Senior Engineer- Network and Security

To design and implement network and security infrastructures in Data Center On-Premises Campus and Public Cloud environments (with a primary focus on Azure cloud). The candidate should possess experience in technical solution proposals designing implementing integrating and migrating Network Security solutions. As a Technical Lead you will be responsible for leading technical workshops project planning tasks vendor engagements and Bill of Quantity (BoQ) revisions client interactions supervising deployment configurations and maintaining the network and security infrastructures.ResponsibilitiesDesign and implement various Data center networking technologies including data center fabric (Spine & Leaf topology with Cisco ACI Juniper Apstra) and SDN (such as VMware NSX-T).Design and Implement Core and Perimeter firewalls for different technology providers such as Cisco Palo-Alto Fortinet and Juniper in on-prem and Public Cloud environments (mainly Azure cloud)Design and implement the Network and Security environment on the Public CloudsWith the main focus on Azure cloud including the Landing-Zone and related Network Security components (native cloud and 3rd party services) as per the design.Migration of on-prem infrastructure to a public/private cloud environment and between On-Prem locationsDesign implement connectivity including Azure ExpressRoute Virtual WAN and VPN connections for Azure hybrid cloud environmentsConduct regular security assessments and vulnerability scans of Azure resourcesand ensure alignment Azure Well-Architected frameworkDesign and implement Azure Security Center Azure Sentinel and other securitymonitoring toolsDevelop and maintain disaster recovery and business continuity plans for Azure-based systemsStay up-to-date with the latest Azure networking and security features and best practicesDesign & Implement Email Security solutionDesign and implement a VPN solutionDesign and implementation of Identity and Access management solutionDesign and implement IPT and Collaboration environmentDesign and Implement Wireless networksDevelop and maintain High level Design (HLD) and low-level designs (LLD) documents Network-Security diagrams Network-Security installation configuration & guides support procedures test plans and runbookPrepare the required Rack diagrams cabling power and capacity requirements work closely with the Passive infrastructure teams to ensure cabling power capacity are met and as required for Data Center hosting.Work closely with 3rd party technology providers when required.Conduct user acceptance testing and fully support the implementation team totroubleshoot any issues during the implementation phasePlan and execute the Operation Readiness process and Handover to the end userDue diligence exercises and information gathering for the clients network securityinfrastructure (Assessment Exercise)Project ManagementPerform the project scope gather client requirements and manage communicationsIdentify project tasks/activities and develop project schedules.Collaborate with team members and project stakeholdersEffectively communicate project objectives and goalsComplete project activities on time within budget and within scopeProject DeliverablesDevelop implementation plansPrepare the Technical Solution Proposal documentPrepare the High-Level Design (HLD) documentPrepare the Low-Level Design (LLD) documentPrepare Network Implementation Plan (NIP) documentPrepare Network Migration Plan (NMP) documentPrepare Network Ready for Use (NRFU) documentMinimum QualificationsBachelors degree or equivalent in Computer Science or related Engineering fieldAzure Security Engineer (AZ-500) certification (Preferred) with additional certifications such as AZ-700 (Designing and Implementing Microsoft Azure Networking Solutions) (Must)Azure solution Architect certified (AZ-305) (preferred)Cisco Certified Internetwork Routing and Switching/Security/Data Center (CCIE)(preferred)Cisco Certified Network Professional (CCNP Routing and Switching/Security/Data Centre/ Collaboration) (preferred)Palo Alto (PCNSE) or Fortinet NSE Certification (Must)VMware VCIX-NV (preferred)F5 LTM/GTM certificate or equivalent vendor certificate (Preferred)ITIL foundation certificationMinimum Experience7 to 10 years experience in the Network Security fieldHands-on experience in designing and implementing the Landing-Zone component and the network security environment on Azure public cloud including Azure native & 3rd-party servicesHands-on experience in security hardening and best practices.Hands-on experience with Network Virtualization technologies and SDN solutions such as NSX & ACIHands-on experience in designing and implementing Data Center solutions Legacy 3-tier & IP Fabric (Spine & Leaf) with EVPN-VxLAN good knowledgeStrong skills in producing and maintaining technical documentation like HLD LLD and Network diagrams etc.Experience with IP Telephony solutionsExperience with Juniper/Cisco routing switching and firewalling p