Summary
du is hiring a Network and Security Engineer in Dubai to deploy and migrate network security and private-cloud platforms. The role covers VMware NSX-T and Cloud Director, Palo Alto and Fortinet firewalls, F5 BIG-IP, OCI security controls, and related load-balancing and web-proxy solutions. Applicants should have a bachelor’s degree or equivalent experience and at least 4 years of hands-on implementation and migration experience, with strong documentation and cutover skills. The posting specifies that applicants must be UAE nationals.
The posting
As published on du.ae. Pulled from the employer's site and shown as they wrote it.
Key Accountabilities:
Deploy and configure VMware Cloud Director (VCD) networking, including organisation VDC networks, edge gateways, routed and isolated networks, and integration with NSX-T backed provider gateways.
Deploy and configure NSX Advanced Load Balancer (AVI Networks), including virtual services, pool configuration, health monitors, SSL termination, WAF policies, and integration with NSX-T and VCD environments.
Implement Layer 2 extension across sites using NSX L2 Bridging, VMware HCX Layer 2 extension, or equivalent technologies to support workload mobility and phased migration strategies.
Deploy and configure enterprise network security solutions, including next-generation firewalls (NGFW), intrusion prevention systems (IPS), and advanced threat protection tools, from staging through to production.
Deploy and configure VMware NSX-T environments, including overlay networking (Geneve), Tier-0/Tier-1 gateways, distributed routing, Distributed Firewall (DFW), Gateway Firewall, and micro-segmentation policies.
Execute end-to-end migration projects, transitioning legacy network security infrastructure to modern platforms with minimal business disruption.
Deploy and manage Palo Alto Networks (PAN-OS, Panorama) and Fortinet (FortiGate, FortiManager, FortiAnalyzer) NGFW platforms, including rule-base migration, URL filtering, application control, SSL inspection, VPN configuration, and threat prevention profile tuning.
Configure OCI network security controls including Security Lists, Network Firewall, Fast Connect, and OCI IAM policies in support of hybrid and private cloud environments.
Deploy and configure F5 BIG-IP (LTM, GTM, ASM/AWAF) solutions, including virtual server configuration, iRules, WAF policy deployment, SSL offloading, and health monitoring. Execute ADC migration and cutover activities.
Configure and deploy secure web proxy and URL filtering solutions to enforce acceptable use and data loss prevention policies.
Carry out security assessments of existing infrastructure to support migration planning and identify remediation requirements prior to cutover.
Ensure all implemented solutions meet relevant security compliance standards and regulatory requirements.
Contribute to High-Level Design (HLD) and Low-Level Design (LLD) documentation in support of implementation activities; prior design experience across NSX, VCD, NGFW, or F5 environments is a valued advantage
Qualifications, Experience and Skills:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline or equivalent experience.
- 4+ years of hands-on experience in network security implementation, deployment, and migration roles.
- Hands-on experience deploying VMware NSX-T/NSX-4 (overlay networking, DFW, Gateway Firewall, micro-segmentation), VMware Cloud Director (VCD) networking, NSX Advanced Load Balancer (AVI), and Layer 2 extension technologies (NSX L2 Bridge, HCX L2 extension) in production environments.
- Preferred certifications include
- VMware Certified Professional – Network Virtualisation (VCP-NV)
- VMware NSX VCIX-NV or VMware Certified Implementation Expert
- CCNP Security or equivalent Cisco security certification
- Palo Alto Networks Certified Network Security Engineer (PCNSE)
- Fortinet NSE 7 or higher
- F5 Certified Solution Expert (CSE)
- OCI Network Associate.
- Proven track record delivering complex security migrations and cutovers in live enterprise environments.
- Deep technical expertise in Fortinet and Palo Alto firewall platforms, including policy migration, VPN setup, and threat prevention configuration.
- Familiarity with OCI network security services (Security Lists, Network Firewall, Fast Connect, OCI IAM) in support of private and hybrid cloud deployments.
- Demonstrated hands-on experience deploying and integrating F5 BIG-IP (LTM, GTM, ASM/AWAF) in production environments, including virtual server build, WAF policy tuning, and SSL profile configuration.
- Experience configuring and deploying secure web proxy and URL filtering platforms.
- Solid understanding of security compliance frameworks (ISO 27001, PCI DSS, NIST, SOC 2) as they apply to implementation and delivery.
- Experience with vulnerability management tools and security monitoring platforms.
- VMware NSX-T/NSX-4 full-stack deployment: Transport Zones, Segments, Tier-0/Tier-1 gateways, BGP/static routing, Distributed Firewall (DFW), Gateway Firewall, micro-segmentation, and NSX Manager cluster configuration.
- VMware Cloud Director (VCD) networking: organisation VDC network creation, edge gateway configuration, routed/isolated/direct network types, VCD integration with NSX-T provider gateways, and multi-tenant network provisioning.
- Layer 2 extension implementation using NSX L2 Bridging and VMware HCX L2 extension, supporting workload mobility, phased migrations, and stretched network scenarios.
- Network and Security platform migration planning, runbook development, and cutover execution.
- Infrastructure as Code (IaC) for security deployment automation (Terraform, Ansible).
- Fortinet (FortiGate, FortiManager, FortiAnalyzer) and Palo Alto Networks (Panorama, PAN-OS) platform deployment, policy migration, and threat prevention tuning.
- Next-generation firewall (NGFW) rule base implementation, zone-based segmentation, and SSL inspection configuration.
- VPN implementation: IPsec, SSL/TLS, and SD-WAN overlay connectivity.
- OCI network security: Security Lists, OCI Network Firewall, Fast Connect, Load Balancer, and OCI IAM policies in support of private cloud and hybrid connectivity.
- Private cloud and hybrid network security controls deployment, with a focus on VMware-based environments.
- OCI Landing Zone security configuration and brownfield security uplift for on-premises to cloud migrations.
- F5 BIG-IP (LTM, GTM, ASM/AWAF) deployment: virtual servers, iRules, WAF policy configuration, SSL offloading, and health monitoring.
- NSX Advanced Load Balancer (AVI Networks): virtual service deployment, pool configuration, health monitors, SSL termination, and WAF policy implementation within NSX-T and VCD environments.
- IAM and PAM solution deployment and directory services integration (Active Directory, LDAP, OCI IAM policy, RBAC).
- Secure web proxy and URL filtering deployment.
- Security compliance frameworks: ISO 27001, PCI DSS, NIST CSF, SOC 2.
- Methodical and detail-oriented approach to implementation, testing, and cutover activities.
- Strong communication skills, with the ability to coordinate across technical teams and stakeholders during live migrations.
- Ability to produce clear implementation runbooks, test plans, and post-migration reports.
- Effective under pressure, with experience managing risks and issues during time-sensitive deployment windows.
- Collaborative team player with experience working alongside architects, project managers, and operations teams.