch compliance reports for IT management identifying devices with outstanding critical or high‑severity patches and their remediation timelines

Collaborate with the Group IT security team on network-related security incidents investigations and threat containment activities Support the implementation and maintenance of network security monitoring using SIEM platforms reviewing firewall and IPS logs for anomalous activity Participate in vulnerability assessments and penetration testing remediation activities related to network infrastructure Contribute to the development and maintenance of network security policies standards and procedures in alignment with ISO 27001 NIST and UAE regulatory requirements NESA NCA

Provide Level 2 and Level 3 infrastructure and network support to end users and business units across the Group as and when required Assist with IT helpdesk…