Infrastructure Security Engineer (Fortinet / WAF / DNS Security)

We are seeking an experienced Infrastructure Security Engineer to join our Infrastructure Security Tower. The role is focused on securing the network perimeter, protecting application traffic, and ensuring the resilience of our managed security infrastructure. The ideal candidate will have solid hands-on experience with Next-Generation Firewalls, Web Application Firewalls, DNS security technologies, and network security operations across multi-vendor environments.

Key Responsibilities:

• Manage security technologies that protect our network and applications.
• Configure and maintain NGFW policies, IPS/IDS signatures, SSL inspection features, and VPN configurations across Fortinet, Palo Alto Networks, and Checkpoint platforms.
• Optimize Web Application Firewall (WAF) rules to ensure robust application-layer protection aligned with OWASP standards.
• Continuously monitor firewall, DNS, and remote access logs; escalate suspicious activities to the Security Operations Center (SOC) for investigation.
• Collaborate with OEM and vendor support teams, handling firmware upgrades, applying vulnerability patches, and reviewing configuration best practices.
• Support ongoing vulnerability remediation, assist in incident follow-ups, and prepare systems for compliance audits.
• Maintain documentation related to system configurations, change requests, SOPs, and operational runbooks in alignment with change-management procedures.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Network Engineering, Information Technology, or a related field.
• A minimum of 3 years of hands-on experience in network security operations or infrastructure security support.
• Strong skills in firewall policy configurations, VPN technologies, DNS security concepts, and incident response fundamentals.
• Practical experience with major security technologies, especially Fortinet (including NGFW, WAF, secure switching, and remote-access VPN).
• Familiarity with Palo Alto Networks and Checkpoint firewalls is advantageous.
• Exposure to Infoblox Secure DNS and Nutanix Hyperconverged Infrastructure is preferred.

Location:
Riyadh, Saudi Arabia

Work Conditions:
On-site, Full-time