L3 Network Security Engineer
SAT Microsystems
Role:Company Description SAT Microsystems is a leading IT service provider delivering innovative solutions that reduce business costs and complexity across Saudi Arabia, the UAE, and multiple other countries. Hundreds of organizations worldwide rely on SAT Microsystems to secure, manage, and support their IT operations, giving the company deep visibility into emerging technologies and industry trends. The portfolio includes managed IT services, IT infrastructure support, database and application services, desktop support, and comprehensive cybersecurity services. SAT Microsystems also offers cloud services, NOC operations, RPA, AI and automation, IoT solutions and chatbots, IT outsourcing, and business process outsourcing, helping clients accelerate digitalization and transform their operations.
We are looking for an experienced Network & Security Engineer with strong hands-on expertise in enterprise routing, switching, firewalls, endpoint security, F5/WAF, ZTNA, SASE, SD-WAN and cloud platforms. The candidate will be responsible for managing, securing and troubleshooting enterprise network and security infrastructure, handling escalations, incident resolution and implementation activities.
Roles and Responsibilities:
Routing & Switching
Configure, manage and troubleshoot enterprise routers and switches.
Strong knowledge of routing protocols: BGP and OSPF.
Switching protocols: VTP, STP and RSTP.
Troubleshoot VLANs, inter-VLAN routing, network availability and connectivity issues.
Firewall & Network Security
Administer and troubleshoot FortiGate and Palo Alto firewalls.
Configure firewall policies, Source NAT (SNAT), Destination NAT (DNAT), IPS, Application Control and Web Control.
Manage security rules, access policies, VPN connectivity and firewall logs.
Perform firewall upgrades, rule reviews and security troubleshooting.
Email Security, Web Security & DLP
Manage email security, web filtering and Data Loss Prevention (DLP) solutions.
Hands-on experience with Forcepoint security products.
Configure security policies, monitor alerts and investigate security incidents.
Endpoint Security & EDR/XDR
Administer endpoint protection and disk encryption solutions.
Experience with Kaspersky, Trend Micro or Symantec.
Manage EDR/XDR solutions, endpoint threat monitoring, detection and response.
Perform endpoint security troubleshooting and remediation.
F5 & Web Application Firewall
Hands-on experience with F5 BIG-IP LTM, ASM and GTM (DNS).
Manage application traffic, load balancing, application security and DNS traffic distribution.
Troubleshoot application delivery and web security issues.
ZTNA, SASE & SD-WAN
Implement and support ZTNA and SASE solutions using Fortinet or other OEM platforms.
Configure and troubleshoot SD-WAN solutions across enterprise sites.
Knowledge of centralized management, secure connectivity and policy enforcement.
Cloud Infrastructure
Exposure to at least one major cloud platform: Oracle Cloud Infrastructure (OCI), Microsoft Azure or AWS.
Knowledge of cloud networking, security controls, connectivity and infrastructure troubleshooting.
Support hybrid network and cloud integration environments.
Candidate Requirements:
Strong hands-on experience in enterprise network and security infrastructure.
Good troubleshooting, incident management and root-cause analysis skills.
Ability to independently handle L2/L3 escalations and security incidents.
Experience coordinating with OEMs, vendors and cross-functional IT teams.
Relevant networking and security certifications such as CCNA, CCNP, Fortinet, Palo Alto or equivalent are preferred.
Technical Skills:
BGP | OSPF | VTP | STP | RSTP | FortiGate | Palo Alto | Forcepoint | Kaspersky | Trend Micro | Symantec | EDR/XDR | F5 LTM | ASM | GTM | WAF | ZTNA | SASE | SD-WAN | OCI | Azure | AWS
