Network and Security Engineer
Description
About Doherty Associates
Doherty Associates (DA) has delivered IT solutions for over 30 years to some of the world’s most prestigious and demanding clients. We focus on the professional and financial services sectors, including private equity, venture capital, and legal firms, including some of the UK’s top ten law firms.
We are a Microsoft Solutions Partner with multiple Solutions Partner designations, a Tier 1 Microsoft CSP relationship, and are ISO27001 & ISO9001 accredited.
We’re a pioneering and innovative organisation; we pride ourselves on our passion and expertise in delivering transformation projects and managed services to our customers. As part of our continued growth, we are evolving our global Managed Services function and expanding our team across London and Kuala Lumpur.
About the Role
We are seeking an experienced Network & Security Engineer to join our Managed Services Security team in Kuala Lumpur.
This is primarily a hands-on network and network security engineering role. You will act as the networking Subject Matter Expert (SME) for Managed Services, providing technical leadership across our customer environments and acting as the senior escalation point for complex networking issues.
Your primary focus will include Fortinet technologies, firewalls, LAN/WAN, routing and switching, SD-WAN, VPNs, wireless networking, and network security. You will troubleshoot complex incidents, support major incidents, perform root cause analysis, and drive improvements to the resilience, performance, and security of customer networks.
You will also own network-related vulnerability management, including assessing newly disclosed vulnerabilities and zero-day threats, identifying customer exposure, determining appropriate mitigation or remediation, and planning firmware upgrades, patching, or configuration changes through to completion.
As part of the wider Security team, you will also support broader security tickets, alerts, vulnerability management, and incident response when required. This provides an opportunity to develop wider cybersecurity experience while remaining the team’s technical specialist for networking and network security.
Key Responsibilities
Act as the networking SME for Managed Services, providing technical leadership, guidance, and escalation support.
Investigate and resolve complex LAN, WAN, routing, switching, wireless, VPN, firewall, and connectivity issues.
Manage and support Fortinet technologies, including FortiGate firewalls, firewall policies, NAT, IPsec/SSL VPNs, routing, and security profiles.
Support technologies including SD-WAN, BGP, OSPF, VLANs, DNS, DHCP, switching, wireless, and site-to-site connectivity.
Support broader Fortinet technologies including FortiManager, FortiAnalyzer, FortiSwitch, and FortiAP where deployed.
Own network-related vulnerabilities across customer environments, including firewalls, switches, wireless infrastructure, and other network appliances.
Assess critical vulnerabilities and zero-day threats, determine customer exposure and risk, and define appropriate remediation or mitigation.
Plan and coordinate firmware upgrades, patching, and network security changes, considering customer impact, change windows, dependencies, and rollback requirements.
Monitor relevant vendor security advisories and drive identified network vulnerabilities through to remediation.
Lead technical investigation and root cause analysis for significant network incidents and identify preventative improvements.
Identify weaknesses in customer network environments and recommend improvements to resilience, segmentation, performance, and security.
Support the wider Security team with security tickets, alerts, vulnerabilities, and incidents when required, including exposure to SIEM, MDR, EDR/XDR, and Microsoft Defender.
Work closely with Service Desk, Security, third-party SOCs, vendors, and customers during complex incidents and remediation activities.
Develop technical documentation and runbooks, share knowledge, and mentor other engineers to improve networking capability across Managed Services.
Working Arrangements
Office Hours: Monday to Friday, Kuala Lumpur business hours, with flexibility to overlap with the London office when required.
On-call / Standby: Participation in a 24/7 standby rota for network or security escalations. Standby allowance and overtime are provided.
Location: Solaris Dutamas, Kuala Lumpur.
Working Model: Hybrid, with a minimum of 3 days per week in the office.
Skills and Experience
Essential
Strong hands-on experience as a Network Engineer, Network & Security Engineer, NOC Engineer, or similar senior technical role.
Strong experience supporting and troubleshooting enterprise network environments.
Hands-on experience with Fortinet technologies, particularly FortiGate firewalls.
Strong knowledge of TCP/IP, subnetting, VLANs, DNS, DHCP, NAT, routing, switching, and VPN technologies.
Experience supporting LAN/WAN, SD-WAN, site-to-site connectivity, and remote access solutions.
Working knowledge of routing protocols such as BGP and OSPF.
Good understanding of firewall security, network segmentation, perimeter security, and network vulnerability management.
Experience assessing and remediating network vulnerabilities, including firmware upgrades, patching, and configuration changes.
Understanding of cybersecurity principles and security incident management.
Strong troubleshooting, analytical, and root cause analysis skills.
Strong written and verbal communication skills, including customer-facing interactions.
Comfortable acting as a technical SME and providing guidance to other engineers.
Experience within an MSP, NOC, SOC, or other multi-customer technical operations environment would be highly advantageous.
Desirable
Experience with FortiManager, FortiAnalyzer, FortiSwitch, and FortiAP.
Experience implementing or supporting Fortinet SD-WAN.
Experience with enterprise wireless and switching technologies.
Experience with Microsoft Azure networking, including VNets, NSGs, VPN connectivity, and hybrid environments.
Experience working with ISPs, telecommunications providers, and third-party network vendors.
Exposure to security technologies such as Microsoft Defender, Huntress, SIEM, MDR, EDR/XDR, or similar platforms.
Experience with vulnerability management and security incident response.
Working knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and Azure security.
Certifications
Relevant certifications are preferred but not mandatory, including:
Fortinet NSE 4 or higher, particularly within the Secure Networking track.
Higher-level Fortinet certifications covering technologies such as FortiSwitch, SD-WAN, FortiManager, or FortiAnalyzer.
Cisco CCNA or CCNP Enterprise.
Relevant Microsoft Azure networking or security certifications.
CompTIA Security+ or equivalent.
ITIL Foundation or equivalent working knowledge of ITIL.
About the Person
Customer-focused with a strong service mindset.
A natural troubleshooter who enjoys solving complex network problems.
Comfortable taking technical ownership and being the point of escalation for networking.
Strong interest in both networking and cybersecurity.
Calm and decisive during major incidents and outages.
Self-motivated, organised, and comfortable working independently.
Strong sense of ownership and accountability.
Able to communicate complex technical issues clearly to customers and colleagues.
Enjoys sharing knowledge and developing the capability of other engineers.
Why Work at Doherty?
Competitive salary plus performance-related bonus.
Hybrid working (home and Kuala Lumpur office).
Wide range of company benefits.
Day off on your birthday.
Be part of an award-winning technical team.
Company-funded training and certifications, with incentive payouts for successful completion.
Salary
We offer a competitive salary based on experience and qualifications, along with a performance-related bonus scheme. Medical benefits are provided and parking is claimable.