Network Security Engineer (L3)

We are seeking a skilled L3 Network Security Engineer to join a dynamic team supporting a UAE-based client. This full-time role, based in Lahore, Karachi, or Islamabad with a hybrid work mode, involves managing and securing enterprise network environments. The ideal candidate will have over five years of experience in network security, demonstrating strong hands-on expertise in firewall management, incident resolution, security architecture, and operational support. You will be responsible for handling complex security incidents, optimizing security infrastructure, and implementing robust network security solutions across diverse enterprise environments.

Key Responsibilities

- Provide L3 technical support for complex network security incidents, escalations, and service requests.
- Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms, including Palo Alto, FortiGate, and Check Point.
- Manage and troubleshoot F5 security and application delivery environments, including Web Application Firewall (WAF) technologies.
- Support IPS/IDS and DDoS protection and mitigation activities.
- Oversee enterprise proxy and secure internet access solutions such as Zscaler, Forcepoint, or equivalent technologies.
- Support MFA, VPN token solutions, Cisco ISE/NAC, and remote access security environments.
- Design and review secure network architectures, including High-Level Design (HLD), Low-Level Design (LLD), high availability, redundancy, segmentation, and security controls.
- Perform firewall policy reviews, rule implementation, configuration changes, migrations, and security hardening.
- Troubleshoot complex VPN, firewall, authentication, network security, and connectivity issues.
- Support WAF and application security requirements.
- Work with endpoint security technologies including EDR, DLP, Trellix, McAfee, or equivalent solutions.
- Assist in vulnerability assessments, security posture improvements, and remediation activities.
- Follow ITSM processes for incident, problem, change, and service request management.
- Maintain technical documentation, configuration records, troubleshooting procedures, and knowledge base articles.
- Coordinate with internal teams, vendors, and client stakeholders for incident resolution and security infrastructure changes.
- Participate in security projects, technology upgrades, migrations, and implementation activities.
- Ensure all security operations and changes comply with ITIL, security, compliance, and change-management processes.
- Provide technical guidance to L1/L2 teams and support knowledge transfer as needed.

Required Qualifications

- Minimum of 5 years of professional experience in Network Security, Cybersecurity, or Security Operations.
- Proven hands-on experience in L3-level network security support and troubleshooting.
- Strong expertise with enterprise firewall technologies such as Palo Alto, FortiGate, and Check Point.
- Experience in security architecture, network design, HLD/LLD, and high-availability environments.
- Solid understanding of TCP/IP, routing, switching, VPN, DNS, network segmentation, and security principles.
- Demonstrated ability to handle complex security incidents and escalations effectively.
- Experience in enterprise, banking, telecom, government, ISP, or managed security environments is preferred.
- Excellent communication and stakeholder management skills.
- Willingness and ability to work with UAE-based client teams and support requirements aligned with UAE business hours when necessary.

Preferred Qualifications and Certifications

- Palo Alto PCNSE certification.
- Fortinet NSE or FCP certifications.
- Check Point certifications.
- Cisco CCNP Security certification.
- ITIL Foundation certification.
- Other relevant cybersecurity or network security certifications.

This role demands advanced troubleshooting and analytical skills, a strong grasp of network security architecture and design, and the ability to independently manage critical security incidents. Candidates should demonstrate ownership, excellent documentation skills, and effective communication with clients and stakeholders. If you are passionate about network security and ready to contribute to a leading enterprise environment, this opportunity offers a challenging and rewarding career path.