{"id":2456163,"url":"https://alion.io/job/ghobash-group-senior-network-and-security-engineer","title":"Senior Network and Security Engineer","company":{"id":690341,"name":"Ghobash Group","domain":"ghobash.com","url":"https://alion.io/company/ghobash","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":24,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Abu Dhabi, United Arab Emirates"],"countries":["AE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":120000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"BGP","optional":false},{"name":"FortiGate","optional":false},{"name":"IBM QRadar","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"OSPF","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-13T07:36:18Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-18T08:45:43Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"CNS is a technology company that powers the future by providing digital solutions essential to support all enterprise and human development. While growing and managing a robust pool of supplier-partners for the benefit of our clients has always been a priority, we are constantly re-inventing ourselves.\nFounded in 1987 with more than 35 years of experience, CNS employs over 320 employees including more than 250 certified engineers. We offer in-depth expertise and a range of best-in-class products that support the digital transformation of all major industries. With offices in three countries, we have an extensive reach into, and regional knowledge of the Middle East markets.\nA shift into levering our many years of experience to develop pioneering software in-house will add yet another dimension to our highly innovative solutions-portfolio.\n Design, deploy and hand over enterprise security and data-centre projects for CNS customers across the UAE. The role is hands-on: the engineer leads implementations end to end - Next-Gen Firewalls, Zero Trust, NAC, F5 application delivery and Cisco ACI - and acts as the technical escalation point for the team.\nDUTIES & RESPONSIBILITIES:\nDesign and architecture\nGather customer requirements and produce High-Level Design (HLD) and Low-Level Design (LLD) documents for security and data-centre solutions.\nDesign segmentation, firewall policy, Zero Trust access and NAC policy models aligned with customer security standards.\nReview existing customer environments and recommend hardening, migration and consolidation paths.\nDeployment and migration\nLead end-to-end deployments: staging, configuration, integration, cut-over and post-go-live support.\nPlan and execute firewall and load-balancer migrations (policy conversion, rule clean-up, rollback plans) with minimal downtime.\nIntegrate security platforms with AD/LDAP, RADIUS/TACACS+, PKI, SIEM and SOAR.\nWrite and run User Acceptance Test (UAT) plans and deliver as-built documentation and knowledge transfer to customers.\nOperations and support\nAct as L3 escalation for network and security incidents; lead root-cause analysis for major incidents.\nCarry out preventive maintenance (PM) health checks, firmware upgrades and vulnerability remediation within agreed maintenance windows.\nMeet SLA targets on assigned tickets and keep ticketing tools up to date.\nTeam and customer delivery\nSupport pre-sales with solution sizing, BoQ review, SOW and RFP technical responses.\nPresent technical status to customer stakeholders and internal management.\n Education:\nMinimum :\nBachelor’s degree in Computer Science, Electrical/Telecom Engineering or IT (or equivalent experience).\nAt least one of: CCNP Security or CCNP Enterprise / Data Center; PCNSE; Fortinet NSE 7 / FCSS; F5 Certified Technology Specialist (301/302/303).\nDesired:\nCCIE Security / Data Center / Enterprise.\nCisco ISE or ACI specialist certification.\nExperience:\nMinimum:\nMinimum 10 years in enterprise networking, including 5+ years delivering network security projects.\nDesired:\nSystem integrator or managed-services experience in the UAE/GCC.\nHands-on delivery of multi-vendor firewall and F5 migrations.\n Skills & Abilities:\nMinimum:\nNext-Gen Firewall - Palo Alto, FortiGate, Cisco FTD/FMC: HA deployments, policy migration, IPS, URL filtering, SSL decryption, VPN.\nFortinet Security Fabric - FortiManager, FortiAnalyzer, FortiEMS, FortiZTP, FortiSandbox, FortiADC, FortiMail.\nZero Trust / ZTNA / SASE - ZTNA rollouts replacing legacy VPN; IdP integration (Entra ID, Okta) and MFA.\nNetwork Access Control - Cisco ISE, Aruba ClearPass, FortiNAC: 802.1X, MAB, guest/BYOD, posture, profiling, TrustSec.\nApplication delivery - F5 BIG-IP LTM, GTM, Advanced WAF, APM; F5OS / rSeries / VELOS.\nData-centre fabric - Cisco ACI (APIC), Nexus 9000: fabric bring-up, tenants/VRF/BD/EPG, L3Out, service graphs.\nLayer 2 / Layer 3 - VLANs, STP, LACP, vPC; BGP, OSPF, EIGRP, VRF, HSRP/VRRP, VXLAN EVPN.\nZero-touch SD-WAN - Fortinet SD-WAN (FortiZTP + FortiManager) large-scale branch rollouts.\nDesired:\nSecurity operations - SIEM (Splunk, QRadar), EDR, vulnerability scanners, CIS hardening.\nAutomation - Python, Ansible, REST APIs, Terraform for bulk configuration and policy migration.\nClear written English for HLD/LLD, method statements, change requests and customer reports.\nValid UAE driving licence; willing to work maintenance windows and join an on-call rota.\nCompliance with policies and procedures based on the ISO standards adopted by CNS.","description_format":"text","description_chars":4503,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Systems Integrators","Oil & Gas","Investment Holding Companies"],"lifecycle":[{"event":"open","at":"2026-10-13T16:08:11Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":35,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ghobash-group-senior-network-and-security-engineer","json_url":"https://alion.io/job/ghobash-group-senior-network-and-security-engineer.json","meta":{"generated_at":"2026-10-18T11:55:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17784,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":690341},"rest":"https://alion.io/mcp/rest/get_company?id=690341"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fghobash-group-senior-network-and-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fghobash-group-senior-network-and-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fghobash-group-senior-network-and-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ghobash-group-senior-network-and-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fghobash-group-senior-network-and-security-engineer"}]}