Primary Purpose of the Job

QatarEnergy is looking to recruit a Senior Systems Engineer under the field of Infrastructure Security who will join a team responsible for the preservation of information confidentiality, integrity and availability of ICT Network security solutions that support QatarEnergy Trading business applications and operations.
The new member is required to support and maintain the day-to-day security operations and system change lifecycle of critical security systems & services. The engineer shall provide senior technical support for selected security devices and services in addition to providing guidance to other team members in the relevant specialized technology. The role will be an enabler to the company’s success through development and implementation of security practices that create a secure working environment.

Required Experience and Skills

• Have eight or more years of demonstrated experience in IT network security operations functions. Experience in supporting trading organizations for their system implementation, software development, data & quantitative analysis, as well as production environment is an advantage.
• Design and implement security controls in line with QatarEnergy ’s security policies for trading applications to ensure information security consistency and compliance. Identify security gaps and providing the right security controls to ensure continuous security enhancement in close coordination with the team lead.
• Design, deploy, and manage setups related to multiple data centers as well as cloud security functions for Microsoft Azure, Amazon AWS, and Google GCP. Have full understanding of the different cloud models (Iaas, SaaS, PaaS), and of cloud architecture details such as hub and spoke, high availability and fault tolerance. Be able to identify the threat vectors for each landscape.
• Design, deploy, integrate network security technologies to support trading applications deployment in multi-site and IAAS/PAAS based cloud environment in general and Microsoft Azure landing zone in specific. Such security controls include, but are not limited to firewalls, reverse proxy technologies for application protection services covering as a minimum web application firewalls, load balancers, virtual patching, secure authentication to applications including MFA, sandboxing, etc.
• Manage and support DNS, proxy, VPN, as well as DDoS protection services in order to ensure robust and secure access to/from the internet in a Microsoft Azure landing zone environment as well as on-premises data center.
• Provide the required support in response to security incidents/evidence collection tasks to help identify abnormal activities and attacks, if any. In addition, provide support to maintain availability of implemented systems security infrastructure including blocking IOCs and mitigating vulnerabilities.
• Manage, maintain configuration, availability and system lifecycle of internal, perimeter as well as cloud-based security appliances and services to ensure continuous business support as well as develop and maintain system documentation and versioning to ensure up-to-date documentation of implemented technologies such as High-Level Designs, Low-Level Designs, hardening documents, etc.
• Have strong project management skills in addition to superb technical implementation and troubleshooting skills. Be equipped with multitasking capability, effective problem solving as well as strong analytical skills.
• Have high commitment to continuous quality improvement as well as exemplary professional practice. Have strong presentation skills that help in gaining acceptance of from impacted stakeholders. Have proficiency in written and spoken English.

Educational Qualifications

Bachelor’s degree in Computer Science or a related field.
• Certification in ISC2 CISSP, CompTIA Security+, Cisco CCIE or CCNP security or equivalent proven experience is an advantage.
• Certification in Microsoft Azure, AWS security or equivalent is an advantage.
• Specialist Certification in network security related systems such as firewalls, application delivery controllers including proxy/reverse proxy technologies, sandboxing technologies, SSL offloading, web application firewalls.
• Familiarity with current information security best practices and standards such as ISO, NIST, etc.

SR. SYSTEMS ENGINEER