Summary
AVAR is hiring an IT Engineer for its head office in Dubai, in an on-site role. The engineer will design, implement, secure, and support the company’s network and IT infrastructure, including firewalls, wireless access, VPNs, identity systems, endpoint protection, backups, and disaster recovery. The role also includes documentation, change management, audit support, end-user assistance, and incident response. Applicants need at least five years of IT infrastructure experience, including three years in a lead or ownership role supporting environments with 100 or more users.
The posting
As published on avarglobal.com. Pulled from the employer's site and shown as they wrote it.
Role Overview
AVAR is looking for a highly skilled IT Engineer to take full ownership of its IT infrastructure design, implementation, and management. As part of our team in Head Office - Dubai, you'll work in an ONSITE environment applying a security-first mindset to architect and maintain our robust, enterprise-grade systems. This is a hands-on position with end-to-end responsibility, blending deep technical expertise in networking, system engineering, and information security. You will lay the foundation for and support a secure, resilient network that meets the needs of users across wired, wireless, and remote environments while driving best practices and compliance in all infrastructure operations.
Responsibilities
- Design and implement secure, segmented enterprise network infrastructure with multi-VLAN architecture.
- Configure Layer 2/3 switching, routing, and build core IT systems from the ground up.
- Deploy advanced network protection controls such as DHCP snooping, Dynamic ARP Inspection, and port security.
- Configure and manage next-generation firewalls, adopting a default-deny model and implementing threat protection mechanisms like IPS, antivirus, and application control.
- Enforce network access control and port-based authentication (802.1X) and dynamic VLAN assignment.
- Deploy and manage enterprise wireless solutions supporting corporate and secure guest networks.
- Implement secure VPNs with multi-factor authentication, ensuring remote access maintains consistent security standards.
- Design and manage Active Directory environments, DNS/DHCP integration, Group Policy, and RBAC.
- Implement endpoint protection, including disk encryption, application whitelisting, device control, and patch management.
- Define backup and disaster recovery strategies; conduct recovery tests and ensure data integrity is maintained.
- Maintain clear documentation (network diagrams, VLANs, firewall rules, runbooks), following structured change management processes.
- Ensure all infrastructure aligns with internal security policies and proactively address gaps while supporting audits.
- Provide direct hands-on support across systems, infrastructure, and end-user environments, leading incident response for IT outages and disruptions.
Must have requirements
- Minimum 5 years of professional experience in IT infrastructure (network & systems engineering).
- At least 3 years in a lead or ownership position supporting environments with 100+ users.
- Demonstrable hands-on expertise in enterprise networking (L2/L3), VLANs, high availability routing, AV and firewall deployments (NGFW, IPS, SSL inspection).
- Strong experience with network security, policy management, and enforcement of 802.1X authentication.
- Deep exposure to deployment and management of secure wireless infrastructures (WPA3-Enterprise, RADIUS), and guest isolation.
- Proven ability to implement VPN technologies (IPsec/SSL, MFA integration).
- Comprehensive knowledge of Active Directory architecture, Group Policy, RBAC, and identity security best practices.
- Proficiency in endpoint security, device hardening, disk encryption, and patch management via centralized tools.
- Backup and recovery management (NAS, enterprise backup tools), hybrid cloud networking (Azure, AWS or similar).
- Exceptional attention to detail, strong ownership mindset, and thorough documentation skills.
- Excellent communication skills aimed at both technical and non-technical stakeholders.
- Commitment to continuous learning and staying updated with evolving technologies and threats.
Nice to have requirements
- Exposure to penetration testing methods and vulnerability management.
- Experience with SIEM and security monitoring tools.
- Familiarity with detection rules, log analysis, and automated incident response processes.
- Background in mentoring, knowledge sharing, and building team capability.