Infrastructure Security Specialist – Jeddah – Saudi’s Only Full Time NEW

• Location: Jeddah, Saudi Arabia
• Duration: 12-Month Contract – Extendable
• Requirement: Saudi National candidates only
• Experience: 4–6 years total; 3+ years in a relevant security administration role
• Share your CV to: HR@neomatrix.tech

Position Overview

We are seeking a highly skilled Security Administrator to manage, optimize, and secure our enterprise-wide network and data infrastructure. This role focuses on the end-to-end administration of multi-vendor security platforms, ensuring high availability, robust access control, and proactive vulnerability management.

Key Responsibilities

1. Perimeter Defense & Traffic Management

• Firewall Administration: Configure and maintain next-generation firewalls (NGFW) to ensure robust edge security and precise traffic inspection.
• Edge & Web Security: Manage secure web gateways, URL filtering, and proxy services to protect internal users.
• Resiliency: Administer DDoS mitigation and traffic scrubbing solutions to ensure continuous service availability.
• Application Delivery: Support advanced traffic management, including Global Server Load Balancing (GSLB), Web Application Firewalls (WAF), and secure Remote Access (VPN).

2. Identity & Access Management (IAM)

• Network Access Control: Oversee AAA services and NAC solutions to manage device visibility and enforce admission policies.
• Authentication & MFA: Support enterprise Identity Management and Multi-Factor Authentication (MFA) workflows.
• Privileged Access: Administer PAM solutions to secure, rotate, and audit administrative credentials.
• PKI Management: Manage the lifecycle of digital certificates, including issuance, renewal, and internal CA maintenance.

3. Endpoint & System Integrity

• Host Security: Deploy and tune Endpoint Detection and Response (EDR) and traditional antivirus platforms.
• Configuration Hardening: Ensure servers and network devices meet baseline security standards and manage File Integrity Monitoring (FIM).
• Email Security: Administer secure email gateways to defend against phishing, malware, and data leakage.

4. Vulnerability & Data Protection

• Risk Assessment: Execute regular vulnerability scans across systems and applications; coordinate with stakeholders for remediation and patching.
• Data Governance: Support the infrastructure integration of Data Loss Prevention (DLP) and data classification frameworks.
• Database Security: Oversee database activity monitoring and security controls to protect sensitive assets.

Required Technical Profile

• Network Expertise: Strong command of TCP/IP, routing/switching, and secure network segmentation.
• Core Toolset Proficiency:
• Firewalls: Experience with Cisco (Firepower/FMC) and Palo Alto.
• Traffic/WAF: Expertise in F5 modules (ASM, APM, GTM).
• Vulnerability: Proficiency in Qualys or Tenable Nessus.
• Infrastructure: Familiarity with Broadcom/Bluecoat, Arbor/Akamai, and Symantec security suites.
• Identity: Hands-on experience with Cisco ISE, Delinea (PAM), and Azure MFA.
• Integration Skills: Proven ability to manage complex integrations between SIEM, SOAR, and endpoint tools.
• Automation: Basic scripting skills (Python or PowerShell) for task automation is highly preferred.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Professional certifications (e.g., CCNP Security, PCNSA, CISSP, or vendor-specific expert certs) are an advantage.
• Analytical mindset with excellent troubleshooting and communication skills.