Job Description

Key Accountabilities:

• Deploy and configure VMware Cloud Director (VCD) networking, including organisation VDC networks, edge gateways, routed and isolated networks, and integration with NSX-T backed provider gateways.
• Deploy and configure NSX Advanced Load Balancer (AVI Networks), including virtual services, pool configuration, health monitors, SSL termination, WAF policies, and integration with NSX-T and VCD environments.
• Implement Layer 2 extension across sites using NSX L2 Bridging, VMware HCX Layer 2 extension, or equivalent technologies to support workload mobility and phased migration strategies.
• Deploy and configure enterprise network security solutions, including next-generation firewalls (NGFW), intrusion prevention systems (IPS), and advanced threat protection tools, from staging through to production.
• Deploy and configure VMware NSX-T environments, including overlay networking (Geneve), Tier-0/Tier-1 gateways, distributed routing, Distributed Firewall (DFW), Gateway Firewall, and micro-segmentation policies.
• Execute end-to-end migration projects, transitioning legacy network security infrastructure to modern platforms with minimal business disruption.
• Deploy and manage Palo Alto Networks (PAN-OS, Panorama) and Fortinet (FortiGate, FortiManager, FortiAnalyzer) NGFW platforms, including rule-base migration, URL filtering, application control, SSL inspection, VPN configuration, and threat prevention profile tuning.
• Configure OCI network security controls including Security Lists, Network Firewall, Fast Connect, and OCI IAM policies in support of hybrid and private cloud environments.
• Deploy and configure F5 BIG-IP (LTM, GTM, ASM/AWAF) solutions, including virtual server configuration, iRules, WAF policy deployment, SSL offloading, and health monitoring. Execute ADC migration and cutover activities.
• Configure and deploy secure web proxy and URL filtering solutions to enforce acceptable use and data loss prevention policies.
• Carry out security assessments of existing infrastructure to support migration planning and identify remediation requirements prior to cutover.
• Ensure all implemented solutions meet relevant security compliance standards and regulatory requirements.
• Contribute to High-Level Design (HLD) and Low-Level Design (LLD) documentation in support of implementation activities; prior design experience across NSX, VCD, NGFW, or F5 environments is a valued advantage

Qualifications, Experience and Skills:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline or equivalent experience.
• 4+ years of hands-on experience in network security implementation, deployment, and migration roles.
• Hands-on experience deploying VMware NSX-T/NSX-4 (overlay networking, DFW, Gateway Firewall, micro-segmentation), VMware Cloud Director (VCD) networking, NSX Advanced Load Balancer (AVI), and Layer 2 extension technologies (NSX L2 Bridge, HCX L2 extension) in production environments.
• Preferred certifications include
• VMware Certified Professional – Network Virtualisation (VCP-NV)
• VMware NSX VCIX-NV or VMware Certified Implementation Expert
• CCNP Security or equivalent Cisco security certification
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Fortinet NSE 7 or higher
• F5 Certified Solution Expert (CSE)
• OCI Network Associate.
• Proven track record delivering complex security migrations and cutovers in live enterprise environments.
• Deep technical expertise in Fortinet and Palo Alto firewall platforms, including policy migration, VPN setup, and threat prevention configuration.
• Familiarity with OCI network security services (Security Lists, Network Firewall, Fast Connect, OCI IAM) in support of private and hybrid cloud deployments.
• Demonstrated hands-on experience deploying and integrating F5 BIG-IP (LTM, GTM, ASM/AWAF) in production environments, including virtual server build, WAF policy tuning, and SSL profile configuration.
• Experience configuring and deploying secure web proxy and URL filtering platforms.
• Solid understanding of security compliance frameworks (ISO 27001, PCI DSS, NIST, SOC 2) as they apply to implementation and delivery.
• Experience with vulnerability management tools and security monitoring platforms.
• VMware NSX-T/NSX-4 full-stack deployment: Transport Zones, Segments, Tier-0/Tier-1 gateways, BGP/static routing, Distributed Firewall (DFW), Gateway Firewall, micro-segmentation, and NSX Manager cluster configuration.
• VMware Cloud Director (VCD) networking: organisation VDC network creation, edge gateway configuration, routed/isolated/direct network types, VCD integration with NSX-T provider gateways, and multi-tenant network provisioning.
• Layer 2 extension implementation using NSX L2 Bridging and VMware HCX L2 extension, supporting workload mobility, phased migrations, and stretched network scenarios.
• Network and Security platform migration planning, runbook development, and cutover execution.
• Infrastructure as Code (IaC) for security deployment automation (Terraform, Ansible).
• Fortinet (FortiGate, FortiManager, FortiAnalyzer) and Palo Alto Networks (Panorama, PAN-OS) platform deployment, policy migration, and threat prevention tuning.
• Next-generation firewall (NGFW) rule base implementation, zone-based segmentation, and SSL inspection configuration.
• VPN implementation: IPsec, SSL/TLS, and SD-WAN overlay connectivity.
• OCI network security: Security Lists, OCI Network Firewall, Fast Connect, Load Balancer, and OCI IAM policies in support of private cloud and hybrid connectivity.
• Private cloud and hybrid network security controls deployment, with a focus on VMware-based environments.
• OCI Landing Zone security configuration and brownfield security uplift for on-premises to cloud migrations.
• F5 BIG-IP (LTM, GTM, ASM/AWAF) deployment: virtual servers, iRules, WAF policy configuration, SSL offloading, and health monitoring.
• NSX Advanced Load Balancer (AVI Networks): virtual service deployment, pool configuration, health monitors, SSL termination, and WAF policy implementation within NSX-T and VCD environments.
• IAM and PAM solution deployment and directory services integration (Active Directory, LDAP, OCI IAM policy, RBAC).
• Secure web proxy and URL filtering deployment.
• Security compliance frameworks: ISO 27001, PCI DSS, NIST CSF, SOC 2.
• Methodical and detail-oriented approach to implementation, testing, and cutover activities.
• Strong communication skills, with the ability to coordinate across technical teams and stakeholders during live migrations.
• Ability to produce clear implementation runbooks, test plans, and post-migration reports.
• Effective under pressure, with experience managing risks and issues during time-sensitive deployment windows.
• Collaborative team player with experience working alongside architects, project managers, and operations teams.