DAG Group
Network Security Engineer
On-siteDubai - United Arab EmiratesPosted today
About the role
Role & responsibilities
Job Description
- Position: Network & Security Engineer
- Location: Dubai
- Reporting To: CTO
Role Overview
We are seeking a hands-on Network & Security Engineer to secure our enterprise network and run day-to-day security operations across head office, warehouses and branch sites.
Key Responsibilities
Network Security
- Design and maintain a secure network architecture across head office, warehouses and branches.
- Administer enterprise firewalls (policies, IPS, web filtering, application control) and site-to-site and remote-access VPNs.
- Secure switching and wireless networks; implement VLAN segmentation, NAC and Zero Trust access.
Security Platforms
- Administer the ManageEngine security suite and enterprise platforms: IAM, PAM, SIEM, EPP, MDM and DLP.
- Manage email security (anti-phishing, SPF, DKIM, DMARC) and XDR, integrated with SIEM.
- Manage SSO, MFA and Conditional Access across Active Directory and Microsoft 365 (Entra ID).
Security Operations
- Monitor and respond to security alerts and incidents across network, endpoint, email and Microsoft 365.
- Run vulnerability and patch management, investigations and remediation, including with external vendors.
Governance & Improvement
- Maintain security policies, architecture diagrams and technical documentation.
- Support compliance with ISO 27001, UAE Information Assurance standards and UAE PDPL.
- Identify and implement security automation and improvements.
Required Skills & Experience
- Hands-on administration of enterprise firewalls (SonicWall, Fortinet, Palo Alto or equivalent) and switching and wireless (HPE Aruba or equivalent).
- Strong knowledge of VLANs, secure routing, VPN, NAC, IDS/IPS and Zero Trust.
- Experience with ManageEngine, SIEM, EPP and XDR platforms.
- Experience with IAM, PAM, Active Directory, Entra ID, SSO, MFA and Conditional Access.
- Experience with email security platforms (Barracuda, Check Point, Microsoft Defender or equivalent).
- Ability to produce architecture diagrams, security policies and documentation.