Network & Security Engineer, F5 Expert, Migration

F5, PaloAlto, Palo Alto, CheckPoint, Migration, Juniper, Networking, Brussels, Belgium, Europe

KEY RESPONSIBILITIES:

-T1: Execution of extra PoC tests in the existing PoC setup
- Closing 'transparent Remote Access service' PoC (if not yet fully done) conform the discussed test plan. This includes among others the SAML integration testing with 'our login' (eg Outlook Web Access)
- Forward Proxy and SSL orchestration (F5 - PaloAlto/FireEye Tandem) based on a desktop image, including the required modification of PAC files. Tests required for both internal as external services
- D NS testing: recursive forward, and authoritative only for 'test' purposes
- F5 AFM with aDDOS tests, and prepare for Silverline Always Available in the future
- Overall redundancy testing
- Migration testing from a service to the new IAS, eg by changing the PAC file through a GPO update
-T2: Physically moving the existing Palo Alto 3020 cluster from the PoC zone (LSU Capital) to the DMZ environment and reconfiguration based on 3 Virtual Systems as described in the HLD
- Regarding High Availability, a direct redundant gigabit Ethernet service will be available between the data centres.
- Migrating existing Juniper SRX Internet Firewall rules (used solely for isolated security projects) to this Palo Alto 3020.
- Transparent user authentication, User-IP mapping enabled conform the other Palo Alto's in the network.
- URL filtering enabled (no SSL decryption profiles), custom URL categories (pull mode) configured. The current policy related to the restriction of Flash content will not be migrated to the new infrastructure.
- Setting up 3 virtual systems conform the zoning principles. This includes recommendations for attribute allocation per VS (max sessions, max objects...)

Please apply with your latest CV to be considered.

PS: The client for this particular role is looking for URGENT starts (11th September is their aim)