Sr Engineer- Network And Security M F D

To design and implement network and security infrastructures in Data Center, On-Premises, Campus, Private (VMware, OpenStack) and Public Cloud environments. The candidate should possess experience in technical solution proposals, designing, implementing, integrating, and migrating Network Security solutions. As a Technical Lead, you will be responsible for leading technical workshops, project planning tasks, vendor engagements, Bill of Quantity (BoQ) revisions, client interactions, supervising deployment configurations, and maintaining the network and security infrastructures.

Responsibilities

Key Accountabilities

• Design and Implement various Data center networking technologies including data center fabric (Cisco Spine & Leaf topology with Nexus Dashboard), and integration with SDN (OpenStack Neutron), for a multi-tenancy private cloud environment.
• Design and Implement the Data Center fabric with BGP-EVPN & VxLAN
• Design and Implement Core and Perimeter firewalls for different technology providers, such as Cisco, Palo-Alto, Fortinet and Juniper, in on-prem and Cloud environments (public & Private clouds)
• Design and Implement Intrusion Prevention System for different technology providers, such as Trend Micro, in on-prem and Cloud environments (Private clouds)
• Design and Implement load balancer, WAF and GSLB solutions for different technology providers, mainly F5 LTM, F5 ASM, F5 GTM, and F5 NGINX Plus, in on-prem and Cloud environments (Private cloud)
• Design and Implement the Network and Security environment on the Private Cloud side, as per the design.
• Migration of on-prem infrastructure to the destination environment
• Design, implement connectivity, WAN, VPN connections, Internet, DCI (Data Center Interconnect)
• Conduct regular security assessments and vulnerability scans of network and security resources, and ensure alignment with standard framework and security best practices
• Develop and maintain disaster recovery and business continuity plans
• Design and Implement of Identity and Access management solution
• Develop and maintain High level Design (HLD) and low-level designs (LLD) documents, Network-Security diagrams, Network-Security installation configuration & guides, support procedures, test plans and runbook
• Prepare the required Rack diagrams, cabling, power and capacity requirements, work closely with the Passive infrastructure teams to ensure cabling, power, capacity are met and as required for Data Center hosting.
• Work closely with 3rd party technology providers when required.
• Conduct user acceptance testing and fully support the implementation team to troubleshoot any issues during the implementation phase
• Plan and execute the Operation Readiness process, and Handover to end user
• Due-diligence exercises and information gathering for client’s network-security infrastructure (Assessment Exercise)
• Stay up-to-date with the latest networking and security features and best practices
  
  

• Perform the project scope, gather client requirements, manage communications
• Identify project tasks/activities and develop project schedules.
• Collaborate with team members and project stakeholders
• Effectively communicate project objectives and goals
• Complete project activities on time, within budget and within scope
  
  

• Develop implementation plans
• Prepare the Technical Solution Proposal document
• Prepare the High-Level Design (HLD) document
• Prepare the Low-Level Design (LLD) document
• Prepare Network Implementation Plan (NIP) document
• Prepare Network Migration Plan (NMP) document
• Prepare Network Ready for Use (NRFU) document
  
  

• Bachelors degree or equivalent in Computer Science or related Engineering field
• Cisco Certified Internetwork Routing and Switching/Security/Data Center (CCIE) (Highly preferred)
• Red Hat Certified Engineer in Red Hat OpenStack (EX310) (Highly preferred)
• Cisco Certified Network Professional (CCNP Routing and Switching/Security/Data Centre) (Must)
• Fortinet NSE Certifications (Must)
• Palo Alto (PCNSE) Certification
• F5 LTM/GTM certificate or equivalent vendor certificate (Highly Preferred)
• Azure cloud certificates such as Azure Security Engineer (AZ-500), Azure Network Engineer AZ-700 (Preferred)
• ITIL foundation certification
  
  

• 8 - 12 years experience in Network Security field
• Hands-on experience in designing and implementing Data Center solutions, DC Fabric with Spine & Leaf topology, and BGP-EVPN with VxLAN, and Nexus Dashboard, in multi-tenancy environment.
• Hands-on experience in designing and implementing Fortinet Firewalls, F5 LTM/GTM and WAF.
• Hands-on experience on security hardening and best practices.
• Hands-on experience of Network Virtualization technologies and SDN solutions, such as VMware NSX & OpenStack Neutron
• Strong skills on producing and maintaining technical documentation like HLD, LLD and Network diagrams etc.
• Experience of routing, switching and firewalling.
• Familiarity with automation scripts and infrastructure-as-code
• Strong Experience with hybrid cloud architectures and connectivity solutions
• Knowledge of compliance standards such as HIPAA, PCI-DSS, and ISO 27001
  
  

• Familiarity with Infrastructure Automation tools Including Terraform and Ansible
• Familiarity with containerization technologies like Docker and Kubernetes
• Knowledge of Python or other scripting languages for automation tasks
• Knowledge of CI/CD pipelines and DevOps practices