Senior Network Security Engineer / Cyber Security Engineer

About the role

Arwen is seeking a Senior Network Security Engineer to design, implement and protect enterprise network infrastructures for its clients across Pakistan. The role combines deep technical expertise with hands‑on deployment of leading security platforms to ensure resilient and compliant environments.

Key responsibilities

• Lead security deployments and projects, designing secure network architectures using Fortinet, Juniper SRX and Cisco Firepower solutions.
• Develop High‑Level and Low‑Level Designs (HLD/LLD) that embed strong security controls.
• Configure, deploy and manage FortiGate, FortiManager, FortiAnalyzer, Juniper SRX devices and Cisco FTD/FMC appliances.
• Design and maintain site‑to‑site, remote‑access IPSec and SSL VPNs, intrusion‑prevention systems, web‑filtering, application control and Zero‑Trust segmentation.
• Monitor threats with SIEM, EDR, IDS/IPS platforms, perform firewall policy reviews, rule optimization and vulnerability assessments.
• Respond to security incidents, open and manage TAC cases with Fortinet, Cisco and Juniper.
• Provide L2/L3 engineering support, collaborate with enterprise architecture and SOC teams, and assist in BOQ preparation.
• Coordinate with penetration‑testing and IT teams during assessments and incident response.

Required profile

• Extensive hands‑on experience with Fortinet, Juniper SRX and Cisco Firepower security solutions.
• Strong knowledge of routing and switching protocols (OSPF, BGP, VLANs, STP).
• Proven experience with security best practices, network hardening and vulnerability management.
• Ability to analyse logs, alerts and network events for troubleshooting and threat detection.
• Excellent communication skills and ability to work under pressure to meet deadlines.

Required skills

• FortiGate, FortiManager, FortiAnalyzer
• Juniper SRX
• Cisco Firepower (FTD, FMC)
• OSPF, BGP, VLAN, STP
• IPSec & SSL VPN design
• IPS/IDS, web filtering, application control
• Zero‑Trust network segmentation
• SIEM, EDR, SOAR, IDS/IPS platforms