أخصائي تقني للشبكات والأمن

Job Title: Technical Specialist

Job Purpose: We are seeking a highly skilled Technical Specialist Network & Security with deep expertise in designing, implementing, and optimizing complex network and security architectures. The ideal candidate will act as a technical escalation point, drive solution design, enforce security best practices, and ensure high availability, scalability, and resilience across the enterprise infrastructure.

Qualification: Engineering Degree (Computers / Electronics)

Certification:

• Cisco CCIE, CCNP

• Palo Alto PCNSE

• F5 Certified Administrator

• Fortinet NSE Certification

• ITIL Foundation

Experience: 10 - 15 Years

Responsibilities:

• Lead the design, architecture, and deployment of network and security solutions across enterprise environments.

• Act as the final escalation point (L3) for complex network and security incidents and problem management.

• Own and drive Root Cause Analysis (RCA) for critical and recurring issues with long-term fixes.

• Provide expert-level administration, optimization and configuration of F5, Palo Alto, Fortinet, Cisco ASA, Cisco ISE, Cisco Firepower, Wireless and Aruba ClearPass.

• Optimize and configure SD-WAN, and multi-site connectivity solutions.

• Perform firewall policy, review, and optimization aligned with security and compliance standards.

• Configure and troubleshoot VPN solutions (IPsec, SSL, site-to-site, client-based).

• Evaluate, recommend, and implement new security technologies and improvements.

• Perform security architecture reviews, risk assessments, and threat mitigation planning.

• Ensure compliance with industry standards (ISO 27001, NIST, CIS benchmarks, etc.).

• Lead vulnerability management programs and coordinate remediation efforts.

• Collaborate with SOC, audit, and risk teams for security incident response and compliance.

• Drive automation and optimization using APIs, scripting, or orchestration tools.

• Raise network/security changes (CAB) with impact analysis.

• Maintain high availability through redundancy design, failover strategies, and DR planning.

• Support large-scale wireless deployments and secure access for enterprise users.

• Ensure 24/7 service reliability, including participation in on-call escalation

Mandatory:

• Strong understanding of enterprise security architecture and design.

• Expert-level knowledge of F5 (LTM/ASM/GTM), Palo Alto, Fortinet, Forcepoint, Cisco ISE, Cisco ASA/Firepower, and Aruba ClearPass.

• Deep understanding of network design (LAN/WAN/DC), routing protocols, and segmentation strategies.

• Advanced expertise in firewall rulebase optimization and security policy governance.

• Strong experience with Zero Trust Architecture (ZTA) and micro-segmentation.

• Strong understanding of SD-WAN technologies.

• Strong knowledge of threat landscape, attack vectors, and mitigation techniques.

• Understanding of network monitoring tools, SIEM integration, and performance tuning.

• Ability to lead technical discussions, solution design, and stakeholder communication.

• Exposure to SASE / ZTNA (e.g., Zscaler, Prisma Access, CrowdStrike, Centrify PAM)

• Experience with WAF (Barracuda, Cloud WAF)

• Experience in automation/scripting (Python, REST APIs, Ansible – preferred).

• Strong technical leadership and decision-making ability

• Ability to handle high-pressure incidents and critical escalations

• Excellent stakeholder management (technical & business)

• Proactive mindset with focus on continuous improvement and innovation