Infrastructure Security Specialist - Jeddah - Saudi's Only

Job Title: Infrastructure Security Specialist

• **Location:**

Jeddah, Saudi Arabia

• **Duration:**

12-Month Contract - Extendable

• **Requirement:**
• Saudi National candidates only
• **Experience:**
• 4–6 years total; 3+ years in a relevant security administration role
• Share your CV to:

Position Overview

1. Perimeter Defense & Traffic Management

• **Firewall Administration:**
• Configure and maintain next-generation firewalls (NGFW) to ensure robust edge security and precise traffic inspection.
• **Edge & Web Security:**
• Manage secure web gateways, URL filtering, and proxy services to protect internal users.
• **Resiliency:**
• Administer DDoS mitigation and traffic scrubbing solutions to ensure continuous service availability.
• **Application Delivery:**
• Support advanced traffic management, including Global Server Load Balancing (GSLB), Web Application Firewalls (WAF), and secure Remote Access (VPN).

2. Identity & Access Management (IAM)

• **Network Access Control:**
• Oversee AAA services and NAC solutions to manage device visibility and enforce admission policies.
• **Authentication & MFA:**
• Support enterprise Identity Management and Multi-Factor Authentication (MFA) workflows.
• **Privileged Access:**
• Administer PAM solutions to secure, rotate, and audit administrative credentials.
• **PKI Management:**
• Manage the lifecycle of digital certificates, including issuance, renewal, and internal CA maintenance.

3. Endpoint & System Integrity

• **Host Security:**
• Deploy and tune Endpoint Detection and Response (EDR) and traditional antivirus platforms.
• **Configuration Hardening:**
• Ensure servers and network devices meet baseline security standards and manage File Integrity Monitoring (FIM).
• **Email Security:**
• Administer secure email gateways to defend against phishing, malware, and data leakage.

4. Vulnerability & Data Protection

• **Risk Assessment:**
• Execute regular vulnerability scans across systems and applications; coordinate with stakeholders for remediation and patching.
• **Data Governance:**
• Support the infrastructure integration of Data Loss Prevention (DLP) and data classification frameworks.
• **Database Security:**
• Oversee database activity monitoring and security controls to protect sensitive assets.

Required Technical Profile

• **Network Expertise:**
• Strong command of TCP/IP, routing/switching, and secure network segmentation.
• **Core Toolset Proficiency:**
• **Firewalls:**
• Experience with Cisco (Firepower/FMC) and Palo Alto.
• **Traffic/WAF:**
• Expertise in F5 modules (ASM, APM, GTM).
• **Vulnerability:**
• Proficiency in Qualys or Tenable Nessus.
• **Infrastructure:**
• Familiarity with Broadcom/Bluecoat, Arbor/Akamai, and Symantec security suites.
• **Identity:**
• Hands-on experience with Cisco ISE, Delinea (PAM), and Azure MFA.
• **Integration Skills:**
• Proven ability to manage complex integrations between SIEM, SOAR, and endpoint tools.
• **Automation:**
• Basic scripting skills (Python or PowerShell) for task automation is highly preferred.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Professional certifications (e.g., CCNP Security, PCNSA, CISSP, or vendor-specific expert certs) are an advantage.
• Analytical mindset with excellent troubleshooting and communication skills.