Security Solutions Engineer

Job Summary:

The successful candidate will be responsible for safeguarding the organization’s digital assets, infrastructure, and customer environments against evolving cyber threats. This role involves a combination of hands-on security engineering, architecture design, threat analysis, and policy development across on-premises, cloud, and hybrid systems.

Tasks and Responsibilities:

1. Infrastructure & Network Security

• Design, configure, and maintain security controls across LAN/WAN, data centers, and cloud networks.
  
• Implement and manage firewalls, IPS/IDS, secure VPNs, and segmentation policies.
  
• Administer and monitor Next-Generation Firewalls (NGFW) such as Fortinet FortiGate, Cisco ASA/Firepower, Palo Alto Networks, or similar.
  
• Manage and audit network access control (NAC) systems and network visibility tools.
  
• Apply Zero Trust principles (ZTNA, micro-segmentation, and continuous authentication).
  

2. Endpoint, Server & Application Security

• Deploy and manage endpoint protection platforms (e.g., SentinelOne, Microsoft Defender for Endpoint, CrowdStrike).
  
• Maintain server security baselines for Windows and Linux environments.
  
• Apply security hardening across Active Directory, DNS, DHCP, mail, and web servers.
  
• Implement EDR/XDR solutions, ensuring continuous monitoring and proactive remediation.
  
• Collaborate with software teams to ensure applications follow secure coding and OWASP guidelines.
  

3. Cloud & Identity Security

• Implement identity and access management (IAM) solutions across hybrid environments.
  
• Configure MFA, SSO, and conditional access policies via Azure AD, Okta, or similar.
  
• Secure cloud workloads (Azure, AWS, or GCP) through encryption, key management, and IAM policies.
  
• Regularly audit access logs, role assignments, and privileged accounts.
  
• Support secure integration between on-prem and cloud applications (VPN, ExpressRoute, SASE).
  

4. Security Awareness & Training

• Conduct regular training sessions for employees to promote security best practices.
  
• Develop awareness campaigns around phishing, password hygiene, and safe remote access.
  
• Collaborate with HR and management to integrate security onboarding for new hires.
  

5. Research, Development & Continuous Improvement

• Stay informed about emerging threats, exploits, and industry trends.
  
• Evaluate and recommend new security solutions, automation tools, and managed services.
  
• Participate in vendor webinars, security communities, and certification programs.
  
• Contribute to long-term security roadmap planning and budget forecasting.
  

Qualification (Education/Work Experience) :

· Hands-on expertise with Fortinet (FortiGate, FortiAnalyzer, FortiManager), Sophos (XG,Intercept X, Central), and Cisco security solutions (ASA, Firepower, Umbrella, ISE).

· Strong understanding of network security, VPN, encryption, IPSec, SSL, and NAC.

· Experience with cloud security (Azure/AWS/GCP) is a plus.

· Knowledge of Saudi cybersecurity regulatory frameworks: NCA ECC, SAMA Cybersecurity Framework.

· Preferred certifications: Fortinet NSE 4–7, Sophos Certified Engineer, Cisco CCNP Security,