Vinirma Consulting Private Limited Hiring For Network Engineer for UAE at United Arab Emirates

Vinirma Consulting Private Limited; United Arab Emirates; On-site; AED 120,000 - 200,000; Full time

Job summary

An established technology consulting firm is seeking a skilled Network Engineer to enhance their UAE operations. This role focuses on configuring and managing IPv6 across various network devices, ensuring robust security measures are in place. The successful candidate will collaborate with local IT teams and ISPs to implement advanced networking solutions, including Multi-Protocol BGP and DHCP configurations. This is a fantastic opportunity to work with cutting-edge technologies in a dynamic environment, making a significant impact in the field of digital banking and cybersecurity.

Qualifications

• Strong expertise in configuring IPv6 across various network devices.
• Experience in DHCP and RADIUS authentication setups.

Responsibilities

• Configure and manage IPv6 settings on routers, switches, and firewalls.
• Implement security measures and device hardening for IPv6 networks.

Skills

IPv6 Configuration

DHCP Configuration

RADIUS Authentication

Multi-Protocol BGP (MP-BGP)

SDM/QoS Policies

IPsec Tunnel Configuration

Device Hardening

Unicast Reverse Path Forwarding (uRPF)

Job description

We, Nair Systems, are a DIFC based, boutique leading edge technology consulting and professional services firm focusing on Digital Banking, Artificial Intelligence, Big Data & Data Analytics, Cyber Security, Blockchain and Cryptocurrency and Robotic Process Automation.

Nair Systems, DIFC is currently looking for a Network Engineer for our UAE operations with the following terms & conditions.

Skills

1. Configure IPv6 on all Switches, routers, access points, and firewalls.
2. Configure DHCP in the offices to lease IPv6 for endpoints.
3. Co-ordinate with local IT teams to configure printers, scanners, and IP Phone to IPv6.
4. Configure RADIUS authentication on IPv6 at Cisco ISE.
5. Coordinate with ISP to configure MPLS and external leased line circuits to be configured with IPv6.
6. Enable and provision Multi-Protocol BGP (MP-BGP) router to provide both IPv4 and IPv6 peering with the peer network provider.
7. Configuring a proper SDM/QoS policies where applicable.
8. Dual-stack IPsec tunnel configuration.

Device hardening will include:

1. Enable Unicast Reverse Path Forwarding (uRPF) in Loose Mode on all router interfaces:
2. IPv6 verify unicast source reachable-via any allow-default.
3. Prevent routers from processing illegitimate, incomplete packets via the undetermined transport command found within ACL configuration.

Filter IPv6 Extension Headers (EH) based on IETF document Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers Section 3.31:

1. Drop or ignore IPv6 Hop-by-Hop Options (Protocol=0).
2. Drop IPv6 routing header type 0 (RTH0 – Source Route), but permit all other IPv6 routing header types.
3. Drop EH types used for experimentation and testing (protocol 253 and 254).
4. Drop unknown EH types.
5. Allow all other EH types.

For first-hop access layer devices, implement IPv6 RA Guard and DHCP Guard to protect against rogue router advertisements and DHCPv6 servers.
BCP 38-equivalent ACLs for edge interfaces will be constructed to mitigate spoofing of IPv6 source addresses.

Terms and Conditions

Joining time frame: 2 weeks (maximum 1 month).

The selected candidates shall join Nair Systems – UAE and shall be deputed to one of the leading Organizations in UAE.

Should you be interested in this opportunity, please send your latest resume in MS Word format at the earliest to joinus(at)nairsystems.com.