SR. SYSTEMS ENGINEER (NETWORK SECURITY)
تفاصيل الوظيفة
Department INFORMATION & COMMUNICATION TECHNOLOGY
Title SR. SYSTEMS ENGINEER (NETWORK SECURITY)
Primary Purpose of Job QatarEnergy is looking to recruit a Senior Systems Engineer that will join a team responsible for the preservation of information confidentiality, integrity and availability of ICT systems that support business operations. The new member is required to manage, support and maintain the day-to-day security operations and system change lifecycle of critical network security systems & services. The engineer shall provide senior technical support for selected security devices and services in addition to providing guidance to other team members in the relevant specialized technology. The role will be an enabler to the company's success through development and implementation of security practices that create a secure working environment.
Education • Bachelor's degree in Computer Science/ Engineering or a related field. • Certification in ISC2 CISSP, CompTIA Security+, Cisco CCIE or CCNP security or equivalent proven experience is an advantage. • Certification in Microsoft Azure, AWS security or equivalent is an advantage. • Specialist Certification in network security related systems such as Web application firewall technologies (WAF), Multi-factor authentication solutions, DDI (DNS, DHCP and IPAM) solutions. • Familiarity with current information security best practices and standards such as ISO, NIST, etc.
Experience & Skills
• Have eight or more years of demonstrated experience in IT Network security operations functions. • Design and implement security controls in line with QatarEnergy's security policies to ensure information security consistency and compliance. Identify security gaps and provide the right security controls to ensure continuous security enhancements in close coordination with the team lead. • Design, manage and support DNS and DHCP appliances to ensure robust access to network resources and the internet, including DNS hardening and security. Manage and support IPv4 / IPv6 Private and Public Schema, VLAN and IP addresses assignments and DNS entries configuration. Manage internal and external IP address space for the organization, including registration requirements with public domain/ IP address registrars. In addition, design and provision for internal logical segmentation as per business requirements in alignment with security and networking best practices. Manage and support DNS security controls, analyze logs and implement the recommended DNS controls to mitigate security risks. • Design, deploy and manage reverse proxy technologies for application protection services covering but not limited to Web application firewalls, load balancers, virtual patching, secure authentication to applications, DDoS protection services, etc. • Design, deploy, and manage setups related to multi-site and cloud security functions for Microsoft Azure, Amazon AWS, and Google GCP. Have full understanding of the different cloud models (Iaas, SaaS, PaaS), and of cloud architecture details such as hub and spoke, high availability and fault tolerance. Be able to identify the threat vectors for each landscape. • Manage and support endpoint authentication and authorization appliances as well as multifactor token issuing appliances and services (one time password technologies) to safeguard user identities authentication. • Provide the required support in response to security incidents/ evidence collection tasks to help identify abnormal activities and attacks, if any. In addition, provide support to maintain availability of implemented security infrastructure including blocking IOCs and mitigating vulnerabilities. • Manage, maintain configuration, availability and system lifecycle of perimeter, internal and cloud-based security appliances, and services to ensure continuous business support as well as develop and maintain system documentation and versioning to ensure up-to-date documentation of implemented technologies such as High-Level Designs, Low-Level Designs, hardening documents, etc. • Have strong project management skills in addition to superb technical implementation and troubleshooting skills. Be equipped with multitasking capability, effective problem solving as well as strong analytical skills. • Have high commitment to continuous quality improvement as well as exemplary professional practice. Have strong presentation kills that help in gaining acceptance of from impacted stakeholders. Have proficiency in written and spoken English.
Apply safely
To stay safe in your job search, information on common scams and to get free expert advice, we recommend that you visit SAFERjobs, a non-profit, joint industry and law enforcement organization working to combat job scams.
