Network Security Engineer KSA
Listed on 2026-10-06
-
IT/Tech
Network Security, Cybersecurity, Network Engineer, Systems Engineer
Position Summary:
Cygnus IT is actively seeking an experienced, analytical, and highly technical Network Security Engineer with 5 to 8 years of professional experience to join our expanding team in Riyadh, KSA on a full-time permanent basis. In this critical infrastructure and security role, you will be responsible for designing, configuring, reviewing, and troubleshooting enterprise network security architectures, firewalls, and industrial automation networks.
You will leverage your deep practical proficiency in Layer 2/3 routing and switching, Fortinet/Forti Gate firewalls, Cisco security platforms, industrial networking protocols (PROFINET, Modbus, IEC 61850), and OT network segmentation to ensure uncompromised grid communication security. This opportunity requires an elite security professional with strong RCA and documentation capabilities in a 24/7 production environment.
Job Description:
As a Network Security Engineer based in Riyadh, KSA via Cygnus IT, you will take full operational and technical ownership of enterprise firewall administration, network segmentation, and industrial communication security. Your day-to-day responsibilities include configuring and reviewing firewall rules, ACLs, NAT, VPN tunnels, High Availability (HA) clusters, and controlled access changes across Cisco switches and Fortinet/Forti Gate firewalls. You will design and troubleshoot OT network segmentation utilizing the Purdue model, manage industrial protocols (PROFINET, Ether Net/IP, Modbus TCP/IP, OPC, DNP3, IEC 61850), and implement network redundancy methods (STP, RSTP, MSTP, REP, MRP, HSR, PRP, VRRP, HSRP).
Furthermore, you will conduct rigorous root cause analysis (RCA), risk assessments, and maintain meticulous documentation within 24/7 production environments.
- Design, configure, review, troubleshoot, and document firewall rules, ACLs, NAT policies, VPN tunnels, and HA configurations.
- Administer enterprise-grade networking and security equipment including Cisco switches and Fortinet/Forti Gate firewalls.
- Implement robust Layer 2 and Layer 3 networking configurations including VLANs, routing, trunking, multicast, and QoS.
- Manage industrial network segmentation, Purdue model zones and conduits, remote access controls, and critical grid interfaces.
- Troubleshoot complex industrial protocols and communication paths including PROFINET, Ether Net/IP, Modbus TCP/IP, OPC, DNP3, and IEC 61850.
- Deploy and maintain industrial network redundancy and high-availability methods (STP, RSTP, MSTP, REP, MRP, HSR, PRP, VRRP, HSRP).
- Conduct rigorous root cause analysis (RCA), risk assessments, and security audits across 24/7 production environments.
- Collaborate closely with IT/OT operations teams to ensure seamless change management, system backups, and secure handovers.
Qualifications & Skills:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or a related discipline.
- Minimum of 5 to 8 years of professional hands-on experience in enterprise network security and infrastructure engineering.
- Expert-level practical knowledge of Layer 2 and Layer 3 networking, VLANs, routing, trunking, multicast, and QoS.
- Extensive hands-on experience configuring and managing Fortinet/Forti Gate firewalls and Cisco security platforms.
- Strong understanding of OT network segmentation, Purdue model architecture, zones, conduits, and critical grid communication.
- Proven experience troubleshooting industrial communication protocols (PROFINET, Modbus TCP/IP, OPC, DNP3, IEC 61850).
- Solid familiarity with industrial redundancy protocols (STP, RSTP, HSR, PRP, VRRP, HSRP) and fiber optic connectivity.
- Exceptional technical documentation, RCA, risk assessment, and…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).