Administrator Operation and Development of the Central DMZ Infrastructure - Remote (80%)

Requirements

We look forward to receiving your application, stating your availability and your hourly rate for remote and onsite assignments.

We point out that sending application documents via unencrypted email can be insecure and that application documents can alternatively be sent by post and/or by using the online application option.

• Language skills: German: Level C1 and English: Level B1
• Common European Framework of Reference for Languages CEFR
• Planning/conceptualization as well as services related to DMZ and security architectures based on BSI-Grundschutz at least VSNfD and PersDatSB
• Experience and knowledge regarding used technologies, methods/processes, IT procedures/applications for network transitions within network architectures (Broadband network system solutions 100 Gbit/s and larger, network protocols, SSL offloading)
• Reading, understanding, creating network topologies / methodologies
• Experience in planning, system introduction, and operation of system infrastructures for companies, as well as planning, conceptualization, and implementation of project-specific infrastructure changes/extensions and consolidations
• Experience in the creation/updating of platform-specific concepts as well as technical documentation such as guidelines, work instructions, procedural instructions
• Experience in handling at least three of the following six product families of Application Layer Gateways, particularly regarding basic configuration, commissioning/decommissioning, as well as modification or optimization of existing configurations
• Cisco C390/C395 E-Mail Security Appliance, C300V/C600V E-Mail Security Appliance Virtual, M300V Secure E-Mail and Web Manager
• Citrix ADC Appliance SDX 16030, 15030
• Checkpoint Firewalls Quantum Security Gateway 16200, 6200, 7000, 15600, GAIA and VSX, Checkpoint MDS
• Skyhigh Web Security Appliance SWGWG5500-F
• Fortinet FortiWeb-4000F, FortiWeb-3000F
• SFS Crush FTP

Project details

01.01.2027

End: 31.12.2028

Remote (80%), Strausberg (20%)

Service Description:

Support for the operation and further development of the central DMZ infrastructure to ensure secure internet access and the connection of external partner networks.

Service Package A: Maintenance, servicing, and operation of the existing DMZ infrastructure

Service Package B: Engineering and implementation services

• Processing of incidents within the scope of MAXIMO incident management, including troubleshooting, log analysis, and change creation as needed.
• Installation of updates and patches on network components from the manufacturer Cisco (Cisco Switches (N9K) as well as Cisco ASR routers, Catalyst 8200 and 8300), including planning and implementation of change requests from MAXIMO.
• Modification or optimization of existing configurations, e.g., revalidation, extensions, and changes to the rule set by adding new rules or deleting outdated rules, including planning and implementation of change requests from MAXIMO.
• Updating existing documentation, work instructions, procedural instructions, and operational documentation.
• Creation of cabling plans, definition of VLANs, reservation of IP addresses, including planning and implementation of change requests from MAXIMO.
• Creation of initial configurations and parameterizations up to the commissioning of hardware systems / virtual systems, including planning and implementation of change requests from MAXIMO.
• Creation of new documentation, work instructions, procedural instructions, and operational documentation (in German as well as graphically using Microsoft Visio).
• Start: 2027-01
• Duration: 24 Monate
• Remote: hybrid
• Location: Strausberg, Deutschland, DE
• Rate: 75-75 EUR/h
• Languages: German