Vinirma Consulting Private Limited Hiring For Network Engineer for UAE at United Arab Emirates

We, Nair Systems, are a DIFC based, boutique leading edge technology consulting and professional services firm focusing on Digital Banking, Artificial Intelligence, Big Data & Data Analytics, Cyber Security, Blockchain and Cryptocurrency and Robotic Process Automation.

Nair Systems, DIFC is currently looking for a Network Engineer for our UAE operations with the following terms & conditions.

Skills

1. Configure IPv6 on all Switches, routers, access points, and firewalls.
2. Configure DHCP in the offices to lease IPv6 for endpoints.
3. Co-ordinate with local IT teams to configure printers, scanners, and IP Phone to IPv6.
4. Configure RADIUS authentication on IPv6 at Cisco ISE.
5. Coordinate with ISP to configure MPLS and external leased line circuits to be configured with IPv6.
6. Enable and provision Multi-Protocol BGP (MP-BGP) router to provide both IPv4 and IPv6 peering with the peer network provider.
7. Configuring a proper SDM/QoS policies where applicable.
8. Dual-stack IPsec tunnel configuration.

Device hardening will include:

1. Enable Unicast Reverse Path Forwarding (uRPF) in Loose Mode on all router interfaces:
2. IPv6 verify unicast source reachable-via any allow-default.
3. Prevent routers from processing illegitimate, incomplete packets via the undetermined transport command found within ACL configuration.

Filter IPv6 Extension Headers (EH) based on IETF document Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers Section 3.31:

1. Drop or ignore IPv6 Hop-by-Hop Options (Protocol=0).
2. Drop IPv6 routing header type 0 (RTH0 – Source Route), but permit all other IPv6 routing header types.
3. Drop EH types used for experimentation and testing (protocol 253 and 254).
4. Drop unknown EH types.
5. Allow all other EH types.

For first-hop access layer devices, implement IPv6 RA Guard and DHCP Guard to protect against rogue router advertisements and DHCPv6 servers.
BCP 38-equivalent ACLs for edge interfaces will be constructed to mitigate spoofing of IPv6 source addresses.

Terms and Conditions

Joining time frame: 2 weeks (maximum 1 month).

The selected candidates shall join Nair Systems – UAE and shall be deputed to one of the leading Organizations in UAE.

Should you be interested in this opportunity, please send your latest resume in MS Word format at the earliest to joinus(at)nairsystems.com.