Network Security Engineer

Goodman Masson is partnering with a new financial markets infrastructure venture under formation in Oman. Backed by prominent institutional investors, the business is building a greenfield platform from the ground up, and is now hiring at the build stage. This is a rare chance to help stand up critical market infrastructure from a blank sheet and then run what you have built.

The role

The Network and Security Engineer builds and looks after the network the platform runs on, and keeps it secure at the same time. In the build phase you help design and then stand up the network from the ground up. In the run phase you keep it working, watch it, and fix it when something breaks.

What you will do

• Help design and then build the network: segmentation and zoning, routing and switching, firewalls, load balancing, DNS, and time synchronisation, engineered for steady low-latency performance
• Set up and secure connectivity to external counterparties such as custodians, settlement banks, and market systems
• Own perimeter and internal network security in the first line: firewalls, segmentation, secure and privileged remote access, and certificate and encryption management
• Keep network devices patched and hardened, support penetration testing, and close network findings
• Lead the first response to network and security incidents, and escalate cleanly when needed
• Keep the network documented to a standard that holds up under review

What you will bring

• Degree in computer science, networking, information security, or a related field, or equivalent hands-on experience
• At least six years in network engineering, with direct hands-on responsibility for network security as well as the network itself
• Strong network design and operation: segmentation and zoning, routing and switching, firewalls, load balancing, secure remote access, and low-latency design
• Direct experience owning first-line network security including firewalls, hardening, certificates, and secure connectivity
• Experience securing external-facing connectivity in a regulated or high-assurance setting
• Experience leading the first response to a live network or security incident
• Hands-on credibility: able to configure a firewall and a switch, segment a network, read a packet capture, and challenge a vendor design
• Fluent English, written and spoken
• Also of interest
• Experience in financial services or financial market infrastructure such as a central securities depository, central counterparty, exchange, or payment system
• Experience with secure connectivity to SWIFT, Bloomberg, or the international central securities depositories
• Infrastructure-as-code and automation experience such as Terraform or Ansible
• Relevant certifications in networking such as CCNP or CCIE, and in security such as CISSPLocation and terms
• Based in Muscat, Oman.

Permanent for Omani nationals; two-year fixed-term contract for expatriate hires. Omani nationals are strongly encouraged to apply.

If this is your kind of build, please apply now!