About the Role
The Senior Network Security Engineer will serve as the technical owner of the organization’s cloud and Microsoft 365 security posture. This role emphasizes a hands-on approach to the engineering, configuration, and administration of cloud-native security controls, carried out independently without reliance on service providers. Responsibilities will center around Entra ID, Defender XDR, and email and endpoint encryption. The position also involves the hands-on management of NDR, DLP, PAM, PAW, WAF, SASE, and database security solutions. Key duties include securing Microsoft and Oracle applications, hardening Windows/Linux systems and network infrastructure, conducting risk assessments, addressing audit findings, and leading security implementation projects while providing cybersecurity advisory.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure Entra Suite (IAM), Microsoft Defender for Endpoint/Servers (EDR/XDR), email encryption, and endpoint encryption.
- Implement and monitor security best practices for Entra ID, Exchange Online/on-prem, SharePoint, and hybrid Active Directory.
- Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
- Secure and harden Microsoft and Oracle applications as well as Windows/Linux operating systems.
- Strengthen network device configurations against CIS and NIA QCF 2022; implement secure network architecture.
- Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection.
- Drive cybersecurity programs to close gaps identified by internal/external auditors, including NCSA; lead security solution implementation projects and manage vendors.
- Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed.
Qualifications
Experience Required:
- 8–10 years of experience in cloud/cybersecurity engineering, operations, and advisory.
- Proven hands-on administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support.
- Hands-on experience with NDR, DLP, PAM, PAW, WAF, SASE, and database security tools.
- Experience in hardening Microsoft/Oracle applications and Windows/Linux systems, including audit remediation (NCSA).
- Willingness and ability to travel to data center/client locations; provide on-call support as required.
Required Certifications:
- Microsoft SC-300 (Identity and Access Administrator) – Entra ID/Entra Suite.
- Microsoft SC-200 (Security Operations Analyst) – Defender XDR (MDE/MDS).
- Microsoft SC-100 (Cybersecurity Architect Expert).
- Microsoft AZ-500 (Azure Security Engineer Associate).
- CISSP (Certified Information Systems Security Professional).
- NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop Certified Administrator).
- DLP certification (e.g., Microsoft Purview DLP or Symantec/Broadcom DLP Administrator).
- PAM certification (e.g., CyberArk Defender/Sentry or BeyondTrust Certified Administrator) – covering PAM and PAW.
- WAF certification (e.g., F5 Certified BIG-IP Administrator, Imperva, or Cloudflare WAF).
- SASE certification (e.g., Zscaler ZDTA/ZIA or Palo Alto Prisma SASE).
- Database security certification (e.g., Oracle Database Security or Imperva Data Security).
Preferred Certifications:
All certifications must be current. Equivalent recognized credentials may be considered subject to approval.
Primary Focus:
- Administration of Entra ID, Defender XDR, and email/endpoint encryption without vendor support.
- Hands-on experience across NDR, DLP, PAM, PAW, WAF, SASE, and database security tooling.
