Job Title:
Network & Security Operations Engineer
Certification Required:
NSE 5 minimum — NSE 7 / FCSS preferred
Location:
Onsite — Rabat, Morocco
About the Company
We are a dynamic and fast-growing AI & IT company specialising in cutting-edge technology solutions for businesses of all sizes. As we continue to expand, we are seeking a highly skilled, detail-oriented, and motivated Network & Security Operations Engineer to join our team.
Role Summary
The Network & Security Operations Engineer is the primary Day 2 owner of the entire Fortinet security fabric protecting the platform. You maintain service continuity, respond to security events and network incidents, manage configuration changes through the change control process, and ensure the logging and audit trail infrastructure is operational at all times — a compliance-critical requirement for this government platform. You work alongside the Infrastructure & Platform Operations Engineer, who owns the compute, Kubernetes, and backup layer. Together, the two roles provide full-stack operational coverage with clear domain ownership.
Day-to-Day Responsibilities
Monitoring & Incident Response
• Monitor FortiAnalyzer dashboards and alert feeds for security events, anomalous traffic, and policy violations across all zones.
• Triage WAF alerts from FortiWeb: distinguish false positives from genuine threats, tune policies, and escalate confirmed incidents through the defined severity ladder.
• Monitor FortiGate HA pair health: failover readiness, session table, CPU/memory baselines, and interface status.
• Respond to FortiSwitch alerts: port flaps, uplink failures, spanning-tree events, and VLAN mismatches.
• Own the first-response runbook for network and security incidents — document, contain, and escalate per the agreed SLA thresholds.
Change & Configuration Management
• Process and implement firewall rule change requests through the change control board: validate business justification, implement on FortiManager, push to FortiGate, and produce evidence.
• Manage VLAN and port changes on FortiSwitch: coordinate with the application and infrastructure teams to ensure correct zone placement.
• Maintain FortiPAM user roster: onboard new privileged accounts, offboard leavers, enforce least-privilege RBAC, and produce monthly session audit reports.
• Track and apply FortiOS, FortiSwitch, FortiWeb, and FortiManager firmware updates through the approved maintenance window process.
• Renew and manage SSL/TLS certificates on FortiADC and FortiWeb ahead of expiry.
Compliance & Audit
• Validate daily that log ingestion is functioning across all Fortinet components into FortiAnalyzer — any gap is a compliance incident.
• Generate periodic access, session, and policy-change audit reports for security team consumption.
• Conduct quarterly firewall rule reviews: identify stale, overly permissive, or undocumented rules and raise change requests for remediation.
• Support any external security assessments or audits with evidence packs from FortiAnalyzer and FortiManager.
Documentation & Continuous Improvement
• Maintain as-built accuracy: update network topology diagrams, VLAN registers, and IP plans after any change.
• Update and improve operational runbooks based on incident learnings.
• Identify recurring alert patterns and propose WAF tuning or firewall policy improvements to reduce noise.
Must-Have Requirements
• FortiGate operations experience in a production environment: policy management, rule review, HA monitoring, firmware upgrades.
• FortiManager operations: config push, managed-device monitoring, RBAC, audit trail review.
• FortiAnalyzer or equivalent SIEM: log ingestion monitoring, security event investigation, report generation.
• VLAN and switching operations: port changes, trunk management, VLAN troubleshooting.
• NSE 5 minimum — NSE 7 / FCSS preferred. Certificate copy required at interview.
• Experience operating network/security infrastructure in a government, critical infrastructure, or regulated environment.
• Familiarity with PAM platforms: session monitoring, privileged account lifecycle.
• On-site availability in Morocco on a permanent or long-term basis.
Good-to-Have
• FortiWeb WAF operations: signature updates, alert tuning, false-positive management.
• FortiPAM-specific experience (or CyberArk / BeyondTrust in a comparable role).
• FortiADC or equivalent ADC/load-balancer operations (F5 LTM, Citrix NetScaler).
• SSL certificate lifecycle management across multiple services.
• Familiarity with API/PNR data classification requirements or aviation/border security data handling.
• English, French, or Arabic language capability is highly valued for effective communication across teams.
Application Process
Interested applicants are invited to apply via LinkedIn and send their updated CV to [email protected]. Join us in driving the region’s digital transformation and play a key role in securing the Network & Security Operations Engineer position.
Only shortlisted candidates will be contacted.
#WeAreHiring #NetworkSecurity #OperationsEngineer #Multilingual #AItechnologies #CareerOpportunity #JobsInMorocco #ITJobsMorocco #MoroccoJobs #rabat #HiringMorocco #DalilTech
Data Protection & Privacy Statement
By applying for this role, you consent to the collection and processing of your personal data in accordance with Morocco’s Law 09‑08 on the Protection of Individuals with regard to the Processing of Personal Data. Your information will be used strictly for recruitment purposes, stored securely, and retained only for as long as necessary to complete the hiring process.
You may request access, correction, or deletion of your personal data at any time by contacting our HR Department. Your information will not be shared with third parties except where required for recruitment processing and always with appropriate safeguards.
By applying for this role, you consent to the collection and processing of your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 (PDPL). Your information will be used only for recruitment purposes, kept secure, and retained only as long as necessary. You may request access, correction, or deletion of your data at any time by contacting our HR Department. Your data will not be shared with third parties except where required for recruitment and with appropriate safeguards
