Network Security Engineer

Role & responsibilities Job Description Position: Network & Security Engineer Location: Dubai Reporting To: CTO Role Overview We are seeking a hands-on Network & Security Engineer to secure our enterprise network and run day-to-day security operations across head office, warehouses and branch sites. Key Responsibilities Network Security • Design and maintain a secure network architecture across head office, warehouses and branches. • Administer enterprise firewalls (policies, IPS, web filtering, application control) and site-to-site and remote-access VPNs. • Secure switching and wireless networks; implement VLAN segmentation, NAC and Zero Trust access. • Security Platforms • Administer the ManageEngine security suite and enterprise platforms: IAM, PAM, SIEM, EPP, MDM and DLP. • Manage email security (anti-phishing, SPF, DKIM, DMARC) and XDR, integrated with SIEM. • Manage SSO, MFA and Conditional Access across Active Directory and Microsoft 365 (Entra ID). • Security Operations • Monitor and respond to security alerts and incidents across network, endpoint, email and Microsoft 365. • Run vulnerability and patch management, investigations and remediation, including with external vendors. • Governance & Improvement • Maintain security policies, architecture diagrams and technical documentation. • Support compliance with ISO 27001, UAE Information Assurance standards and UAE PDPL. • Identify and implement security automation and improvements. • Required Skills & Experience • Hands-on administration of enterprise firewalls (SonicWall, Fortinet, Palo Alto or equivalent) and switching and wireless (HPE Aruba or equivalent). • Strong knowledge of VLANs, secure routing, VPN, NAC, IDS/IPS and Zero Trust. • Experience with ManageEngine, SIEM, EPP and XDR platforms. • Experience with IAM, PAM, Active Directory, Entra ID, SSO, MFA and Conditional Access. • Experience with email security platforms (Barracuda, Check Point, Microsoft Defender or equivalent). • Ability to produce architecture diagrams, security policies and documentation. Hands-on administration of enterprise firewalls (SonicWall, Fortinet, Palo Alto or equivalent) and switching and wireless (HPE Aruba or equivalent). Strong knowledge of VLANs, secure routing, VPN, NAC, IDS/IPS and Zero Trust. Experience with ManageEngine, SIEM, EPP and XDR platforms. Experience with IAM, PAM, Active Directory, Entra ID, SSO, MFA and Conditional Access. Experience with email security platforms (Barracuda, Check Point, Microsoft Defender or equivalent). Ability to produce architecture diagrams, security policies and documentation.