Senior Network & Firewall Engineer (L3)

Job Title: Senior Network & Firewall Engineer (L3)Location: DubaiExperience10+ years of hands-on experience in enterprise networking, security, deployment, migration, and troubleshooting.Cisco CCIE Enterprise mustJob SummaryWe are seeking an experienced L3 Network & Firewall Engineer responsible for designing, deploying, migrating, optimizing, and supporting enterprise network and security infrastructures. The ideal candidate should possess deep expertise in Cisco, Fortinet, Palo Alto, Huawei, and multi-vendor networking environments. The role requires leading complex implementation and migration projects while providing Level-3 technical support for mission-critical environments.Key Responsibilities• Design, implement, and maintain enterprise LAN, WAN, Data Center, and Campus network infrastructures.• Deploy, configure, and troubleshoot Cisco, Huawei, Fortinet, and Palo Alto network and security solutions.• Lead network transformation, refresh, migration, and greenfield deployment projects.• Perform firewall policy creation, NAT configuration, VPN implementation, routing, and security hardening.• Plan and execute network migration activities with minimal downtime.• Configure and troubleshoot dynamic routing protocols including OSPF, BGP, EIGRP, and static routing.• Implement high-availability solutions for firewalls and core network infrastructure.• Manage Layer 2 and Layer 3 switching technologies including VLANs, STP, EtherChannel/LACP, VRRP/HSRP, and MLAG where applicable.• Support SD-WAN, IPSec VPN, SSL VPN, Remote Access VPN, and site-to-site connectivity.• Perform network performance analysis, capacity planning, and root cause analysis for complex incidents.• Lead technical discussions with customers, vendors, and internal project teams.• Create High-Level Design (HLD), Low-Level Design (LLD), Method of Procedure (MOP), rollback plans, and as-built documentation.• Provide L3 operational support and mentor junior network engineers.• Ensure network security compliance and adherence to organizational standards and best practices.Required Technical SkillsNetworking• Cisco Routing & Switching• Huawei Enterprise Switching• Cisco Catalyst & Nexus platforms• VLANs, STP, RSTP, MSTP• OSPF, BGP, EIGRP• VRRP, HSRP• MPLS• QoS• Multicast• DHCP, DNS• IPv4 & IPv6• Network monitoring and troubleshootingFirewalls & Security• Cisco Firepower• Fortinet FortiGate• Palo Alto Networks Firewalls• Security Policies• NAT• IPS/IDS• Application Control• URL Filtering• SSL Inspection• IPSec VPN• SSL VPN• High Availability (HA)• Security hardening and best practicesDeployment & Migration• Enterprise network migration• Firewall migration (Cisco, Fortinet, Palo Alto)• Data Center migration• Branch rollout• Network refresh projects• Change management• Cutover planning• Rollback planning• Zero/Minimal downtime migrationsPreferred Certifications• Cisco CCIE Enterprise must• Fortinet NSE 4/5/7 or Fortinet Certified Professional/Expert• Palo Alto PCNSE• Huawei HCIP/HCIE• ITIL Foundation (preferred)Soft Skills• Excellent troubleshooting and analytical skills• Strong customer-facing communication• Ability to work under pressure during critical migrations• Technical leadership and mentoring capabilities• Strong documentation and presentation skills• Ability to manage multiple projects simultaneouslyPreferred Experience• Enterprise Data Centers• Banking• Government• Healthcare• Telecom• Large Campus Networks• Managed Services• Cloud connectivity (AWS, Azure, OCI)• Hybrid network environmentsEmployment LevelSenior Engineer (L3)Reporting To: Network & Security Practice Manager / Infrastructure Manager