Network & Security Architect (SASE, Firewalls, Routing & Switching, Wireless, PAM, IAM, MFA, VPN, WAN-OP, SIEM/SOAR, EDR/XDR)
Network & Security Architect with 10+ years delivering design, deployment, and operationalization of enterprise networks and security stacks (Cisco, Juniper, Aruba, Fortinet, HPE, Huawei/H3C, VMware, Veeam). Proven at delivering secure, scalable, highly available solutions—SASE/Zero Trust, firewall consolidation, multi site wireless, SIEM/SOAR and EDR/XDR integrations—with architecture artifacts, automated playbooks, validation testing, and operational handover for SOC and NOC readiness.
Projects Delivered
1. Enterprise Core Routing and Switching Modernization
Campus and Data Center Redesign for 2,000 Users: Full campus and data center network redesign and deployment — logical and physical topology, IP addressing plan, VLAN/trunking, STP tuning, OSPF/BGP/MPLS routing, HSRP/VRRP high availability, route redistribution, interface optimization, and configuration templates with cutover and rollback plans. Technologies: Cisco, Juniper, Aruba, HPE, Dell, Huawei/H3C, Allied Telesis, Extreme, D Link, industrial grade switches. Outcome: 99.99% availability, reduced broadcast domains, and deterministic QoS for voice and video.
2. Multi Site Wireless Network Rollout
Multi Site Wireless Network Rollout: End to end wireless deployment across 25 sites — RF/site surveys, capacity and channel planning, AP placement, controller and standalone configurations, SSID and 802.1X/RADIUS security design, QoS and roaming optimization, NAC integration and monitoring for operational handover. Technologies: Cisco, Aruba. Outcome: Consistent coverage, voice handoff latency <50 ms, documented runbooks and operational readiness.
3. Firewall Consolidation and Perimeter Hardening
Consolidation and standardization of firewall estate: architecture, policy matrix, IPsec/SSL VPNs, IPS/IDS tuning, SSL inspection, NAT, HA/clustering, centralized logging and forensics. Technologies: Fortinet, Cisco ASA/FTD. Outcome: reduced policy sprawl and faster incident investigations.
4. SASE and Zero Trust Implementation
Phased SASE rollout and Zero Trust controls: SD WAN, SWG, CASB, ZTNA, identity aware policies, micro segmentation, service insertion, and telemetry for enforcement. Outcome: secure remote access, reduced lateral movement, improved branch performance.
5. SIEM, SOAR and EDR/XDR Deployments
SOC enablement with centralized telemetry and automated response: log ingestion and normalization, detection engineering, threat intel integration, SOAR playbooks, endpoint telemetry, automated containment, and forensic capture. Outcome: reduced MTTD, automated containment, improved forensic readiness.
6. Virtualization, Backup and AD Resilience
VMware ESXi cluster design, Veeam backup/replication, Active Directory hardening and HA, DNS/DHCP optimization, and SQL Server HA guidance. Outcome: met RTO/RPO targets and simplified failover procedures.
7. NAC and Identity Integration
802.1X/RADIUS/TACACS+ deployment, posture checks, RSA MFA integration, and onboarding workflows to enforce device compliance and secure access.
Core Technical Expertise
• Routing & Switching: Cisco, Juniper, Aruba, HPE, Dell, Huawei/H3C, Allied Telesis, Extreme, D Link, industrial switches; VLANs, STP, OSPF, BGP, MPLS, QoS, HSRP/VRRP, route redistribution, packet level troubleshooting.
• Wireless: Multiple end to end Cisco and Aruba deployments; RF surveys, capacity planning, WPA2/WPA3, 802.1X/RADIUS, QoS, roaming, NAC integration.
• Security Platforms: Fortinet, Cisco ASA/FTD; policy lifecycle, IPsec/SSL VPNs, IPS/IDS, UTM, SSL/TLS inspection, NAT, HA/clustering, centralized management.
• SASE and Zero Trust: SD WAN, SWG, CASB, ZTNA, microsegmentation, identity aware policies, east west controls.
• SIEM & SOAR: Log ingestion, correlation, detection rules, threat intel, automated playbooks, case management, tuning for low false positives.
• EDR / XDR: Endpoint telemetry, behavioral/ML detection, threat hunting, rapid containment, automated remediation, SIEM/SOAR integration.
• Virtualization & Backup: VMware ESXi, Veeam backup/DR orchestration.
• Identity & NAC: Active Directory, DNS/DHCP, GPOs, 802.1X, RADIUS, TACACS+.
Technical Certifications: CCNP R&S, CCNA R&S, CCNA Security; JNCIP SEC, JNCIA SEC, JNCIS SEC, JNCIA JUNOS, JNCDA; Fortinet NSE4–NSE7; CEH; RSA MFA SolarWinds Certified, MCSA, MCITP.
Compliance: ISO 27001 certified ISMS practitioner experienced in risk assessments, control frameworks, audits, and compliance.
Network Monitoring
ManageEngine ServiceDesk Plus
Server
Desktop Support
Microsoft Active Directory
System Monitoring
Fortinet
Helpdesk
Cisco IOS
Network Administration
Yasir A.
Dubai, United Arab Emirates
$90/hr
5.0
22 jobs
I am Cisco Dual CCIE (Routing & Switching, Service Provider, DC(in process) Network professional with demonstrable experience in the design and delivery of Enterprise, DC, Service provider, and AI/ML Training DataCenter Networks.
I have also worked on AI Architect roles for customers are who are looking to determine hardware requirements for AI training systems, Architect enhancements required for efficient training of AI models, Scale-Out and Scale-Up Architectures, based on Cisco and Arista AI enhanced Spine & Leaf SW.
I have considerable experience in SD-WAN deployments including Cisco iWAN, Cisco Viptela, Velocloud.
I have deployed projects based on Cisco ACI, DCNM, NDFC, and Manual VXLAN Fabric from Cisco, Arista.
I am an advocate of Automation in Network deployment and Operations and have significant commercial Python and Ansible experience.
I am also Network Security Expert, have deployed multiple projects in DC, Cloud, or private Colo with Palo Alto Firewalls, Fortinet, Cisco Firepower, Juniper Firewall with BGP, S2S VPNs, IPS, NAT, Policies and remote-access deployments.
Certifications:
Cisco:
CCIE Routing & Switching (26003)
CCIE Service Provider
CCIE DataCenter (Written)
CCDE Written, CCNP, IOS XR Specialist.
Splunk:
Cert-57763 Splunk Certified Knowledge Manager, Admin, Power User
Cloud:
AWS Certified Solution Associate (Exam Pending)
Skills (Expert Level):
Software Defined Data Center:
Cisco ACI :
Capacity Planning, Design, Deployment
Migration of existing DC to ACI (Brownfield, Greenfield)
Migrating WAN Services to ACI, L3out
Automation the Migration with the help of Ansible
Implementing Multi-Pod or Multi-site ACI
Cisco ACI and Vmware VMM integration
Cisco VXLAN, Single Fabric, Multi Pod Fabric and Multisite Fabric Design, CLI, Nexus Dashboard, NDFC
Arista EVPN VxLAN
Cumulus Linux and White Box Switches
Vmware NSX-T
IP/MPLS/WAN:
Cisco SD-WAN, Viptela/Velocloud Deployments and Troubleshooting
IOS, IOS XR, NX-OS, JunOS, SROS.
Cisco Nexus Platform, CRS, ASR9K, Cisco Adaptive Security Appliance (ASA) 55xx.
OSPF, BGP, Fabrickpath, MPLS, Multicast, EVPN.
Cisco SD-Access SDA DNA Center
Splunk:
Analyzing the customer requirements
Design and implementation of Splunk Architecture
Creating Reports and Dashboard according to the requirements
Troubleshooting the Splunk operations and scalability issues
Security:
Configuration and Troubleshooting Palo Alto, CheckPoint, F5 Appliances, Fortinet, Cisco Firepower Hardware Appliances or Cloud in Azure, AWS.
Network Automation and Programmability with CI/CD
Python
JSON, XML, YAML
Ansible
Jenkins
Git
VPN
Network Security
Cisco WLC
Palo Alto Firewalls
AWS Systems Manager
Cisco ACI
Data Center Operations
Data Center Design
Cisco Certified Internetwork Expert
Cisco Router
Cisco Certified Design Expert
Data Center Migration
Network Design
Virtual LAN
Network Equipment
Rizwan U.
Dubai, United Arab Emirates
$30/hr
5.0
23 jobs
I am a network engineer with over 10 years of experience. I specialize in desing and configuring data, voice, and video systems. I have expertise in Microsoft Teams Direct Routing, PBX, SBCs, Ribbon Communications, AudioCodes, Genesys, Avaya, Zoom Phone, Zoom Contact Center, Cisco Collaboration Technologies, Sangoma, Gateways, IP Phones, and Core Infrastructure.
I have a strong background in VoIP solutions and integrating audio and video with Microsoft Teams. I can set up Microsoft Teams Direct Routing alongside Microsoft Dynamics 365 Contact Center and Zoom Phone services, as well as Cisco CUCM, CUBE, and more.
Office 365
VMware vSphere
Session Initiation Protocol
Network Administration
Solution Architecture
VoIP Administration
Information & Communications Technology
VoIP
Microsoft Teams
Information Technology Strategy
Cloud Engineering
VoIP PBX
VoIP Software
Telephone System
Mudassar H.
Dubai, United Arab Emirates
$35/hr
5.0
6 jobs
I help businesses manage Microsoft 365, Google Workspace, DNS, networking, and IT infrastructure with minimal downtime and fast response times.
6+ years of hands-on experience in system administration, firewall management, VMware virtualization, Windows Server, and enterprise IT support.
Tell us what you need. Create your own job post or generate one with AI then filter talent matches.
Hire top talent fast
Consult, interview, and hire quickly, so you can meet the freelancers you're excited about.
Collaborate easily
Use Upwork to chat or video call, share files, and track project progress right from the app.
Payment simplified
Manage payments in one place with flexible billing options. Only pay for approved work, hourly or by milestone.
Don't just take our word for it
“Upwork provides an umbrella-level of security. I can see a talent’s work history and ratings. I can hold payments in escrow. I can communicate through Upwork Messages instead of working through my email address.”
KD
Kim Darling
Emerald Tiger
“Upwork is the best platform to hire skilled professionals when we're not looking for a full-time employee. All the companies in our portfolio use Upwork to find talent across a wide range of fields.”
DM
David Merry
Kinetic Investments
“Our very specific requirements can be a challenge—With Upwork, we’re able to access a bigger community to ensure the success of our projects.”
KK
Katja Krohn
Summa Linguae
How do I hire a Citrix XenServer Specialist near Dubai, on Upwork?
You can hire a Citrix XenServer Specialist near Dubai, on Upwork in four simple steps:
Create a job post tailored to your Citrix XenServer Specialist project scope. We’ll walk you through the process step by step.
Browse top Citrix XenServer Specialist talent on Upwork and invite them to your project.
Once the proposals start flowing in, create a shortlist of top Citrix XenServer Specialist profiles and interview.
Hire the right Citrix XenServer Specialist for your project from Upwork, the world’s largest work marketplace.
At Upwork, we believe talent staffing should be easy.
How much does it cost to hire a Citrix XenServer Specialist?
Rates charged by Citrix XenServer Specialists on Upwork can vary with a number of factors including experience, location, and market conditions. See hourly rates for in-demand skills on Upwork.
Why hire a Citrix XenServer Specialist near Dubai, on Upwork?
As the world’s work marketplace, we connect highly-skilled freelance Citrix XenServer Specialists and businesses and help them build trusted, long-term relationships so they can achieve more together. Let us help you build the dream Citrix XenServer Specialist team you need to succeed.
Can I hire a Citrix XenServer Specialist near Dubai, within 24 hours on Upwork?
Depending on availability and the quality of your job post, it’s entirely possible to sign up for Upwork and receive Citrix XenServer Specialist proposals within 24 hours of posting a job description.