Network Security Engineer (L3)

We are seeking an experienced L3 Network Security Engineer to join our team supporting a UAE-based client. This full-time role, based in Lahore, Karachi, or Islamabad, offers a hybrid work mode. The ideal candidate will have over five years of hands-on experience managing and troubleshooting enterprise network security environments. You will be responsible for handling complex security incidents, administering firewall and security platforms, designing secure network architectures, and ensuring operational excellence across various security technologies.

Key Responsibilities

- Provide L3 technical support for complex network security incidents, escalations, and service requests.
- Administer, configure, troubleshoot, and optimize enterprise firewall and network security platforms such as Palo Alto, FortiGate, and Check Point.
- Manage and troubleshoot F5 security and application delivery environments, including Web Application Firewall (WAF) technologies.
- Support IPS/IDS systems and DDoS protection and mitigation efforts.
- Oversee enterprise proxy and secure internet access solutions, including Zscaler, Forcepoint, or equivalent technologies.
- Support Multi-Factor Authentication (MFA), VPN token solutions, Cisco ISE/NAC, and remote access security environments.
- Design and review secure network architectures, including High-Level Design (HLD), Low-Level Design (LLD), high availability, redundancy, segmentation, and security controls.
- Perform firewall policy reviews, rule implementation, configuration changes, migrations, and security hardening.
- Troubleshoot complex VPN, firewall, authentication, network security, and connectivity issues.
- Support WAF and application security requirements.
- Work with endpoint security technologies such as EDR, DLP, Trellix, McAfee, or equivalent solutions.
- Assist in vulnerability assessments, security posture improvements, and remediation activities.
- Follow IT Service Management (ITSM) processes for incident, problem, change, and service request management.
- Maintain technical documentation, configuration records, troubleshooting procedures, and knowledge base articles.
- Coordinate with internal teams, vendors, and client stakeholders for incident resolution and infrastructure changes.
- Participate in security projects, technology upgrades, migrations, and implementations.
- Ensure all security operations and changes comply with ITIL, security, compliance, and change-management processes.
- Provide technical guidance to L1/L2 teams and support knowledge transfer initiatives.

Required Qualifications

- Minimum of 5 years of professional experience in network security, cybersecurity, or security operations.
- Strong hands-on expertise in L3-level network security support and troubleshooting.
- Proven experience with enterprise firewall technologies such as Palo Alto, FortiGate, and Check Point.
- Solid background in security architecture, network design, HLD/LLD, and high-availability environments.
- Deep understanding of TCP/IP, routing, switching, VPN, DNS, network segmentation, and security principles.
- Experience managing complex security incidents and escalations.
- Previous exposure to enterprise, banking, telecom, government, ISP, or managed security environments is preferred.
- Excellent communication and stakeholder management skills.
- Ability to collaborate with UAE-based client teams and support requirements aligned with UAE business hours when needed.

Preferred Qualifications and Certifications

- Palo Alto PCNSE
- Fortinet NSE / FCP
- Check Point certifications
- Cisco CCNP Security
- ITIL Foundation
- Other relevant cybersecurity or network security certifications

This role demands advanced troubleshooting and analytical skills, strong ownership of critical security incidents, and the ability to work independently at the L3 level. Candidates will be expected to demonstrate expertise in security operations, infrastructure management, change and configuration management, and effective client communication.