مهندس أمن شبكات

About the Role

Konecta is seeking a hands-on Network & Security Engineer to support daily network and security operations across MEA sites. The ideal candidate will have practical experience with Fortinet, Palo Alto, and Cisco technologies, along with a solid understanding of firewalls, VPNs, routing, network troubleshooting, and security policies.

The role involves maintaining secure and reliable network connectivity, supporting new site deployments, monitoring network devices, and assisting with PCI DSS compliance activities.

Key Responsibilities.

1. Firewall & Security Administration

• Configure, manage, and troubleshoot Fortinet FortiGate, Palo Alto, and Cisco ASA/Firepower firewalls.
• Maintain firewall rules, NAT, ACLs, network segmentation, and internet filtering policies.
• Configure and troubleshoot IPsec VPNs, SSL VPNs, GlobalProtect, and Cisco AnyConnect.
• Monitor firewall logs, investigate suspicious activity, and support security incident resolution.
• Assist with high-availability monitoring, failover testing, and firmware updates.

2. Network Operations & Troubleshooting

• Support daily LAN, WAN, Wi-Fi, routing, and connectivity operations.
• Configure and troubleshoot VLANs, trunking, inter-VLAN routing, static routes, and network switches.
• Monitor network performance, bandwidth utilization, and device health.
• Troubleshoot connectivity issues, latency, packet loss, DHCP conflicts, and firewall policy issues.
• Assist with network upgrades, patching, and hardware replacements.

3. New Site Deployment & Connectivity

• Support new office deployments, including firewall, routing, VPN, switching, Wi-Fi, and network segmentation setup.
• Coordinate with ISPs for connectivity circuits, IP assignments, and testing.
• Validate network readiness and ensure compliance with corporate standards.

4. Security Monitoring & PCI Compliance

• Perform daily health checks on firewalls, switches, and network devices.
• Review security alerts, firewall logs, and suspicious traffic patterns.
• Support vulnerability remediation, configuration hardening, and security patching.
• Assist with PCI DSS audits, vulnerability scans, penetration test findings, and evidence collection.
• Maintain network diagrams, firewall rule documentation, incident logs, and change records.

5. Documentation & Governance

• Maintain accurate network configurations, SOPs, troubleshooting guides, and change logs.
• Follow IT governance, incident management, and change management procedures.
• Escalate complex technical and security incidents when required.

Requirements & Qualifications

• 1–3 years of hands-on experience in network or security engineering.
• Practical experience configuring and troubleshooting Fortinet FortiGate firewalls.
• Experience with Palo Alto firewalls, security policies, NAT, VPNs, or GlobalProtect.
• Experience with Cisco ASA/Firepower firewalls or Cisco networking technologies.
• Good understanding of routing, VLANs, NAT, VPNs, ACLs, and network segmentation.
• Experience supporting daily network operations and resolving connectivity issues.
• Basic knowledge of PCI DSS, vulnerability scanning, or security audits is an advantage.
• Familiarity with ITIL processes and ticketing systems is a plus.

Preferred Certifications

• Fortinet NSE or relevant Fortinet certification.
• Palo Alto PCCSA or PCNSA.
• Cisco CCNA.
• CompTIA Security+ or equivalent security certification.
• ITIL Foundation or PCI-related training is an advantage.

Soft Skills

• Strong troubleshooting and analytical skills.
• Attention to detail and commitment to security standards.
• Good communication and teamwork.
• Proactive, customer-focused approach.
• Ability to follow procedures, document activities, and escalate issues appropriately.
• Willingness to learn and develop advanced networking and security skills.