Network Engineer Application Transition (Round 2)

Project overview

As a senior network engineer, you will be responsible for the network aspects of migrating applications to a hybrid platform based on Azure Local and Azure.

Profile of the suited interim professional:

• Inventorying traffic flows, dependencies, and security requirements per application (group) and translating these into a network implementation plan
• Executing implementation plans on the Cisco Nexus datacenter fabric and firewalls, including preparation, verification, and rollback
• Designing and implementing firewall policies according to macro- and micro-segmentation and zero trust
• Monitoring the consistency and quality of firewall rules during migrations
• Realizing the network integration of workloads on Azure Local and Azure, including hub-spoke architectures and landing zones
• Coordinating with application teams regarding traffic flows, port numbers, and dependencies
• Investigating network and connectivity issues during and after migrations, from packet capture to root cause
• Documenting designs and changes according to change processes and contributing to as-built documentation
• Identifying risks and design choices towards the network architect and proposing substantiated solutions
• Reviewing implementation plans and changes from colleagues and guiding less experienced engineers
• At least 8 years of relevant experience as a network engineer, with at least 3 years in a senior or leadership role within a complex enterprise or government organization
• Thorough and current practical experience with enterprise firewalls, including policy and segmentation design, rule management, and troubleshooting
• Knowledge of the policy model, such as zones, objects, access control, NAT, and inspection
• Experience with Cisco Firepower (FMC/FTD), Cisco ASA, and/or Checkpoint is recommended, as well as several years of experience with a comparable platform such as Fortinet FortiGate, Juniper SRX, or Palo Alto
• Thorough knowledge of datacenter network concepts, including L2/L3 design, OSPF/BGP, VLAN/VRF segmentation, vPC/MLAG, and VXLAN/EVPN overlays
• Experience with Cisco Nexus (NX-OS) is a strong plus
• Experience with independently setting up and executing network implementation plans for application migrations
• Knowledge of hybrid cloud networks, such as Azure Local and Azure with hub-spoke setup, landing zones, gateways, and NSGs
• Knowledge of network segmentation and zero-trust principles in an existing environment
• Experience functioning within a program structure where multiple projects run concurrently
• Experience with formal change procedures (CAB) within an environment with strict availability requirements
• Strong communication skills in Dutch, both spoken and written
• Professional-level or higher certification from a network vendor, for example Cisco CCNP/CCIE or Juniper JNCIS/JNCIP

Project details

• Start: flexible
• Duration: 8 months
• Location: Den Haag, North-Holland, South-Holland, NL
• Rate: 110-110 EUR/h
• Languages: Dutch