03/07/2023 updated


100 % available
Senior Network Technology and Cyber Security Specialist
Bahrain
Only remote
MSc Master (Master of Computer Science).Controles de AccesoAmazon Web ServicesAntivirus SoftwaresApple IOSMicrosoft AzureBackup DevicesBandwidth ManagementBorder Gateway ProtocolCloud ComputingCommunications ManagementComputer SecurityComputer NetworksContract ManagementData CentersInformation Leak Prevention
Key Responsibilities:
- Work closely with the Project Managers to manage the Project Schedules / timelines, providing leadership and direction to the Delivery teams.
- Mindset that is excellent at solving problems and finding solutions.
- Ability to manage and collaborate with stakeholders and people.
- A good understanding of IT project estimation, budgeting processes, and Project / Program Governance such as Project Planning, Resourcing, Scheduling Deliveries, Work Allocation, Risk & Issue Management, and Communication Management.
- Knowledge of cloud technologies, adoption of Open Source components, and customization of these components.
- Network and Security design for more efficiency, implementing multisite infrastructure in Data Center.
- Accountable for wired and wireless Network Infrastructure design, validation, and implementation.
- Responsible for Cloud Networking (Azure and AWS) design, validation, and implementation.
- Azure Networking solution implementations, VNET, NSG, Hub and Spoke, Express route VPN’s and UDR. Azure Security solution Implementation such as NSG and NVA Firewalls.
- NPM, NCM tools (SolarWinds) to monitor, evaluate, and report health statistics of WAN, LAN, and systems.
- Management experience with major SIEM solutions, including Splunk.
- Perform advanced level of troubleshooting on issues related to on-prem and Cloud Networking infrastructure.
- Hands-on experience in supporting Palo Alto firewalls, Routing and Switching domain, Cisco SDN solution ACI, Nexus Switching. Experience in setting up site-to-site VPN tunnels including troubleshooting.
- Cisco ACI (Software Defined Network): Good knowledge in end-to-end implementation & operations of Cisco’s SDN solution ACI and its various components. Such as physical installation and connections of the Spine & its modules, Leaf’s, APIC’s.
- Configuration & Troubleshooting of ACI: Tenants / VRF’s / Bridge Domains / Application profiles, EPG;s / Contracts / VPC’s / Interface policy groups / Interface profiles / Leaf profiles / Service graphs / VMM integration / Software upgrades / configuration snapshots & backups on APIC or FTP or SFTP server / L2 and L3-Out / static & dynamic routing / change, planning and implementation.
- Routing & Switching: Configuration and troubleshooting routing protocols (IP / BGP / OSPF / EIGRP / IGRP / RIP) HSRP / redistribution / route-summarization / route filtering (route map / prefix list / access list). Static routing / SSH / AAA radius & Tacacs / L2 & L3 Switching (VLAN / VTP / STP / VSS / TCP/IP / SNMP / DHCP/Snooping / Ether-channels / Switch stacks / Port mirroring (SPAN) / MAC & NAC based Port security / IOS upgradation / hardening of devices as per CISO’s compliance / password & configuration recovery.
- Documentation: Project Documentation /HLD & LLD / SOP’s/ Network diagrams in PPT and Visio / DR Failover documents / Inventory / Network Risk assessments / daily, weekly & monthly reports.
- Perform advanced level troubleshooting on issues related to Site-to-Site VPN, Bandwidth management solutions, Load balancers and network infrastructure.
- Deploying, configuring, managing, and troubleshooting different security NVA solution deployed in Azure, AWS like FortiGate, Palo Alto, F5 and Broadcom secure web gateways.
- Provide root cause analysis report with permanent resolution/workaround for high severity incidents within defined SLA.
- Administration and hands-on of Web Security, WAF, Firewall, IPS, IDS, DDOS, VPN, SIME, Email Security, Sandbox (malware Scanner), Proxy Service, DLP (Data Loss Prevention), EDR, MFA (Multi Factor Authentication), SSO Identity Management and XDR (Extended Detection and Response).
- In Cyber Security Offensive Security (Red Team) NMAP, TheFatrat, PowerSpolit Cobalt Strike, Metasploit Framework, Empire is among the exploitation and post-exploitation frameworks I am proficient in hacking tools.
Experience
Professional experience10+ years
Freelancer since2023
Languages
EnglishFluent
Project history
Key Responsibilities:
* Network and Security design for more efficiency, implementing multisite infrastructure in Data Center.
* Accountable for wired and wireless Network Infrastructure design, validation, and implementation.
* Responsible for Cloud Networking (Azure and AWS) design, validation, and implementation.
* Azure Networking solution implementations, VNET, NSG, Hub and Spoke, Express route VPN's and UDR.
Azure Security solution Implementation such as NSG and NVA Firewalls.
* NPM, NCM tools (SolarWinds) to monitor, evaluate, and report health statistics of WAN, LAN, and systems.
* Management experience with major SIEM solutions, including Splunk.
* Perform advanced level of troubleshooting on issues related to on-prem and Cloud Networking
infrastructure.
* Hands-on experience in supporting Palo Alto firewalls, Routing and Switching domain, Cisco SDN solution
ACI, Nexus Switching. Experience in setting up site-to-site VPN tunnels including troubleshooting.
* Cisco ACI (Software Defined Network): Good knowledge in end-to-end implementation & operations of
Cisco's SDN solution ACI and its various components. Such as physical installation and connections of the
Spine & its modules, Leaf's, APIC's.
* Configuration & Troubleshooting of ACI: Tenants / VRF's / Bridge Domains / Application profiles, EPG;s /
Contracts / VPC's / Interface policy groups / Interface profiles / Leaf profiles / Service graphs / VMM
integration / Software upgrades / configuration snapshots & backups on APIC or FTP or SFTP server / L2
and L3-Out / static & dynamic routing / change, planning and implementation.
* Routing & Switching: Configuration and troubleshooting routing protocols (IP / BGP / OSPF / EIGRP / IGRP
/ RIP) HSRP / redistribution / route-summarization / route filtering (route map / prefix list / access list).
Static routing / SSH / AAA radius & Tacacs / L2 & L3 Switching (VLAN / VTP / STP / VSS / TCP/IP / SNMP /
DHCP/Snooping / Ether-channels / Switch stacks / Port mirroring (SPAN) / MAC & NAC based Port security /
IOS upgradation / hardening of devices as per CISO's compliance / password & configuration recovery.
* Documentation: Project Documentation /HLD & LLD / SOP's/ Network diagrams in PPT and Visio / DR
Failover documents / Inventory / Network Risk assessments / daily, weekly & monthly reports.
* Perform advanced level troubleshooting on issues related to Site-to-Site VPN, Bandwidth management
solutions, Load balancers and network infrastructure.
* Deploying, configuring, managing, and troubleshooting different security NVA solution deployed in Azure,
AWS like FortiGate, Palo Alto, F5 and Broadcom secure web gateways.
* Provide root cause analysis report with permanent resolution/workaround for high severity incidents within
defined SLA.
* Administration and hands-on of Web Security, WAF, Firewall, IPS, IDS, DDOS, VPN, SIME, Email Security,
Sandbox (malware Scanner), Proxy Service, DLP (Data Loss Prevention), EDR, MFA (Multi Factor
Authentication), SSO Identity Management and XDR (Extended Detection and Response).
* In Cyber Security Offensive Security (Red Team) NMAP, TheFatrat, PowerSpolit Cobalt Strike, Metasploit
Framework, Empire is among the exploitation and post-exploitation frameworks I am proficient in hacking
tools.
* Network and Security design for more efficiency, implementing multisite infrastructure in Data Center.
* Accountable for wired and wireless Network Infrastructure design, validation, and implementation.
* Responsible for Cloud Networking (Azure and AWS) design, validation, and implementation.
* Azure Networking solution implementations, VNET, NSG, Hub and Spoke, Express route VPN's and UDR.
Azure Security solution Implementation such as NSG and NVA Firewalls.
* NPM, NCM tools (SolarWinds) to monitor, evaluate, and report health statistics of WAN, LAN, and systems.
* Management experience with major SIEM solutions, including Splunk.
* Perform advanced level of troubleshooting on issues related to on-prem and Cloud Networking
infrastructure.
* Hands-on experience in supporting Palo Alto firewalls, Routing and Switching domain, Cisco SDN solution
ACI, Nexus Switching. Experience in setting up site-to-site VPN tunnels including troubleshooting.
* Cisco ACI (Software Defined Network): Good knowledge in end-to-end implementation & operations of
Cisco's SDN solution ACI and its various components. Such as physical installation and connections of the
Spine & its modules, Leaf's, APIC's.
* Configuration & Troubleshooting of ACI: Tenants / VRF's / Bridge Domains / Application profiles, EPG;s /
Contracts / VPC's / Interface policy groups / Interface profiles / Leaf profiles / Service graphs / VMM
integration / Software upgrades / configuration snapshots & backups on APIC or FTP or SFTP server / L2
and L3-Out / static & dynamic routing / change, planning and implementation.
* Routing & Switching: Configuration and troubleshooting routing protocols (IP / BGP / OSPF / EIGRP / IGRP
/ RIP) HSRP / redistribution / route-summarization / route filtering (route map / prefix list / access list).
Static routing / SSH / AAA radius & Tacacs / L2 & L3 Switching (VLAN / VTP / STP / VSS / TCP/IP / SNMP /
DHCP/Snooping / Ether-channels / Switch stacks / Port mirroring (SPAN) / MAC & NAC based Port security /
IOS upgradation / hardening of devices as per CISO's compliance / password & configuration recovery.
* Documentation: Project Documentation /HLD & LLD / SOP's/ Network diagrams in PPT and Visio / DR
Failover documents / Inventory / Network Risk assessments / daily, weekly & monthly reports.
* Perform advanced level troubleshooting on issues related to Site-to-Site VPN, Bandwidth management
solutions, Load balancers and network infrastructure.
* Deploying, configuring, managing, and troubleshooting different security NVA solution deployed in Azure,
AWS like FortiGate, Palo Alto, F5 and Broadcom secure web gateways.
* Provide root cause analysis report with permanent resolution/workaround for high severity incidents within
defined SLA.
* Administration and hands-on of Web Security, WAF, Firewall, IPS, IDS, DDOS, VPN, SIME, Email Security,
Sandbox (malware Scanner), Proxy Service, DLP (Data Loss Prevention), EDR, MFA (Multi Factor
Authentication), SSO Identity Management and XDR (Extended Detection and Response).
* In Cyber Security Offensive Security (Red Team) NMAP, TheFatrat, PowerSpolit Cobalt Strike, Metasploit
Framework, Empire is among the exploitation and post-exploitation frameworks I am proficient in hacking
tools.
Certificates
CCIE Data Center
Cisco2023
PCNSE
Palo Alto2023
CEH
EC Council2023