Job Description

ECCO Gulf Majorel Qatar is seeking an experienced Network Expert to join our team in Qatar. The Network Expert is responsible for designing, organizing, modifying, installing, and supporting QT infrastructure. This role involves the design and implementation of LAN, WAN, Internet, and intranet systems, ensuring network security, high availability, and firmware management.

Responsibilities

Implement and manage network infrastructure including routers, switches, firewalls, VPNs, and load balancers using Cisco, Aruba Network Central, F5 BIG-IP Modules (APM, LTM), and Barracuda WAF. Configure and troubleshoot network security policies, access controls, and security protocols to protect against unauthorized access, malware, and other threats. Deploy and maintain Aruba ClearPass (RADIUS and TACACS+) and ClearPass Policy Manager (CPPM), along with Forescout NAC (EyeSight, EyeControl, EyeSegment) for identity and access management. Manage and analyze inline Sandbox Solutions (FortiSandbox). Collaborate with IT operations, software development, and business units to implement network and security requirements. Develop and maintain network/security documentation (network diagrams, configurations, procedures, and policies). Stay updated with industry trends, best practices, and emerging technologies in networking and security. Proficiency in Cisco/Aruba routing and switching technologies (Cisco IOS, NX-OS, Aruba Network Central for SD Campus Access). Experience in Aruba Cloud Central integration with Forescout NAC for 802.1x authentication. Work closely with GN/NCSA for vulnerability patching based on VA reports. Collaborate with internal/external teams to restore services within SLA and provide root cause analysis. Work with government entities on integration of network security applications with SIEM solutions (basic working knowledge required). Implement, document, and streamline processes. Perform vulnerability assessments, patching, and manage EDR and NDR (Link Shadow) solutions. Advanced experience in Azure networking: Virtual Networks, subnets, NSGs, user-defined routes, Virtual WAN, load balancers, ExpressRoute, VPN gateways, and NGFW firewalls (Azure Firewall, Palo Alto, Fortinet). Use Azure Network Watcher, Network Performance Monitor, Connection Monitor, IP Flow, Packet Capture, VPN troubleshooting, NSG Flow logs, and diagnostic logs. Knowledge of Private Endpoint, Azure App Gateway/WAF, APIM, Azure Data Lake/Data Factory. Experience integrating with business analytics/app development teams. Experience with Resource Alerts, Service Health, and Alerts via Azure Monitor. Determine network and system requirements. Maintain network facilities for end-user machines (drivers, printers, PCs). Maintain servers (secure VPN, site-to-site VPN, advanced threat protection, IDS). Knowledge of different types of attacks (e.g., DDoS). Perform upgrades, patching, software deployment, and monitoring of updates for routers, switches, firewalls, mobile devices, and other IT assets. Design and conduct user training programs, provide references, and support. Monitor and analyze network performance; troubleshoot and escalate issues to vendors if required. Maintain network/server integrity, deployment, and security. Define network specifications by analyzing workflow, access, information, and security requirements. Evaluate network performance issues (availability, utilization, throughput, latency) and plan equipment selection, installation, configuration, and testing. Define network policies and procedures, establish connections, and manage firewalls.

Candidate Qualifications

Bachelor's degree in Electronics & Telecommunication, Computer Science, or related field. 9-15 years of experience in network engineering and security roles.

Must have

: Active Cloud Certification AZ-700.

Preferred (not mandatory)

:

+ PCNSE (Palo Alto).
+ Cisco CCNP or CCIE.
+ CEH.
+ F5 / Barracuda certifications or trainings.
+ Aruba ACCA / AACAS certification or training.
+ ITIL v4 certification.

Technical Expertise

Hands-on knowledge and strong experience with:


Cisco WLC / Aruba Cloud Central Wireless Solution (RF and roaming profile tuning). Cisco Firewall (ASA, Firepower), Palo Alto Firewall (managed by Panorama), FortiGate Firewalls, Sophos Firewalls. Cisco ACI or any Software Defined Networking Solution. Cisco ISE, Forescout NAC. Barracuda WAF, FortiADC/Web, F5, Azure/GCP Cloud Networking. Routing and switching (L2/L3). Network routing protocols (OSPF, BGP, PBR, etc.). Nexus Technology (N9K, N7K, N5K). Network diagnostic, monitoring, and analysis. IoT gateways, sensors, and associated wireless solutions. Enterprise and Data center class networks and operations. * Deploying and managing large enterprise wired and wireless infrastructure.