Network Security

Job Description

• Perform day-to-day network services operations and administration including monitoring, alerting and performance metrics
• Traffic Shaping, Policing and prioritize WAN and LAN traffic on based to QoS Polices.
• Load balance traffic across multiple ISP Links.
• Implementing SNMP on devices to allow network management.
• Router/Switch IOS version upgrade identification/Notification
• Inter VLAN Traffic Analysis.
• Implement?access control lists (ACLs) as per the agreed access policies
• In-depth analysis and performance rating of each component of the network.
• Backup Network devices to keep business up and running.
• Filtering Traffic based on standard and extended access-list, distribution list and route maps.
• Keeping Track of Repeated Incidents/Fault Tracking
• Identifying Root Cause and giving permanent solution.
• Updating the solution and creating SOP where ever required.
• Study of Traffic Pattern and determination of local traffic like QOS policies.
• Identification, isolation and rectification of response time problems.
• VLAN configuration fine-tuning to reduce inter-VLAN traffic.
• Assigning and implementation of IP address.
• Review and implementation of spanning tree to build redundancy in network
• Review of routing policies and fine-tuning for efficient use of network resources.
• Vendor & partner connectivity management and configuration terminating on Routers and other network devices
• Router/Switch IOS version upgrade confirmation advisory
• Router/Switch IOS version upgrade planning with vendor
• Router/Switch IOS version upgrade Implementation
• Configuration of Supervisor Level redundancy on cisco nexus?series switches
• Configuration Load balancing protocols like HSRP and GLBP.
• Open RFC in case a change is required because of an Incident or Problem ticket???????????????????????????????????
• Change?approval?????
• Define change test process and validation plan
• Prepare change request document
• Deploy Changes as per plan
• Report success of completion of change once complete to all stake holders.
• Update network document, SOPs and run book
• Re-designing of LAN architecture.
• Re-designing the entire VLAN Policies.
• Major product version upgrades which needs re-design and / or re-implementation
• Configuring thresholds for Switch, Router CPU usage, & memory usage
• Performing Switch, Router, port, VLAN configurations
• Link Bandwidth utilization
• Configuring authentication protocols that are available in Cisco IOS (like AAA)
• Device Configuration management
• Configuration Backup Management
• Vendor Coordination
• Configuration-backup and management
• Generation of Reports like Performing Switch, Router, CPU utilization Report, Capacity
• Planning Report and Trend Analysis Report.
• Incident / Request Fulfilment / Change management
• Planning and execution of DR Drills
• IP Phone Configuration with the extension Numbers
• Configuring Network Settings like DHCP Address, TFTP address, DNS, SM
• Personal Directory Services for frequent calls
• Network Connectivity check on the phone port.
• Setting up the Intercom calls for personal calls
• Configuring Voice ports and checking the status
• 54
• User credential changes
• Latency and CRC (Cyclic Redundancy Check) Errors
• CUCM version upgrade, minor and major with all the components?like FTP, cisco presence , unity, cisco express , call manager, DSP.
• maintaining and enhancing?features of cisco unified manager 2ring with 40 services like
• Maintaining and enhancing?call recording system Imgical
• Maintaining and enhancing billing system Proteus
• Maintaining and enhancing SD-WAN
• 61??????????Maintaining and enhancing WAN optimizer
• 62??????????Maintaining and enhancing Video-Solution
• 63??????????Managing all internet, WAN links including TADAWL, Bloomberg, SJN, VISA, SAMA, SAIRE local and international links
• 64??????????All minor and major software upgrade should be covered
• 65??????????Vendor (ISP/DSP) communication for circuits issue

• Perform day-to-day firewall services operations and administration including monitoring, alerting and performance metrics
• Manage all firewall services network devices in accordance with GIB?s Policies and procedures;
• On-site hands and feet support FOR DC/DR/Stores/Telecommunication tooms
• Monitor events that are detected by the IPS
• Manage incidents relating to events detected by the IPS
• Keep track on Security hardware and software maintenance support with respective OEM / distributor and GIB MSB and InfoSec direction
• Distribute and standardize the content filtering policies across the organization
• Requirement analysis and Management of Anti-virus licenses if it is coming with firewall box
• License Capacity Planning
• Monitoring the non-compliant Servers for out dated virus definitions
• Firewall DMZ management for providing access across the firewall
• Defining firewall access control policies for administration in coordination with GIB, vendors
• Review and approve?Bidder?proposed ACLs
• Implement & Maintain ACLs as per the GIBs policies and procedures
• Implementing firewall access control policies
• Review firewalls policies, architecture and provide recommendations for improvements
• Firewall patch / IOS version upgrade
• Vendor & partner connectivity management terminating on firewall
• Implement IPS signature update and policy configuration changes
• IDS/IPS patch / IOS version upgrade
• IDS/IPS event/alert integration with SIEM for security event monitoring
• Manage the IPS Management Services [IDS/IPS troubleshooting / change management/ problem management ] by providing the expert knowledge required
• configure and administer the rules that control the network traffic via the IPS
• Updating signature database

Keyskills :