SR. SYSTEMS ENGINEER

QatarEnergy is looking to recruit a Senior Systems Engineer under the field of Infrastructure Security who will join a team responsible for the preservation of information confidentiality, integrity and availability of  ICT Network security solutions.

The new member is required to support and maintain the day-to-day security operations and system change lifecycle of critical security systems & services. The engineer shall provide senior technical support for selected security devices and services in addition to providing guidance to other team members in the relevant specialized technology. The role will be an enabler to the company’s success through development and implementation of security practices that create a secure working environment.

• Bachelor’s degree in Computer Science or a related field.
• Certification in ISC2 CISSP,  CompTIA Security+, Cisco CCIE or CCNP security or equivalent proven experience is an advantage.
• Certification in Microsoft Azure, AWS security or equivalent is an advantage.
• Specialist Certification in network security related systems such as application delivery controllers including reverse proxy technologies, sandboxing technologies, SSL offloading, web application firewalls is an advantage.
• Familiarity with current information security best practices and standards such as ISO, NIST, etc.

• Have eight or more years of demonstrated experience in IT network security operations functions.
• Design and implement security controls in line with QatarEnergy ’s security policies to ensure information security consistency and compliance. Identify security gaps and providing the right security controls to ensure continuous security enhancement in close coordination with the team lead.
• Design, deploy, and manage setups related to multiple data centers as well as cloud security functions for Microsoft Azure, Amazon AWS, and Google GCP. Have full understanding of the different cloud models (Iaas, SaaS, PaaS), and of cloud architecture details such as hub and spoke, high availability and fault tolerance. Be able to identify the threat vectors for each landscape.
• Design, deploy, integrate network security technologies to support applications deployments in multi-site and IAAS/PAAS based cloud environment in general and Microsoft Azure landing zone in specific. Such security controls include, but are not limited to reverse proxy technologies for application protection services covering as a minimum web application firewalls, load balancers, sandboxing, etc.
• Manage and support Web Application and API security gateways for protection of on-prem, cloud and hybrid application solution implementations and ensuring compliance with OWASP top 10 for Applications and APIs, and other related best practices. Manage and support DDI (DNS/DHCP/ IPAM) infrastructure as well as DDOS support.
• Manage and support Microsegmentation, container/ workload security with familiarity on Infrastructure as code/ Dev-sec-ops and zero trust architecture.
• Provide the required support in response to security incidents/evidence collection tasks to help identify abnormal activities and attacks, if any. In addition, provide support to maintain availability of implemented systems security infrastructure including blocking IOCs and mitigating vulnerabilities.
• Manage, maintain configuration, availability and system lifecycle of internal, perimeter as well as cloud-based security appliances and services to ensure continuous business support as well as develop and maintain system documentation and versioning to ensure up-to-date documentation of implemented technologies such as High-Level Designs, Low-Level Designs, hardening documents, etc.
• Have strong project management skills in addition to superb technical implementation and troubleshooting skills. Be equipped with multitasking capability, effective problem solving as well as strong analytical skills.