ITC Senior Network Security Engineer

Job Title: Senior Network Security Engineer
Department/Function: ITC 
Location: Basra, Iraq
Rotation: 21/21

Role Synopsis:
The field, located 50 kilometers west of Basra in Southern Iraq, is one of the largest oil fields in the world. It has produced over 10.5 billion bbls of oil in the past 50 years and has the potential to recover a further 15 billion bbls over the next 20 years.
ITC has a developing infrastructure that introduces frequent change that needs to be managed effectively and speedily. This infrastructure will see significant growth and transformation over the next five years and beyond.
The Senior Network Security Engineer will be responsible for the delivery and support of network security services across the infrastructure.  The role will be working with various ITC teams and vendors to deliver security operations and projects to agreed costs and timescales, maintaining quality and ensuring compliance with relevant governance, regulations, standards and policies. 
The role requires an individual who can work in a fast-changing environment, develop and implement modern solutions, and provide high-quality support levels.


Key Accountabilities

• Design, configure, and support secure LAN/WAN infrastructure including routers, switches, firewalls, VPNs, and load balancers.
• Implement and maintain network security solutions such as firewalls, UTM’s, NAC, and endpoint protection systems.
• Monitor network performance, troubleshoot issues, and optimize security and connectivity.
• Develop and enforce network security policies, standards, and procedures.
• Conduct vulnerability assessments and implement remediation plans.
• Collaborate with various ITC teams such as back office, field communications, and cybersecurity on incident response and recovery.
• Manage and maintain security tools and platforms, such as next-gen firewalls (e.g., Palo Alto, Fortinet, Cisco FTD), DLP, endpoint protection, and access control systems.
• Manage and maintain secure remote access technologies (e.g., IPsec, SSL VPNs).
• Ensure high availability and redundancy in network architecture.
• Document network configurations, diagrams, and processes.
• Stay current with emerging network technologies and security trends.
• Assist in developing and providing training to junior staff

Technical Skills:

• Expertise with firewall and NAC platforms (e.g., Palo Alto, Cisco FTD, Fortinet, Cisco ISE).
• In-depth knowledge of TCP/IP, DNS, DHCP, VPN, VLANs, wireless security and routing protocols.
• Hands-on approach with competency in performing low-level configuration changes via CLI or GUI.
• Solid understanding of TACACS+, Radius, MAB, 802.1x, Web AUTH, RBAC, EAP-TLS, PEAP.
• Experience with network monitoring and analysis tools (e.g., SolarWinds, Wireshark, Catalyst Centre).
• Familiarity with cloud networking and security (AWS, Azure, GCP).

Criteria & Qualification

Essential

• University level education preferably in Computer Engineering, Computer Science, or IT-related discipline.
• ITIL Foundations experienced/trained.
• CCNP/CCIE Security experienced/trained.
• Experience in designing and deploying security solutions.
• Scripting/Programming Experience.
• Ability to work within a multicultural environment.

 
Desirable

• Experience in a similar role in an oil/gas company.
• CCNP/CCIE Security certification or equivalent preferred.

 
Skills/Behavior

• Excellent communication skills (verbal and written).
• Strong analytical and interpersonal skills, and able to work with staff at all levels in the organization.
• Proactive thinking, and problem-solving skills to come up with options and solutions to complex technical issues.
• Delivery focused with good attention to details.
• Willing to challenge and be challenged.
• Self-motivated, positive attitude, energetic, collaborative, and leads by example.
• Demonstrates strong customer empathy and business understanding

If this position matches your skills or if you know someone who is suitable for the role please share the role details with them and share the CVs on sayali.kothmire@nesfircroft.com


With over 90 years' combined experience, NES Fircroft (NES) is proud to be the world's leading engineering staffing provider spanning the Oil & Gas, Power & Renewables, Chemicals, Construction & Infrastructure, Life Sciences, Mining and Manufacturing sectors worldwide. With more than 80 offices in 45 countries, we are able to provide our clients with the engineering and technical expertise they need, wherever and whenever it is needed. We offer contractors far more than a traditional recruitment service, supporting with everything from securing visas and work permits, to providing market-leading benefits packages and accommodation, ensuring they are safely and compliantly able to support our clients.