Job Title : SR. SYSTEMS ENGINEER
Reference Code : OG-7004295
QatarEnergy is an integrated national oil corporation that stands at theforefront of efforts for the long term sustainable development,utilization and monetization of oil and gas resources in the State ofQatar. In its efforts to become one of the best national energycompanies in the world, QatarEnergy's activities and those of itssubsidiaries and joint ventures, encompass the entire spectrum of theoil and gas value chain locally, regionally, and internationally. Theyinclude the exploration, refining and production, marketing, and sale ofoil and gas, liquefied natural gas (LNG), natural gas liquids(NGL), gasto liquids (GTL) products, refined products, petrochemicals,fertilizers, steel and aluminum. As an integrated corporation,QatarEnergy's activities also include marketing and sale of oil and gasand other various products. QatarEnergy's operations and activities areconducted at various onshore locations, including Doha, Dukhan and theMesaieed and Ras Laffan Industrial Cities; and at various offshoreareas, such as offshore oilfields production stations, drillingplatforms, Halul oil export island, and the North Field, which is thelargest single non-associated gas reservoir in the world covering anarea of 6,000 square kilometers. The utilization of this field’s massivereserves has become a primary national goal to continue the developmentand prosperity of the country. QatarEnergy pays the utmost attention tothe health and safety of its employees, contractors, visitors and thelocal communities where it operates. From drilling to construction,operations to decommissioning, QatarEnergy's health, safety andenvironment policy forms an integral part of the corporation’s dailybusiness and long term planning. QatarEnergy is committed to contributeto a better future by meeting today’s economic needs, while safeguardingour environment and resources for generations to come. Thriving oninnovation and excellence, QatarEnergy is bound to the highest levels ofsustainable human, socio-economic, and environmental development inQatar and beyond.
INFORMATION & COMMUNICATION TECHNOLOGY
Primary purpose of job
QatarEnergy is looking to recruit a Senior Systems Engineer under the field of Infrastructure Security who will join a team responsible for the preservation of information confidentiality, integrity and availability of ICT Network security solutions that support QatarEnergy Trading business applications and operations. The new member is required to support and maintain the day-to-day security operations and system change lifecycle of critical security systems & services. The engineer shall provide senior technical support for selected security devices and services in addition to providing guidance to other team members in the relevant specialized technology. The role will be an enabler to the company’s success through development and implementation of security practices that create a secure working environment.
Experience & Skills
• Have eight or more years of demonstrated experience in IT network security operations functions. Experience in supporting trading organizations for their system implementation, software development, data & quantitative analysis, as well as production environment is an advantage. • Design and implement security controls in line with QatarEnergy ’s security policies for trading applications to ensure information security consistency and compliance. Identify security gaps and providing the right security controls to ensure continuous security enhancement in close coordination with the team lead. • Design, deploy, and manage setups related to multiple data centers as well as cloud security functions for Microsoft Azure, Amazon AWS, and Google GCP. Have full understanding of the different cloud models (Iaas, SaaS, PaaS), and of cloud architecture details such as hub and spoke, high availability and fault tolerance. Be able to identify the threat vectors for each landscape. • Design, deploy, integrate network security technologies to support trading applications deployment in multi-site and IAAS/PAAS based cloud environment in general and Microsoft Azure landing zone in specific. Such security controls include, but are not limited to firewalls, reverse proxy technologies for application protection services covering as a minimum web application firewalls, load balancers, virtual patching, secure authentication to applications including MFA, sandboxing, etc. • Manage and support DNS, proxy, VPN, as well as DDoS protection services in order to ensure robust and secure access to/from the internet in a Microsoft Azure landing zone environment as well as on-premises data center. • Provide the required support in response to security incidents/evidence collection tasks to help identify abnormal activities and attacks, if any. In addition, provide support to maintain availability of implemented systems security infrastructure including blocking IOCs and mitigating vulnerabilities. • Manage, maintain configuration, availability and system lifecycle of internal, perimeter as well as cloud-based security appliances and services to ensure continuous business support as well as develop and maintain system documentation and versioning to ensure up-to-date documentation of implemented technologies such as High-Level Designs, Low-Level Designs, hardening documents, etc. • Have strong project management skills in addition to superb technical implementation and troubleshooting skills. Be equipped with multitasking capability, effective problem solving as well as strong analytical skills. • Have high commitment to continuous quality improvement as well as exemplary professional practice. Have strong presentation skills that help in gaining acceptance of from impacted stakeholders. Have proficiency in written and spoken English.
• Bachelor’s degree in Computer Science or a related field. • Certification in ISC2 CISSP, CompTIA Security+, Cisco CCIE or CCNP security or equivalent proven experience is an advantage. • Certification in Microsoft Azure, AWS security or equivalent is an advantage. • Specialist Certification in network security related systems such as firewalls, application delivery controllers including proxy/reverse proxy technologies, sandboxing technologies, SSL offloading, web application firewalls. • Familiarity with current information security best practices and standards such as ISO, NIST, etc.