Network Security Engineer

Goodman Masson is partnering with a new financial markets infrastructure venture under formation in Oman. Backed by prominent institutional investors, the business is building a greenfield platform from the ground up, and is now hiring at the build stage. This is a rare chance to help stand up critical market infrastructure from a blank sheet and then run what you have built. The role The Network and Security Engineer builds and looks after the network the platform runs on, and keeps it secure at the same time. In the build phase you help design and then stand up the network from the ground up. In the run phase you keep it working, watch it, and fix it when something breaks. What you will do Help design and then build the network: segmentation and zoning, routing and switching, firewalls, load balancing, DNS, and time synchronisation, engineered for steady low-latency performanceSet up and secure connectivity to external counterparties such as custodians, settlement banks, and market systemsOwn perimeter and internal network security in the first line: firewalls, segmentation, secure and privileged remote access, and certificate and encryption managementKeep network devices patched and hardened, support penetration testing, and close network findingsLead the first response to network and security incidents, and escalate cleanly when neededKeep the network documented to a standard that holds up under review What you will bring Degree in computer science, networking, information security, or a related field, or equivalent hands-on experienceAt least six years in network engineering, with direct hands-on responsibility for network security as well as the network itselfStrong network design and operation: segmentation and zoning, routing and switching, firewalls, load balancing, secure remote access, and low-latency designDirect experience owning first-line network security including firewalls, hardening, certificates, and secure connectivityExperience securing external-facing connectivity in a regulated or high-assurance settingExperience leading the first response to a live network or security incidentHands-on credibility: able to configure a firewall and a switch, segment a network, read a packet capture, and challenge a vendor designFluent English, written and spoken Also of interest Experience in financial services or financial market infrastructure such as a central securities depository, central counterparty, exchange, or payment systemExperience with secure connectivity to SWIFT, Bloomberg, or the international central securities depositoriesInfrastructure-as-code and automation experience such as Terraform or AnsibleRelevant certifications in networking such as CCNP or CCIE, and in security such as CISSP Location and terms Based in Muscat, Oman. Permanent for Omani nationals; two-year fixed-term contract for expatriate hires. Omani nationals are strongly encouraged to apply. If this is your kind of build, please apply now!