Description:
Fully Office-Based Role (Cape Town - Southern Suburbs)Immediately available would be advantageous
Required Certifications:
One or more of the below (Pls attached your certificates):
CCNP Enterprise or NSE 7 Enterprise Firewall or PCNSE or JNCIP-ENT or MTCRE or equivalent CCNP Security or NSE 7 Advanced Threat Protection or PCNSE or JNCIP-SEC or MTCSE or equivalent DevNet Associate or NSE 7 Network Security Automation or PCSAE or JNCIA-DevOps or equivalent Minimum Grade 12
For this role, you'll encounter the below (including, but not limited or unlimited to):
Routing & Protocols: OSPF, BGP, MPLS, HSRP, ECMP, L3VPN, Policy-Based Routing (PBR), and IPv6 routing strategies. Scripting & Automation: MikroTik RouterOS scripting. Bash and/or Python. Configuration Management: Ansible and REST API integration. YAML, JSON, and other data structures. Monitoring & Analysis: Dude/Zabbix/Nagios/Prometheus/etc., PRTG, SNMP & MIB interpretation, NetFlow/sFlow analysis, Wireshark, and Syslog. Security & Access Control: Firewalling (chain/rule-based, zone-based, and policy-based), NATting, Remote Access and Site-to-Site VPN (IPsec/IKEv2, SSTP, L2TP, OpenVPN, WireGuard), 802.1X authentication (RADIUS/TACACS+), Secure SSH/Winbox/HTTPS access hardening, DNS security (DoH, and DNS filtering), and Layer-2 security (DHCP snooping, ARP inspection, and port security). Quality of Service (QoS): HTB queue trees, PCQ-based bandwidth management, DSCP marking, burst traffic control, and rate-limiting policies. Network Design & Optimisation: VLAN segmentation (802.1Q, QinQ, and PVLANs), load balancing (PCC, ECMP, and LACP bonding), high availability (VRRP failover, STP/RSTP/MSTP), WAN failover & dynamic failover strategies, dual-stack IPv4/IPv6 implementation, and NAT traversal techniques. Wireless Networking & RF Optimization: 802.11a/b/g/n/ac/ax, MIMO, Beamforming, WPA2-Enterprise, EAP-TLS, MAC filtering, rogue AP detection, DFS, channel width selection, interference mitigation, MikroTik CAPsMAN, WDS, wireless bridging, and PtP & PtMP deployments. Advanced Security & Threat Mitigation: DDoS protection (connection limiting, SYN flood protection, and layer-7 filtering), zero trust security, role-based access control (RBAC), NAC integration, and SIEM & log management - integration with security event management tools (e.g., Graylog, ELK Stack, and Splunk).
Please note that only candidates in Cape Town, with a drivers license, will be considered.
Please send your CV and certificates to
08 May 2025;
from:
gumtree.co.za