Kreate Technologies jobs
2 Jobs Found
<p> <strong>Key Responsibilities:</strong> </p> <ul> <li>Configure, manage, and troubleshoot Fortinet solutions, including FortiGate, FortiWeb, FortiADC, FortiManager, and FortiAnalyzer.</li> <li>Manage Cisco ACI fabric, policy-based networking, application profiles, tenants, bridge domains, contracts, EPGs, and policies.</li> <li>Administer Cisco Firepower Threat Defense (FTD), FMC, FortiGate firewalls, VPNs, and related security appliances.</li> <li>Operate and maintain Web Application Firewalls (WAFs) to protect applications.</li> <li>Implement and maintain IPSec/SSL VPNs, including site-to-site and remote-access configurations.</li> <li>Monitor firewall, IPS, and endpoint security logs and alerts.</li> <li>Coordinate with cybersecurity teams on incident detection, response, and forensic investigations.</li> <li>Participate in emergency response activities.</li> <li>Conduct network and security audits and prepare compliance reports.</li> <li>Manage security assets, firmware upgrades, patching, and iOS upgrades.</li> <li>Document network designs, configurations, disaster recovery procedures, and change management processes.</li> <li>Mentor junior staff and provide Level 3 support for escalated network and security issues.</li> </ul> <p> <strong>Minimum Qualifications:</strong> </p> <ul> <li>Bachelor's degree in Computer Science, Information Technology, or a related field.</li> <li>7+ years of enterprise network administration experience.</li> <li>5+ years of experience managing firewalls and cybersecurity systems.</li> <li>Proven hands-on experience with FortiWeb, FortiADC, and Cisco ACI.</li> <li>Strong experience with FortiGate, Cisco Firepower, and VPN solutions.</li> <li>Practical experience deploying and managing Cisco ISE for policy enforcement, 802.1X authentication, posture assessment, and dynamic VLAN assignments.</li> <li>Experience provisioning and implementing network firewall and application security solutions.</li> </ul> <p> <strong>Required Technical Skills:</strong> </p> <ul> <li>Strong knowledge of Layer 2/Layer 3 networking, EIGRP, and VXLAN.</li> <li>Expertise in Cisco ACI architecture and configuration.</li> <li>Hands-on experience with Cisco FTD and FMC.</li> <li>Proficiency in FortiGate configuration and troubleshooting.</li> <li>Experience with NGFW, IDS/IPS, and VPN technologies.</li> <li>Understanding of TCP/IP networking and web application architecture.</li> <li>Proficiency in Cisco ISE, including profiling, posture assessment, TrustSec, pxGrid integration, and Active Directory integration.</li> <li>Python or Ansible scripting and automation knowledge would be an advantage.</li> </ul> <p> <strong>Preferred Certifications:</strong> </p> <ul> <li>CCNP Enterprise or Security.</li> <li>Cisco Certified Specialist ACI or CCIE Enterprise Infrastructure/Security.</li> <li>Fortinet NSE4 NSE7.</li> <li>Certified Ethical Hacker (CEH) optional.</li> <li>ITIL Foundation an advantage.</li> </ul> <p> <strong>Key Soft Skills:</strong> </p> <ul> <li>Strong analytical and problem-solving abilities.</li> <li>Ability to manage multiple high-priority tasks and projects.</li> <li>Excellent communication and documentation skills.</li> <li>Leadership and mentoring capabilities.</li> <li>Security-first mindset and attention to detail.</li> </ul> <br><p><strong>Desired Candidate Profile</strong></p><ul> <li>Bachelor's degree in Computer Science, Information Technology, or a related field.</li> <li>7+ years of enterprise network administration experience.</li> <li>5+ years of experience managing firewalls and cybersecurity systems.</li> <li>Proven hands-on experience with FortiWeb, FortiADC, and Cisco ACI.</li> <li>Strong experience with FortiGate, Cisco Firepower, and VPN solutions.</li> <li>Practical experience deploying and managing Cisco ISE for policy enforcement, 802.1X authentication, posture assessment, and dynamic VLAN assignments.</li> <li>Experience provisioning and implementing network firewall and application security solutions.</li> <li>Strong knowledge of Layer 2/Layer 3 networking, EIGRP, and VXLAN.</li> <li>Expertise in Cisco ACI architecture and configuration.</li> <li>Hands-on experience with Cisco FTD and FMC.</li> <li>Proficiency in FortiGate configuration and troubleshooting.</li> <li>Experience with NGFW, IDS/IPS, and VPN technologies.</li> <li>Understanding of TCP/IP networking and web application architecture.</li> <li>Proficiency in Cisco ISE, including profiling, posture assessment, TrustSec, pxGrid integration, and Active Directory integration.</li> <li>Python or Ansible scripting and automation knowledge would be an advantage.</li> <li>CCNP Enterprise or Security.</li> <li>Cisco Certified Specialist ACI or CCIE Enterprise Infrastructure/Security.</li> <li>Fortinet NSE4 NSE7.</li> <li>Certified Ethical Hacker (CEH) optional.</li> <li>ITIL Foundation an advantage.</li> <li>Strong analytical and problem-solving abilities.</li> <li>Ability to manage multiple high-priority tasks and projects.</li> <li>Excellent communication and documentation skills.</li> <li>Leadership and mentoring capabilities.</li> <li>Security-first mindset and attention to detail.</li> </ul>
<ol><li><p>Configure and manage <strong>NGFW, WAF, EDR, SIEM, IAM, PAM, DLP, NAC, VPN, IDS/IPS, Secure Web Gateway, Email Security and MFA</strong> solutions.</p></li><li><p>Design, implement and update security policies and rules.</p></li><li><p>Perform <strong>log source onboarding and security tool integrations</strong>.</p></li><li><p>Implement system hardening and secure configuration practices.</p></li><li><p>Monitor security dashboards, logs and alerts and investigate security incidents.</p></li><li><p>Support incident <strong>containment, eradication and recovery</strong> activities.</p></li><li><p>Perform daily operational health checks and ensure service availability.</p></li><li><p>Coordinate with OEM/vendors for troubleshooting and technical escalations.</p></li><li><p>Support vulnerability scanning, result validation and remediation activities.</p></li><li><p>Coordinate with system owners for patching and vulnerability remediation.</p></li><li><p>Track and report remediation progress and compliance status.</p></li><li><p>Apply cybersecurity frameworks including <strong>ISO 27001, NIST CSF and CIS Controls</strong>.</p></li><li><p>Troubleshoot network and security issues involving <strong>TCP/IP, ARP, ICMP, DHCP, HTTP, SNMP, IPsec and IPv6</strong>.</p></li><li><p>Use protocol analysis tools such as <strong>Wireshark and TCPDump</strong>.</p></li><li><p>Follow <strong>ITIL and Change Management</strong> best practices.</p></li><li><p>Support on-call and after-hours activities when required.</p></li></ol><p><strong>Desired Candidate Profile</strong></p><p><strong>Cybersecurity:</strong> NGFW, WAF, EDR, SIEM, IAM, PAM, DLP, NAC, VPN, IDS/IPS, SWG, Email Security, MFA, ATP</p><p><strong>Networking:</strong> TCP/IP, ARP, ICMP, DHCP, HTTP, SNMP, IPsec, IPv6, Wireshark, TCPDump</p><p><strong>Platforms:</strong> Linux, VMware</p><p><strong>Frameworks:</strong> ISO 27001, NIST CSF, CIS Controls</p><p>Preferred Certifications</p><ul><li><p>CCNA / CCNP</p></li><li><p>Palo Alto <strong>PCNSE</strong></p></li><li><p>Fortinet <strong>NSE4 / FCP</strong></p></li><li><p><strong>CISM / CISA</strong></p></li><li><p><strong>CEH</strong></p></li><li><p>CompTIA Security+</p></li><li><p>Microsoft <strong>SC-200 / SC-300</strong></p></li><li><p>Splunk certifications</p></li><li><p>Firewall / Network / ATP / Cybersecurity certifications</p></li></ul><br><p><strong>Mandatory requirement: </strong>Omani national candidates only.</p>