Summary
Malomatia is seeking a Network Security Engineer to own and operate its cloud and enterprise network security controls. The role covers hands-on administration of Azure and GCP networking, Fortinet, F5, Palo Alto, Cisco ISE, wireless and switching infrastructure, as well as NDR, DLP, PAM and WAF. The engineer will review configurations, apply security best practices, support risk assessments and product evaluations, and provide on-call incident support. Applicants should have 8–10 years of relevant experience and the stated platform certifications; travel to datacenter and client sites is required as needed. The role is based in Doha, Qatar.
The posting
As published on malomatia.com. Pulled from the employer's site and shown as they wrote it.
Technical owner of the organization's cloud and network security posture. Primarily hands-on – engineering, configuring, and administering cloud-native and on-premises network security controls without service-provider reliance.
Administration of Azure and GCP cloud networking, and enterprise network security platforms including Fortinet, F5, Palo Alto, Cisco ISE, WLC, and switching infrastructure.Hands-on experience across NDR, DLP, PAM, WAF.
Responsibilities
- Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure and GCP cloud networking, and enterprise network/security platforms including Fortinet, F5, Palo Alto, Cisco ISE, WLC, and switching infrastructure.
- Implement and monitor security best practices across Azure/GCP cloud networking and enterprise firewall, WAF, and NAC platforms.
- Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, WAF
- Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection.
- Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed.
Qualifications
- 8–10 years in cloud/cybersecurity engineering with hands-on ownership of Azure/GCP cloud networking and enterprise network security platforms.
- Proven administration of Fortinet, F5, Palo Alto, Cisco ISE, WLC, and switching infrastructure without vendor support.
- Willing and able to travel to datacenter/client sites and provide on-call support as needed.
Required Certifications
- Microsoft Oracle /Google Azure Certification
- NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop certified administrator).
- F5 Certified BIG-IP Administrator (WAF) – Mandatory.
- Firewall administration certification (Fortinet/PaloAlto)
- Cisco ISE and Wireless administration