Network Security Engineer in Banking domain

We have an urgent requirement for Network Security Engineer in Banking domain is  required for our banking clients in Abu Dhabi ,UAE

Design, implement, and manage firewall/WAF lifecycle, VPNs, SD-WAN, and secure remote access across hybrid and cloud environments (Azure/AWS).--Must
Hands-on with F5 BIG-IP, Palo Alto, Fortinet, Citrix ADC, plus deep knowledge of TCP/IP, routing protocols, TLS, VPNs, and cloud-native security controls.--MustEnsure compliance with UAE banking regulations, perform penetration test remediation, lead L3 incident response, and design resilient architectures with failover/DR capabilities.--Must
UAE banking exposure  required 
mandatory certifications (F5, PCNSE, NSE, Citrix, Azure/AWS Security), strong troubleshooting and collaboration skills.--


Role OverviewWe are hiring a Network Security Engineer with 5+ years of experience to design, implement, and manage advanced network security solutions across hybrid and cloud environments. The role requires expertise in firewall/WAF lifecycle management, cloud security, and compliance with UAE banking regulations. Key Responsibilities

• 
  
• Own firewall and WAF rule lifecycle: design, review, implementation, optimization, and recertification.
  
• Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.
  
• Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions.
  
• Integrate network security controls with SIEM/SOAR and telemetry; develop actionable runbooks.
  
• Implement Azure/AWS network security (VNet/VPC, NSGs/NACLs, PrivateLink, Transit Gateway/Virtual WAN, Firewall/IDS/IPS).
  
• Deploy and govern cloud WAF and application gateways; embed guardrails (IaC policy, tagging, security blueprints).
  
• Support DevSecOps workflows and resilient architecture design.
  

Required Skills

• 
  
• Hands-on expertise with:
  
  • 
    
  • F5 BIG-IP (ASM/Advanced WAF) – policy tuning, attack signatures, bot/DDoS mitigation, iRules basics.
    
  • Palo Alto Networks – App-ID/URL filtering, Threat Prevention/WildFire, Panorama.
    
  • Fortinet FortiGate/FortiManager/FortiAnalyzer – NGFW policies, IPS/AV/web filter, automation, logging.
    
  • Citrix ADC (NetScaler) – L7 load balancing, SSL/TLS, content switching, AppFW.
    
  
  
  
• Strong Azure & AWS networking/security (VNet/VPC, routing, NSGs/NACLs, Firewalls, WAF, PrivateLink, Transit Gateway).
  
• Deep protocol knowledge: TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.
  
• Proven experience in high availability, performance, and compliance design.
  

Required Experience

• 
  
• Minimum 5 years in network security engineering.
  
• UAE banking experience preferred.
  
• Strong troubleshooting under pressure, collaboration across infra/app/SOC/risk teams, and mentoring capability.
  

Good-to-Have Skills

• 
  
• Security-first mindset with pragmatic delivery.
  
• Ownership, attention to detail, and ability to lead incident response.
  

Key Deliverables

• 
  
• Align controls to UAE banking regulations (Central Bank, NESA/IAA, SWIFT CSP, PCI DSS).
  
• Perform penetration test remediation and audit support.
  
• Maintain detailed artifacts: HLD/LLD, diagrams, SOPs, risk registers, audit evidence.
  
• Lead L3 incident response (exploits, DDoS, lateral movement) with RCA and post-mortems.
  
• Design resilient architectures (HA pairs, GSLB, multi-AZ/region) and conduct failover/DR exercises.