Network Security Engineer (L3)

We are seeking a skilled L3 Network Security Engineer to join a UAE-based client’s team, supporting enterprise network security environments from locations in Lahore, Karachi, or Islamabad with a hybrid work model. The ideal candidate will have over five years of hands-on experience in managing and troubleshooting advanced network security technologies, including firewalls, VPNs, and security architectures. This role involves handling complex security incidents, optimizing security infrastructure, and implementing robust security solutions to protect enterprise networks.

Key Responsibilities

- Provide L3 technical support for complex network security incidents, escalations, and service requests.
- Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms such as Palo Alto, FortiGate, and Check Point.
- Manage and troubleshoot F5 BIG-IP security and application delivery environments, including Web Application Firewall (WAF) technologies.
- Support IPS/IDS systems and DDoS protection and mitigation efforts.
- Oversee enterprise proxy and secure internet access solutions, including Zscaler, Forcepoint, or equivalent technologies.
- Support multi-factor authentication (MFA), VPN token solutions, Cisco ISE/NAC, and remote access security environments.
- Design and review secure network architectures, including high-level and low-level designs (HLD/LLD), ensuring high availability, redundancy, segmentation, and security controls.
- Perform firewall policy reviews, implement rule changes, conduct migrations, and apply security hardening measures.
- Troubleshoot complex VPN, firewall, authentication, and network connectivity issues.
- Support WAF and application security requirements.
- Work with endpoint security technologies such as EDR, DLP, Trellix, or McAfee solutions.
- Assist in vulnerability assessments, security posture improvements, and remediation activities.
- Follow ITSM processes for incident, problem, change, and service request management.
- Maintain technical documentation, configuration records, troubleshooting procedures, and knowledge base articles.
- Coordinate with internal teams, vendors, and client stakeholders for incident resolution and security infrastructure changes.
- Participate in security projects, technology upgrades, migrations, and implementations.
- Ensure adherence to ITIL, security, compliance, and change management processes.
- Provide technical guidance to L1/L2 teams and facilitate knowledge transfer when necessary.

Required Qualifications

- Minimum of 5 years of professional experience in network security, cybersecurity, or security operations.
- Proven expertise in L3-level network security support and troubleshooting.
- Strong experience with enterprise firewall technologies including Palo Alto, FortiGate, and Check Point.
- Solid background in security architecture, network design, HLD/LLD, and managing high-availability environments.
- In-depth understanding of TCP/IP, routing, switching, VPNs (IPSec, SSL, site-to-site, remote access), DNS, network segmentation, and security principles.
- Experience managing complex security incidents and escalations.
- Exposure to enterprise environments such as banking, telecom, government, ISP, or managed security services is preferred.
- Excellent communication and stakeholder management skills.
- Ability to collaborate effectively with UAE-based client teams and support business hours aligned with UAE time zones as needed.

Preferred Qualifications and Benefits

Relevant industry certifications are highly desirable, including Palo Alto PCNSE, Fortinet NSE/FCP, Check Point certifications, Cisco CCNP Security, and ITIL Foundation. Additional cybersecurity or network security certifications will be considered an advantage.

Key competencies for success in this role include advanced troubleshooting and analytical skills, expertise in network security architecture and design, incident and problem resolution capabilities, security operations management, change and configuration management, thorough documentation and reporting skills, and strong client communication. The candidate must demonstrate the ability to work independently at an L3 level while taking ownership of critical security incidents and escalations.

This full-time position offers the opportunity to work in a dynamic, hybrid environment supporting a prominent UAE-based client, contributing to the security and resilience of their enterprise network infrastructure.