Senior Network Engineer Application Transition

Project overview

Within the FlexInfra program, you are responsible for the network side of migrating the application landscape to a hybrid Azure/Azure Local platform with Cisco Nexus fabric and Cisco Firepower/Checkpoint firewalls.

Profile of the suited interim professional:

• Inventorying traffic flows, dependencies, and security requirements per application and translating them into a network implementation plan (firewall rules, routing, segmentation, NAT, DNS, load balancing)
• Implementing these plans within the Cisco Nexus datacenter fabric and firewalls, with attention to preparation, verification, and rollback scenarios, including during migration weekends
• Designing and implementing firewall policy according to macro- and micro-segmentation and zero-trust principles, and monitoring a consistent ruleset
• Connecting workloads to Azure Local and Azure on the physical fabric and firewalls via virtual networks, gateways, hub-spoke, and landing zones
• Coordinating with application teams regarding traffic flows, ports, and dependencies, and guiding discussions for deviating connectivity requirements
• Resolving network and connectivity issues during and after migrations, from packet capture to root cause analysis
• Documenting designs and changes, delivering them through the change process (CAB), and contributing to as-built documentation
• Identifying risks and deviations from segmentation or security principles and presenting substantiated proposals to the network architect
• Reviewing plans and changes from colleagues and mentoring less experienced engineers
• Coordinating with other FlexInfra projects regarding migration order, capacity, and changes
• Minimum of 8 years of work experience as a network engineer, with at least 3 years in a senior or leadership role within a complex enterprise or government environment
• Thorough and current practical experience with enterprise firewalls (design of policies and segmentation, management of rules, troubleshooting), preferably with Cisco Firepower, Cisco ASA, and/or Checkpoint
• Thorough knowledge of datacenter networks: L2/L3 design, OSPF/BGP, VLAN/VRF segmentation, vPC/MLAG, and VXLAN/EVPN
• Experience in independently developing and executing network implementation plans for application migrations, including dependency analysis, verification, and rollback
• Knowledge of hybrid cloud networks, such as the connection between on-premises, Azure Local, and Azure via hub-spoke topologies, landing zones, gateways, and NSGs
• Knowledge of and experience with network segmentation and zero trust in an existing environment
• Experience working within a program structure with multiple concurrent projects
• Experience with formal change procedures (CAB) within an environment with strict availability requirements
• Strong communication skills in Dutch, both spoken and written
• Experience working in an Agile/Scrum environment

Project details

• Start: flexible
• Duration: 9 months
• Location: Zuid-Holland, North-Holland, South-Holland, NL
• Languages: Dutch