Company
QatarEnergy is an integrated national oil corporation that stands at theforefront of efforts for the long term sustainable

development,utilization and monetization of oil and gas resources in the State ofQatar. In its efforts to become one of the

best national energycompanies in the world, QatarEnergy's activities and those of itssubsidiaries and joint ventures,

encompass the entire spectrum of theoil and gas value chain locally, regionally, and internationally. Theyinclude the

exploration, refining and production, marketing, and sale ofoil and gas, liquefied natural gas (LNG), natural gas

liquids(NGL), gasto liquids (GTL) products, refined products, petrochemicals,fertilizers, steel and aluminum. As an

integrated corporation,QatarEnergy's activities also include marketing and sale of oil and gasand other various products.

QatarEnergy's operations and activities areconducted at various onshore locations, including Doha, Dukhan and

theMesaieed and Ras Laffan Industrial Cities; and at various offshoreareas, such as offshore oilfields production stations,

drillingplatforms, Halul oil export island, and the North Field, which is thelargest single non-associated gas reservoir in the

world covering anarea of 6,000 square kilometers. The utilization of this field’s massivereserves has become a primary
national goal to continue the developmentand prosperity of the country. QatarEnergy pays the utmost attention tothe health

and safety of its employees, contractors, visitors and thelocal communities where it operates. From drilling to

construction,operations to decommissioning, QatarEnergy's health, safety andenvironment policy forms an integral part of

the corporation’s dailybusiness and long term planning. QatarEnergy is committed to contributeto a better future by meeting
today’s economic needs, while safeguardingour environment and resources for generations to come. Thriving oninnovation
and excellence, QatarEnergy is bound to the highest levels ofsustainable human, socio-economic, and environmental

development inQatar and beyond.

Department
INFORMATION & COMMUNICATION TECHNOLOGY

Primary purpose of job
QatarEnergy is looking to recruit a Senior Systems Engineer under the field of Infrastructure Security who will join a team

responsible for the preservation of information confidentiality, integrity and availability of ICT Network security solutions

that support QatarEnergy Trading business applications and operations.

The new member is required to support and maintain the day-to-day security operations and system change lifecycle of

critical security systems & services. The engineer shall provide senior technical support for selected security devices and

services in addition to providing guidance to other team members in the relevant specialized technology. The role will be an

enabler to the company’s success through development and implementation of security practices that create a secure
working environment.

Experience & Skills

• Have eight or more years of demonstrated experience in IT network security operations functions. Experience in

supporting trading organizations for their system implementation, software development, data & quantitative analysis, as

well as production environment is an advantage.

• Design and implement security controls in line with QatarEnergy ’s security policies for trading applications to ensure

information security consistency and compliance. Identify security gaps and providing the right security controls to ensure

continuous security enhancement in close coordination with the team lead.

• Design, deploy, and manage setups related to multiple data centers as well as cloud security functions for Microsoft

Azure, Amazon AWS, and Google GCP. Have full understanding of the different cloud models (Iaas, SaaS, PaaS), and of

cloud architecture details such as hub and spoke, high availability and fault tolerance. Be able to identify the threat vectors

for each landscape.

• Design, deploy, integrate network security technologies to support trading applications deployment in multi-site and

IAAS/PAAS based cloud environment in general and Microsoft Azure landing zone in specific. Such security controls

include, but are not limited to firewalls, reverse proxy technologies for application protection services covering as a

minimum web application firewalls, load balancers, virtual patching, secure authentication to applications including MFA,

sandboxing, etc.

• Manage and support DNS, proxy, VPN, as well as DDoS protection services in order to ensure robust and secure access

to/from the internet in a Microsoft Azure landing zone environment as well as on-premises data center.

• Provide the required support in response to security incidents/evidence collection tasks to help identify abnormal activities

and attacks, if any. In addition, provide support to maintain availability of implemented systems security infrastructure

including blocking IOCs and mitigating vulnerabilities.

• Manage, maintain configuration, availability and system lifecycle of internal, perimeter as well as cloud-based security

appliances and services to ensure continuous business support as well as develop and maintain system documentation

and versioning to ensure up-to-date documentation of implemented technologies such as High-Level Designs, Low-Level

Designs, hardening documents, etc.

• Have strong project management skills in addition to superb technical implementation and troubleshooting skills. Be

equipped with multitasking capability, effective problem solving as well as strong analytical skills.

• Have high commitment to continuous quality improvement as well as exemplary professional practice. Have strong

presentation skills that help in gaining acceptance of from impacted stakeholders. Have proficiency in written and spoken

English.

• Certification in Microsoft Azure, AWS security or equivalent is an advantage.
• Specialist Certification in network security related systems such as firewalls, application delivery controllers including

proxy/reverse proxy technologies, sandboxing technologies, SSL offloading, web application firewalls.

• Familiarity with current information security best practices and standards such as ISO, NIST, etc.