Network Security Engineer in Banking domain

We have an urgent requirement for Network Security Engineer in Banking domain is required for our banking clients in Abu Dhabi ,UAEDesign, implement, and manage firewall/WAF lifecycle, VPNs, SD-WAN, and secure remote access across hybrid and cloud environments (Azure/AWS).--MustHands-on with F5 BIG-IP, Palo Alto, Fortinet, Citrix ADC, plus deep knowledge of TCP/IP, routing protocols, TLS, VPNs, and cloud-native security controls.--MustEnsure compliance with UAE banking regulations, perform penetration test remediation, lead L3 incident response, and design resilient architectures with failover/DR capabilities.--MustUAE Banking Exposure Requiredmandatory certifications (F5, PCNSE, NSE, Citrix, Azure/AWS Security), strong troubleshooting and collaboration skills.--Role OverviewWe are hiring a Network Security Engineer with 5+ years of experience to design, implement, and manage advanced network security solutions across hybrid and cloud environments. The role requires expertise in firewall/WAF lifecycle management, cloud security, and compliance with UAE banking regulations.🛠 Key ResponsibilitiesOwn firewall and WAF rule lifecycle: design, review, implementation, optimization, and recertification.Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions.Integrate network security controls with SIEM/SOAR and telemetry; develop actionable runbooks.Implement Azure/AWS network security (VNet/VPC, NSGs/NACLs, PrivateLink, Transit Gateway/Virtual WAN, Firewall/IDS/IPS).Deploy and govern cloud WAF and application gateways; embed guardrails (IaC policy, tagging, security blueprints).Support DevSecOps workflows and resilient architecture design.Required Skills Hands-on expertise with:F5 BIG-IP (ASM/Advanced WAF) – policy tuning, attack signatures, bot/DDoS mitigation, iRules basics.Palo Alto Networks – App-ID/URL filtering, Threat Prevention/WildFire, Panorama.Fortinet FortiGate/FortiManager/FortiAnalyzer – NGFW policies, IPS/AV/web filter, automation, logging.Citrix ADC (NetScaler) – L7 load balancing, SSL/TLS, content switching, AppFW.Strong Azure & AWS networking/security (VNet/VPC, routing, NSGs/NACLs, Firewalls, WAF, PrivateLink, Transit Gateway).Deep protocol knowledge: TCP/IP, BGP/OSPF, NAT, DNS, TLS, HTTP/S, IPsec/SSL VPN.Proven experience in high availability, performance, and compliance design.Required ExperienceMinimum 5 years in network security engineering.UAE banking experience preferred.Strong troubleshooting under pressure, collaboration across infra/app/SOC/risk teams, and mentoring capability.Good-to-Have SkillsSecurity-first mindset with pragmatic delivery.Ownership, attention to detail, and ability to lead incident response.Key DeliverablesAlign controls to UAE banking regulations (Central Bank, NESA/IAA, SWIFT CSP, PCI DSS).Perform penetration test remediation and audit support.Maintain detailed artifacts: HLD/LLD, diagrams, SOPs, risk registers, audit evidence.Lead L3 incident response (exploits, DDoS, lateral movement) with RCA and post-mortems.Design resilient architectures (HA pairs, GSLB, multi-AZ/region) and conduct failover/DR exercises.Skills: network security,bank,security