Role Description

This is a full-time, on-site Network Engineer — L3 role based in Jubail. The Network Engineer — L3 is responsible for designing, implementing, and optimizing complex network infrastructures across enterprise environments, ensuring high availability, performance, and security. Daily work includes configuring and maintaining Cisco routers and switches, Palo Alto and Fortinet firewalls, and managing NAT policies and VPN tunnels across multi-vendor environments. The role involves performing root-cause analysis on escalated L1/L2 incidents, building and maintaining site-to-site IPSec VPN tunnels, and administering GlobalProtect remote access. The Network Engineer — L3 will collaborate with security and systems teams on infrastructure projects, participate in capacity planning and change management, and maintain accurate network documentation and runbooks.

Qualifications

Strong expertise in multi-vendor network engineering including Cisco IOS/IOS-XE/NX-OS, Palo Alto NGFW, and Fortinet FortiGate

Hands-on experience configuring Palo Alto security policies, App-ID, NAT, Threat Prevention, and GlobalProtect VPN

Proven experience building and troubleshooting site-to-site IPSec VPN tunnels — IKEv1/IKEv2 — phase 1/2

Advanced knowledge of BGP, OSPF, EIGRP, MPLS, VRF, and Cisco NAT (static, dynamic, PAT)

Solid experience with STP/RSTP/MSTP, VPC/MLAG, LACP, 802.1Q, and port-channels

Familiarity with SD-WAN, cloud networking (AWS/Azure), and automation tools (Python, Ansible, Netmiko)

Certifications such as CCNP Enterprise/Security, PCNSE, NSE4/NSE7, or CCIE are preferred

Bachelor’s degree in Computer Science, IT, or related field, or equivalent professional experience

5–10 years of hands-on enterprise network engineering experience