Lead - Security Engineer (Network Infrastructure)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Petrofac is looking for a Lead Security Engineer to own the design and engineering of preventative security controls across network infrastructure, perimeter security, segmentation, and enterprise connectivity.
Key Skills for This Role
Responsibilities
- Define network security architecture standards, principles, and reference patterns
- Lead security design reviews for network, connectivity, and infrastructure changes
- Produce reusable blueprints, standards, and engineering guardrails
- Provide technical assurance and risk recommendations for network and infrastructure designs
- Architect secure segmentation models across enterprise, data centre, and remote sites
- Design and govern VLAN strategy, east west and north south traffic controls, and network access boundaries
- Implement and enhance NAC, network zoning, and policy enforcement controls
- Define secure standards for routers, switches, firewalls, and core network services
- Establish secure connectivity patterns for internal, external, partner, and remote access use cases
- Design and maintain firewall policy standards, rule lifecycle governance, and review processes
- Engineer preventative controls across next generation firewalls, IDS/IPS, proxy, and secure web gateways
- Define ingress, egress, and inter network filtering standards
Requirements
- 8–12+ years in network security engineering / infrastructure security architecture
- Strong expertise in firewalls, IDS/IPS, segmentation, and enterprise network security
- Hands on experience with routers, switches, load balancers, and secure connectivity platforms
- Strong understanding of LAN / WAN / SD WAN, remote access, and hybrid network environments
- Experience delivering preventative controls, network hardening, and secure infrastructure design
Full Job Posting
Role Purpose
- Own the design and engineering of preventative security controls across network infrastructure, perimeter security, segmentation, and enterprise connectivity.
- Act as the technical authority for secure by design network and infrastructure security architectures with strong focus on resilience, segmentation, standardisation, and automation.
Key Responsibilities
- Security Architecture & Engineering: Define network security architecture standards, principles, and reference patterns. Lead security design reviews for network, connectivity, and infrastructure changes. Produce reusable blueprints, standards, and engineering guardrails. Provide technical assurance
- Network Segmentation, Access Control & Infrastructure Protection: Architect secure segmentation models across enterprise, data centre, and remote sites. Design and govern VLAN strategy, east west and north south traffic controls, and network access boundaries. Implement and enhance NAC, network zoni
- Firewall, Perimeter & Traffic Security Engineering: Design and maintain firewall policy standards, rule lifecycle governance, and review processes. Engineer preventative controls across next generation firewalls, IDS/IPS, proxy, and secure web gateways. Define ingress, egress, and inter network filt
- Load Balancing, Application Delivery & Secure Network Services: Define secure load balancer and application delivery controller standards. Implement resilient and secure patterns for internal and external application publishing. Engineer controls for TLS inspection, certificate handling, and secure
- WAN / LAN / SD WAN Security & Connectivity Governance: Define secure design standards for WAN, LAN, internet breakout, and SD WAN environments. Architect resilient branch and campus security patterns aligned to business and operational needs. Implement segmentation, encrypted transport, routing secu
- Security Monitoring, Detection & Infrastructure Telemetry: Define infrastructure security logging and telemetry requirements across network platforms. Integrate firewalls, IDS/IPS, load balancers, and network devices with SIEM / SOC processes. Improve visibility of network flows, anomalous traffic,
- Security Automation & Operational Improvement: Automate network security configuration validation, compliance checks, and control assurance. Define repeatable engineering processes for rule reviews, device hardening, and segmentation governance. Implement infrastructure as code or policy driven appr
- Partner Oversight & Delivery Governance: Provide engineering oversight to third parties delivering network and security infrastructure services. Define technical requirements, review solution quality, and validate secure delivery outcomes.
Essential Experience Requirements
- 8–12+ years in network security engineering / infrastructure security architecture.
- Strong expertise in firewalls, IDS/IPS, segmentation, and enterprise network security.
- Hands on experience with routers, switches, load balancers, and secure connectivity platforms.
- Strong understanding of LAN / WAN / SD WAN, remote access, and hybrid network environments.
- Experience delivering preventative controls, network hardening, and secure infrastructure design.
Desirable
- Palo Alto / Fortinet / Check Point / Cisco / F5 certifications or equivalent experience.
- Experience with NAC, ZTNA, SASE / SSE, and network access control technologies.
- Familiarity with network automation, infrastructure as code, or configuration compliance tooling.
- TOGAF or architecture training.
Core Skills
- Network security architecture and design assurance
- Firewalls, IDS/IPS, and perimeter security engineering
- Segmentation, VLAN, zoning, and access control
- Routers, switches, load balancers, and traffic security
- WAN / LAN / SD WAN security governance
- Security monitoring, telemetry, and infrastructure automation
Success Measures
- Reduction in network exposure and attack surface
- Improved segmentation and access control maturity
- Firewall and rule base optimisation
- Secure onboarding of sites, services, and connectivity changes
- Increased visibility and assurance across network security controls
Positioning Summary
- Network focused, prevention led security engineering centred on secure connectivity, resilient infrastructure, segmentation, and scalable guardrails.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Petrofac
Senior Manager - Project Control
Sharjah, UAE
Petrofac seeks a Senior Manager for Project Control in Sharjah, UAE, to lead project planning, scheduling, and progress monitoring for oil and gas projects. Requires a graduate engineer with approximately 20 years of exp
Senior Finance Analyst
Sharjah, UAE
Petrofac seeks a Senior Finance Analyst to execute budgeting, forecasting, management reporting, and cash flow analysis. The role involves analyzing financial data, preparing variance reports, and overseeing cost budgets
Deputy Quality Manager (Onshore Site )
Abu Dhabi, UAE
Petrofac seeks a Deputy Quality Manager for an onshore site in Abu Dhabi to implement the site quality management system, coordinate inspections, manage subcontractor quality, and ensure compliance with codes and standar
Construction Site Manager (Multidiscipline)
Abu Dhabi, UAE
Petrofac seeks a Construction Manager for onshore oil & gas projects in Abu Dhabi. The role involves managing construction activities, subcontractors, budgets, and schedules while ensuring safety and quality. Requires a
Commissioning Manager (Multidiscipline)
Abu Dhabi, UAE
Petrofac is hiring a Commissioning Manager to lead a team of discipline engineers in preparing and executing commissioning of process plants in Abu Dhabi. The role requires managing commissioning plans, safety procedures
Sr. Inspector - Quality
Abu Dhabi, UAE
Petrofac seeks a Senior Inspector for quality assurance of piping, welding, and coating on Das Island. The role involves monitoring fabrication, installation, and testing processes, ensuring compliance with codes and sta
Senior Inspector - Quality
Abu Dhabi, UAE
Petrofac is seeking a Senior Inspector - Quality (EIT) for its Module Yard in Abu Dhabi to conduct inspections and testing of electrical, instrumentation, and telecom installations. The role requires a Diploma in Electri
Sr. Inspector - Quality
Abu Dhabi, UAE
Petrofac is seeking a Senior Inspector I - Quality with expertise in piping, welding, and coating for its fabrication yard in Abu Dhabi. The role involves monitoring fabrication processes, reviewing welding procedures, p
Senior Manager - Project Control
Sharjah, UAE
Senior Finance Analyst
Sharjah, UAE
Deputy Quality Manager (Onshore Site )
Abu Dhabi, UAE
Construction Site Manager (Multidiscipline)
Abu Dhabi, UAE
Commissioning Manager (Multidiscipline)
Abu Dhabi, UAE
Sr. Inspector - Quality
Abu Dhabi, UAE
Senior Inspector - Quality
Abu Dhabi, UAE
Sr. Inspector - Quality
Abu Dhabi, UAE