Network Specialist

About M42 and Role Overview

M42 is a global healthcare provider operating over 480 facilities in 27 countries with a workforce exceeding 20,000 professionals. We leverage advanced health technologies and precision medicine to deliver comprehensive healthcare from primary care to specialized treatments, emphasizing effectiveness and patient-centric outcomes.

We are seeking an experienced Network and Security Engineer, proficient in enterprise wireless solutions, next-generation security platforms, and cloud networking. The role demands strong architectural acumen, advanced troubleshooting skills, and leadership in deploying complex, large-scale network infrastructures across both on-premises and cloud environments. The candidate will collaborate within M42's network security team to establish design standards, promote robust security practices, and support multi-vendor networking and cloud-integrated security solutions.

Responsibilities

• Implement and operate network and security solutions with the capability to manage high-priority incidents and complex architectures.
• Provide standby support periodically, including post office hours and weekend shifts approximately once per month.
• Design scalable, secure, and high-performance network infrastructure spanning campus, branch offices, and cloud platforms.
• Lead wireless network architecture and deployment using Aruba and Cisco technologies, optimizing RF design for coverage and performance.
• Design, deploy, and maintain security architectures including next-generation firewalls, Zero Trust models, secure access solutions, DNS, web application firewalls, and load balancers.
• Create hybrid connectivity architectures integrating on-premise networks with Microsoft Azure cloud services.
• Serve as Level 3 escalation point for complex network and security-related incidents.
• Conduct root cause analysis and implement preventative strategies.
• Define network design standards, create documentation, and enforce governance models.
• Collaborate with security, cloud, and application teams to deliver holistic end-to-end solutions.
• Mentor and train junior engineering staff through knowledge transfer sessions.
• Participate in change management, design review meetings, and capacity planning.
• Engage in security audits and address identified risks promptly.
• Manage software upgrades and hardware refresh cycles, including end-of-life devices.
• Oversee technologies such as next-generation firewalls (Palo Alto, FortiGate), load balancers, web application firewalls, web proxies, private access and Zero Trust solutions (Zscaler, Fortigate), routing & switching, wireless enterprise deployments, remote access VPNs, IPSec VPNs, and Microsoft Azure cloud networking components.

Qualifications

• Hands-on expertise with Aruba ecosystems including Central, ClearPass Policy Manager (CPPM), AirWave, controllers, and Instant Access Points (IAP).
• Strong understanding of RF fundamentals and proficiency with wireless troubleshooting tools.
• Proven experience with large-scale enterprise wireless network deployments.
• Advanced operational skills working with next-generation firewalls such as FortiGate (including SD-WAN, security profiles, FortiManager, and FortiAnalyzer) and Palo Alto Networks (App-ID, Threat Prevention, WildFire, Panorama, GlobalProtect, IPSec VPN).
• Deep knowledge of F5 load balancer architecture and features covering HTTP profiles, LTM policies, SSL, web application firewall, DDoS protection, brute force attack mitigation, and OWASP Top 10 vulnerabilities.
• Expertise in Zero Trust architecture, network segmentation, and micro-segmentation strategies.
• Experience with threat detection and mitigation techniques.
• Comprehensive deployment experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Strong understanding of traffic forwarding, network authentication, and policy enforcement mechanisms.
• Expertise in Layer 2 and Layer 3 networking protocols and enterprise network design principles.
• Advanced skills in Azure networking with knowledge of VNet design, subnetting, peering, segmentation, NSG, UDR, Azure Firewall, Application Gateway, VPN Gateway, and ExpressRoute connectivity.
• Experience in cloud security architecture and hybrid network connectivity models.
• Involvement in software upgrades and hardware lifecycle management for end-of-life devices.
• Familiarity with DNS, Single Sign-On (SSO), and identity management is advantageous.
• Certifications preferred include Aruba ACMP, ACCP, ACDX (architect level preferred), Fortinet NSE 4/7, and Palo Alto Networks PCNSE.