استخدام Network Security Engineer
شرح موقعیت شغلی
Ensure the reliability, security, performance, and high availability of the organization’s network infrastructure across Huawei networking, general enterprise networking, Kubernetes clusters, and private cloud environments based on OpenStack/FusionSphere.
Key Responsibilities
1. Multi‑Vendor Network Operations (General Networking + Huawei)
- Design, deploy, and operate multi‑vendor enterprise and datacenter networks (Huawei, Cisco, Juniper, etc.).
- Manage Layer 2/3 networking: VLANs, Trunking, STP, LACP, Routing (OSPF, BGP).
- Develop and optimize core, distribution, and access network topologies.
- Configure and maintain NAT, load balancing, link redundancy, and HA network components.
- Perform network capacity planning and proactive performance optimization.
2. Huawei Network Management
- Configure and operate Huawei CloudEngine switches, AR/SR routers, wireless components, and datacenter platforms.
- Manage VLANs, VXLAN (if applicable), VRF, routing policies, ACLs, and security domains.
- Troubleshoot complex Huawei network issues and lead Root Cause Analysis.
3. Cloud Networking (OpenStack / FusionSphere)
- Manage OpenStack Neutron networking including Provider/Tenant Networks, VLANs, Trunks, and overlays.
- Configure Floating IPs, Security Groups, Neutron FWaaS, LBaaS.
- Troubleshoot connectivity issues between VMs, Kubernetes services, and enterprise networks.
4. Kubernetes Networking
- Operate and troubleshoot Kubernetes networking including:
- CNI plugins (Calico, Cilium, etc.)
- Service Networking (ClusterIP, NodePort, LoadBalancer)
- Ingress Controllers
- Network Policies
- Optimize pod‑to‑pod, pod‑to‑service, and east‑west traffic paths.
- Collaborate with Platform/DevOps teams to define cloud‑native network architecture.
5. Security Operations
- Implement and manage firewalls, ACLs, Traffic Filtering, Segmentation, and Zero‑Trust policies.
- Ensure secure Ingress/Egress traffic flows in Kubernetes.
- Conduct periodic security assessments and remediate vulnerabilities.
- Analyze network and security logs through ELK/Loki to detect anomalies.
6. Monitoring & Troubleshooting
- Use Wireshark, tcpdump, NetFlow/sFlow for traffic analysis.
- Develop network monitoring dashboards in Grafana and Prometheus.
- Provide detailed RCA for major network or security incidents.
7. Documentation & Collaboration
- Create and maintain detailed network architecture diagrams, standards, and operational procedures.
- Work closely with CloudOps, DevOps Platform, Virtualization, and Security teams.
- Participate in designing network and security architecture for new cloud‑native services.
Required Skills:
General Networking
- Strong understanding of L2/L3 networking: VLAN, STP, LACP, dynamic routing protocols.
- Knowledge of L4/L7 load balancing, NAT, DNAT/SNAT, ACLs, firewalls.
- Datacenter network design fundamentals.
Vendor‑Specific
- Hands‑on experience with Huawei datacenter networking.
- Familiarity with Cisco IOS/NX‑OS or Juniper JunOS.
Cloud Networking
- OpenStack Neutron networking concepts.
- Kubernetes networking fundamentals: CNI, Ingress, NetworkPolicy, service mesh basics.
Tools
- Wireshark, tcpdump, nmap.
- ELK, Loki, Prometheus, Grafana.
- Basic Git for configuration versioning or lightweight IaC.
Preferred Qualifications
- Experience with SDN, VXLAN, EVPN.
- Virtual networking in cloud and container platforms.
- Experience with enterprise load balancers (F5, HAProxy, NGINX Plus).
- HCIA/HCIP, CCNA/CCNP, or JNCIA/JNCIS certifications.
- Strong incident management capability
- Analytical and structured problem‑solving
- Clear and professional documentation
- Effective cross‑team collaboration
مهارتهای مورد نیاز
- Network Security
- امنیت شبکه
- CCNP
حداقل سابقه کار
- سه تا شش سال
جنسیت
- مهم نیست
وضعیت نظام وظیفه
- معافیت دائم پایان خدمت