Administrator Operation and Further Development of the Central DMZ Infrastructure - Remote (80%)

Project overview

Description

Requirements

Reading, understanding, creating network topologies / methodology

We look forward to your application, stating your availability and your hourly rate for remote and onsite assignments.

We point out that sending application documents via unencrypted email can be insecure and alternatively application documents can be submitted by post and/or by using the online application option.

• Fluent German and good English skills
• Planning/conceptualization and services related to DMZ and security architectures based on BSI-Grundschutz at least VSNfD and PersDatSB2
• Experience and knowledge regarding used technologies, methods/processes, IT procedures/applications for network transitions within network architectures (broadband network system solutions 100 Gbit/s and larger, network protocols, SSL offloading)
• Experience in planning, system introduction, and operation of enterprise system infrastructures, as well as planning, conception, and implementation of project-specific infrastructure changes/extensions and consolidations
• Experience in the creation/updating of platform-specific concepts and technical documentation such as guidelines, work instructions, procedural instructions
• Experience with at least three of the following six product families of Application Layer Gateways, particularly regarding basic configuration, commissioning/decommissioning, and modification or optimization of existing configurations:
• Cisco C390/C395 E-Mail Security Appliance, C300V/C600V E-Mail Security Appliance Virtual, M300V Secure E-Mail and Web Manager
• Citrix ADC Appliance SDX 16030, 15030
• Checkpoint Firewalls Quantum Security Gateway 16200, 6200, 7000, 15600, GAIA and VSX, Checkpoint MDS
• Skyhigh Web Security Appliance SWGWG5500-F
• Fortinet FortiWeb-4000F, FortiWeb-3000F
• SFS Crush FTP

Project details

01.01.2027

End: 31.12.2028

Remote (80%), Strausberg (20%)

Service Description:

Support for the operation and further development of the central DMZ infrastructure to ensure secure internet access and the connection of external partner networks.

Service Package A: Maintenance, servicing, and operation of the existing DMZ infrastructure

Service Package B: Engineering and implementation services

• Processing of incidents within the scope of MAXIMO incident management, including troubleshooting, log analysis, and change creation as needed.
• Applying updates and patches to product families of Application Layer Gateways from manufacturers Cisco, Citrix, Skyhigh, Checkpoint, and Fortinet, including planning and implementation of change requests from MAXIMO.
• Modification or optimization of existing configurations, such as revalidation, extensions, and changes to the rule set by adding new rules or deleting outdated ones, including planning and implementation of change requests from MAXIMO.
• Updating existing documentation, work instructions, procedural instructions, and operational documentation.
• Creation of cabling plans, definition of VLANs, reservation of IP addresses, including planning and implementation of change requests from MAXIMO.
• Creation of initial configurations and parameterizations up to the commissioning of hardware systems / virtual systems, including planning and implementation of change requests from MAXIMO. Installation of proxy images and configuration of network parameters via DSVIEW.
• Creation of new documentation, work instructions, procedural instructions, and operational documentation (in German and graphically using Microsoft Visio).
• Start: 2027-01
• Duration: 24 Monate
• Remote: hybrid
• Location: Strausberg, Deutschland, DE
• Rate: 78-78 EUR/h
• Languages: German