Network and Security Engineer (UAEN only)

Role Overview

Network and Security Engineer at Du, located in UAE (UAEN only). The role is centered on technical execution—deploying, migrating, and operationalizing complex infrastructure in live enterprise environments covering VMware NSX, VMware Cloud Director (VCD), NSX Advanced Load Balancer (AVI), next-generation firewalls (Palo Alto and Fortinet), and F5 application delivery solutions.

Role Purpose

Implement, configure, migrate, and support enterprise-grade network security solutions across on-premises, hybrid, and cloud environments. Ensure secure, reliable, and compliant security deployments that enable business continuity, reduce cyber risk, and support technology transformation initiatives.

Key Responsibilities

Deployment and Configuration

• Deploy and configure VMware Cloud Director (VCD) networking, including organisation VDC networks, edge gateways, routed and isolated networks, and integration with NSX-T backed provider gateways.
• Deploy and configure NSX Advanced Load Balancer (AVI Networks), including virtual services, pool configuration, health monitors, SSL termination, WAF policies, and integration with NSX-T and VCD environments.
• Deploy and configure VMware NSX-T environments, including overlay networking (Geneve), Tier-0/Tier-1 gateways, distributed routing, Distributed Firewall (DFW), Gateway Firewall, and micro-segmentation policies.
• Deploy and manage Palo Alto Networks (PAN-OS, Panorama) and Fortinet (FortiGate, FortiManager, FortiAnalyzer) NGFW platforms, including rule-base migration, URL filtering, application control, SSL inspection, VPN configuration, and threat prevention profile tuning.
• Deploy and configure enterprise network security solutions, including next-generation firewalls (NGFW), intrusion prevention systems (IPS), and advanced threat protection tools, from staging through to production.
• Deploy and configure F5 BIG-IP (LTM, GTM, ASM/AWAF) solutions, including virtual server configuration, iRules, WAF policy deployment, SSL offloading, and health monitoring.
• Configure OCI network security controls including Security Lists, Network Firewall, Fast Connect, and OCI IAM policies in support of hybrid and private cloud environments.
• Configure and deploy secure web proxy and URL filtering solutions to enforce acceptable use and data loss prevention policies.
• Execute ADC migration and cutover activities.

Migration and Integration

• Implement Layer 2 extension across sites using NSX L2 Bridging, VMware HCX Layer 2 extension, or equivalent technologies to support workload mobility and phased migration strategies.
• Execute end-to-end migration projects, transitioning legacy network security infrastructure to modern platforms with minimal business disruption.
• Carry out security assessments of existing infrastructure to support migration planning and identify remediation requirements prior to cutover.

Compliance and Design

• Ensure all implemented solutions meet relevant security compliance standards and regulatory requirements.
• Contribute to High-Level Design (HLD) and Low-Level Design (LLD) documentation in support of implementation activities.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline, or equivalent experience.
• 4+ years of hands-on experience in network security implementation, deployment, and migration roles.
• Hands-on experience deploying VMware NSX-T/NSX-4 (overlay networking, DFW, Gateway Firewall, micro-segmentation), VMware Cloud Director (VCD) networking, NSX Advanced Load Balancer (AVI), and Layer 2 extension technologies (NSX L2 Bridge, HCX L2 extension) in production environments.
• Proven track record delivering complex security migrations and cutovers in live enterprise environments.
• Deep technical expertise in Fortinet and Palo Alto firewall platforms, including policy migration, VPN setup, and threat prevention configuration.
• Demonstrated hands-on experience deploying and integrating F5 BIG-IP (LTM, GTM, ASM/AWAF) in production environments, including virtual server build, WAF policy tuning, and SSL profile configuration.
• Experience configuring and deploying secure web proxy and URL filtering platforms.
• Familiarity with OCI network security services (Security Lists, Network Firewall, Fast Connect, OCI IAM) in support of private and hybrid cloud deployments.
• Solid understanding of security compliance frameworks (ISO 27001, PCI DSS, NIST, SOC 2) as they apply to implementation and delivery.
• Experience with vulnerability management tools and security monitoring platforms.

Skills & Competencies

VMware and Virtualization

• VMware NSX-T/NSX-4 full-stack deployment: Transport Zones, Segments, Tier-0/Tier-1 gateways, BGP/static routing, Distributed Firewall (DFW), Gateway Firewall, micro-segmentation, and NSX Manager cluster configuration.
• VMware Cloud Director (VCD) networking: organisation VDC network creation, edge gateway configuration, routed/isolated/direct network types, VCD integration with NSX-T provider gateways, and multi-tenant network provisioning.
• Layer 2 extension implementation using NSX L2 Bridging and VMware HCX L2 extension, supporting workload mobility, phased migrations, and stretched network scenarios.

Firewall and Next-Generation Security

• Fortinet (FortiGate, FortiManager, FortiAnalyzer) and Palo Alto Networks (Panorama, PAN-OS) platform deployment, policy migration, and threat prevention tuning.
• Next-generation firewall (NGFW) rule base implementation, zone-based segmentation, and SSL inspection configuration.
• VPN implementation: IPsec, SSL/TLS, and SD-WAN overlay connectivity.

Application Delivery and Load Balancing

• F5 BIG-IP (LTM, GTM, ASM/AWAF) deployment: virtual servers, iRules, WAF policy configuration, SSL offloading, and health monitoring.
• NSX Advanced Load Balancer (AVI Networks): virtual service deployment, pool configuration, health monitors, SSL termination, and WAF policy implementation within NSX-T and VCD environments.

Cloud and Hybrid Environments

• OCI network security: Security Lists, OCI Network Firewall, Fast Connect, Load Balancer, and OCI IAM policies in support of private cloud and hybrid connectivity.
• Private cloud and hybrid network security controls deployment, with a focus on VMware-based environments.
• OCI Landing Zone security configuration and brownfield security uplift for on-premises to cloud migrations.

Identity and Access Management

• IAM and PAM solution deployment and directory services integration (Active Directory, LDAP, OCI IAM policy, RBAC).

Automation and Infrastructure

• Infrastructure as Code (IaC) for security deployment automation (Terraform, Ansible).

Compliance and Security

• Security compliance frameworks: ISO 27001, PCI DSS, NIST CSF, SOC 2.

Professional and Soft Skills

• Methodical and detail-oriented approach to implementation, testing, and cutover activities.
• Strong communication skills, with the ability to coordinate across technical teams and stakeholders during live migrations.
• Ability to produce clear implementation runbooks, test plans, and post-migration reports.
• Effective under pressure, with experience managing risks and issues during time-sensitive deployment windows.
• Collaborative team player with experience working alongside architects, project managers, and operations teams.

Planning and Execution

• Network and Security platform migration planning, runbook development, and cutover execution.

Additional Information

Preferred Certifications

• VMware Certified Professional – Network Virtualisation (VCP-NV)
• VMware NSX VCIX-NV or VMware Certified Implementation Expert
• CCNP Security or equivalent Cisco security certification
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Fortinet NSE 7 or higher
• F5 Certified Solution Expert (CSE)
• OCI Network Associate

Valued Advantages

• Prior design experience across NSX, VCD, NGFW, or F5 environments.