Network and Security Engineer

Education: Engineering Degree/Diploma (Computers / Electronics)

Certification: CCNA, CCNP Security, PCNSC, NSC 4 etc

Work Experience: 12+ years of IT security and compliance.

Abilities & Special Skills:

• Engage in planning, scheduling, and implementing network upgrades, implementations, and migrations for clients in a timely manner and during times that will have the least impact on the users of the affected systems.
• Comprehensive knowledge of developing and implementing the architecture and design of networks and network drawings.
• Configuring and managing the Spin-leaf, three-tier network architecture, which includes core switches, distribution switches, and access switches, leased lines, and MPLS links with high availability.
• Palo Alto Firewall with active and passive modes and configuring security policies, QOS, NAT, sub interfaces, aggregated interfaces, and virtual routers and zones FortiGate perimeter firewall with master/slave configuration, VDOM, IPsec VPN, SSL VPN with vendor-specific IP subnet, user integration with AD via LDAP, NAT configuration, and traffic shaping.
• Deployment and management of Cisco Wireless Controllers 9800 with Active/Standby, all SSID integrated with ISE for 802.1X, and vendor specific access.
• Deployment and management of Cisco ISE and SDA fabric Network for Branch offices
• Deployment and management of Cisco ACI and fabric with in-depth knowledge for maintaining BAU operations.
• Deployment and management of VMware NSX with in-depth knowledge.
• VMware, vSphere ,VCD basic to advance knowledge is required.
• Infoblox: Configuration and Managing DNS and DHCP pool
• Cisco IPS: Configuration and Managing
• SDA Fabric : Configuration and Managing DNAC and SDAenvironment
• F5 LTM: Configuration, Solution Designing, and Managing the F5 BIG IP LTM Load Balancer Creating VIPs, creating pools, and associating pools with VIPs the creation of Persistence
• Profile, SSL Profile, SSL Offloading, and iRules is intended to be a high availability solution with network failover.
• F5 GTM: configuring and managing the F5 GTM devices for the DNS solution for the external and internal websites, which is syncing between DC and DR.
• F5 APM: Creating the managing access policy in APM for VPN based traffic.
• Prepare and maintain disaster recovery plans for IT operations and participate in the organizational and customer level disaster recovery testing.

Willingness to work 24/7 support window.