Ubiquiti Network Deployment & Configuration

Ubiquiti Network Setup and Configuration We are seeking an experienced Ubiquiti network engineer to remotely configure and commission a new UniFi network for a business client. This is a white-label engagement. All communication will be managed through our MSP, and direct client contact is not required unless approved. Equipment 1 × Ubiquiti Dream Machine Pro Max 1 × Ubiquiti 24-Port PoE Switch Up to 3 × Ubiquiti Wireless Access Points Required Configuration The selected engineer will be responsible for: - Adopting and configuring all UniFi equipment - Configuring the internet WAN connection - Configuring the primary LAN - Creating the required VLANs and IP address ranges - Configuring DHCP and DNS settings - Creating and configuring wireless SSIDs - Assigning switch ports and port profiles - Configuring trunk and access ports where required - Configuring PoE for the wireless access points - Applying firewall and inter-VLAN rules - Isolating guest, BYOD, CCTV and IoT networks - Restricting access to the network management environment - Configuring WPA2/WPA3 security based on device compatibility - Configuring wireless roaming between access points - Optimising WiFi channels, channel widths and transmit power - Applying recommended firmware updates - Configuring secure administrative and remote management access - Assisting with the agreed network cutover - Testing internet, LAN, WiFi and VLAN connectivity - Troubleshooting configuration issues during commissioning Proposed Networks The configuration is expected to include: - Corporate network - BYOD network - Guest network - CCTV network - IoT network - Network management network The final VLAN IDs, IP ranges, SSID names and access policies will be supplied before configuration begins. Firewall Requirements Firewall rules must follow a least-privilege approach and include: - Guest devices blocked from internal networks - BYOD devices blocked from corporate resources unless specifically approved - IoT devices isolated from the corporate network - CCTV devices isolated from general business traffic - Network management access restricted to authorised devices - Required internet access enabled for each network - Any approved cross-network communication documented Deliverables The contractor must provide: - Fully configured and tested UniFi environment - Configuration backup - VLAN and IP address schedule - SSID configuration summary - Switch port and port profile schedule - Firewall and inter-VLAN rule summary - Administrative handover notes - Remote handover session with our MSP Applicants must have commercial experience with: - UniFi Dream Machine Pro or Pro Max - UniFi managed PoE switches - UniFi wireless access points - VLANs and network segmentation - Inter-VLAN firewall policies - Business wireless deployments - Network cutovers and troubleshooting Please provide examples of similar business-grade UniFi deployments.