Network & Security Infrastructure Lead

About the role

A leading institution in the UAE, building a digital-first, AI-enabled financial services organisation from the ground up, is looking for a Network & Security Infrastructure Lead. You will set the strategy and architecture for connectivity and security across a 100% cloud environment, working with Information Security, Cloud, Enterprise IT, AI Platform and Site Reliability Engineering teams.

Key responsibilities

• Own the strategy for the cloud-hosted SWIFT environment, including secure-zone architecture, gateways, cloud-HSM-backed controls and annual Customer Security Programme compliance.
• Lead connectivity to UAE payment systems and CBUAE services, ensuring environments are monitored, certified and failover-tested.
• Define network security architecture and standards, including next-generation firewalls, DDoS protection, intrusion detection and prevention, DNS security and edge controls.
• Establish a network-as-code operating model with version-controlled configuration, automated pre-deployment testing, drift detection and rollback capabilities.
• Lead carrier interconnects, private cloud connectivity, office networking and connectivity to in-country cloud regions.
• Develop and govern zero-trust architecture for workforce, service and AI-agent access, including identity-aware connectivity, least-privilege access and privileged administrative pathways.
• Drive automated vulnerability and remediation practices, and ensure telemetry feeds into SOC and observability platforms.
• Lead disaster recovery and failover exercises and build and lead the Network & Security Infrastructure team.

Required profile

• 8+ years in network and security infrastructure, including setting strategy and leading technical teams in financial services or another highly regulated environment.
• Direct experience with SWIFT infrastructure, Customer Security Programme compliance and national payment system connectivity.
• Bachelor's degree in Computer Science, Network Engineering or a related discipline.
• Advantageous: network or security certifications such as CCNP/CCIE, NSE or PCNSE.

Required skills

• Deep network security engineering (firewalls, DDoS protection, IPS, segmentation, perimeter security).
• Strong knowledge of Azure and AWS networking and private cloud connectivity.
• Experience with network-as-code (Terraform, NetBox or Nautobot, Batfish) and zero-trust (ZTNA/SASE, Microsoft Entra, SPIFFE/SPIRE, mutual TLS, Istio, Cilium/eBPF).
• Experience with highly automated infrastructure operations, vulnerability management and AI-assisted engineering tools.