Senior Network Security Engineer SA📣 Job Ad

About the Role

DeepSource Technologies is seeking a Senior Network Security Engineer to join their team in Jeddah, KSA. This full-time position requires an individual with deep technical experience in network security and infrastructure management.

Key Responsibilities

The Senior Network Security Engineer will be responsible for several critical tasks aimed at optimizing network performance, security posture, and manageability. This includes:

• Identifying and removing unused or orphaned IP addresses on F5 BIG-IP load balancers to enhance efficiency.
• Reviewing, validating, and removing obsolete firewall policies across data centers while maintaining security and compliance.
• Ensuring firewall and load balancer changes align with high availability (HA) and disaster recovery (DR) requirements.
• Performing comprehensive assessments of network devices, applications, databases, and components using public IP addresses.
• Analyzing application, service, and security dependencies to understand the impact of network changes.
• Classifying firewall rules and DNS entries based on criticality, usage, and business relevance.
• Developing detailed cleanup and migration plans, including sequencing, timelines, backups, and rollback procedures.
• Designing and allocating private IP address ranges compatible with existing network architecture.
• Assessing and analyzing DNS records to identify and address invalid or outdated entries.
• Executing cleanup and migration activities securely and audibly, ensuring service continuity.
• Coordinating with application, systems, SOC, and operations teams for rule alignment and access controls.
• Conducting post-change testing and validation to confirm service availability and security.
• Establishing periodic review procedures for firewall rules, F5 configurations, IP addressing, and DNS records.
• Maintaining comprehensive documentation of all activities, including changes, issues, and resolutions.
• Supporting audit, compliance, and regulatory requirements through proper documentation and change tracking.

Qualifications and Experience

Candidates should possess the following qualifications and experience:

• Strong hands-on experience with Next-Generation Firewalls (NGFW), security policies, NAT, and access control management.
• Proven expertise with F5 BIG-IP (LTM), including VIPs, Self IPs, SNATs, and HA configurations.
• Solid understanding of enterprise IP addressing, DNS, routing, and network security architecture.
• Experience operating in HQ/DR, high-availability, and mission-critical environments.
• Strong knowledge of change management, rollback planning, and risk mitigation.

Education and Certifications

A Bachelor’s degree in Computer Science, Information Technology, or a related field is preferred. Relevant certifications such as CCNP Security, F5-CA/CTS, NSE, or equivalent are highly desirable.