Network & Security Architect (SASE, Firewalls, Routing & Switching, Wireless, PAM, IAM, MFA, VPN, WAN-OP, SIEM/SOAR, EDR/XDR)
Network & Security Architect with 10+ years delivering design, deployment, and operationalization of enterprise networks and security stacks (Cisco, Juniper, Aruba, Fortinet, HPE, Huawei/H3C, VMware, Veeam). Proven at delivering secure, scalable, highly available solutions—SASE/Zero Trust, firewall consolidation, multi site wireless, SIEM/SOAR and EDR/XDR integrations—with architecture artifacts, automated playbooks, validation testing, and operational handover for SOC and NOC readiness.
Projects Delivered
1. Enterprise Core Routing and Switching Modernization
Campus and Data Center Redesign for 2,000 Users: Full campus and data center network redesign and deployment — logical and physical topology, IP addressing plan, VLAN/trunking, STP tuning, OSPF/BGP/MPLS routing, HSRP/VRRP high availability, route redistribution, interface optimization, and configuration templates with cutover and rollback plans. Technologies: Cisco, Juniper, Aruba, HPE, Dell, Huawei/H3C, Allied Telesis, Extreme, D Link, industrial grade switches. Outcome: 99.99% availability, reduced broadcast domains, and deterministic QoS for voice and video.
2. Multi Site Wireless Network Rollout
Multi Site Wireless Network Rollout: End to end wireless deployment across 25 sites — RF/site surveys, capacity and channel planning, AP placement, controller and standalone configurations, SSID and 802.1X/RADIUS security design, QoS and roaming optimization, NAC integration and monitoring for operational handover. Technologies: Cisco, Aruba. Outcome: Consistent coverage, voice handoff latency <50 ms, documented runbooks and operational readiness.
3. Firewall Consolidation and Perimeter Hardening
Consolidation and standardization of firewall estate: architecture, policy matrix, IPsec/SSL VPNs, IPS/IDS tuning, SSL inspection, NAT, HA/clustering, centralized logging and forensics. Technologies: Fortinet, Cisco ASA/FTD. Outcome: reduced policy sprawl and faster incident investigations.
4. SASE and Zero Trust Implementation
Phased SASE rollout and Zero Trust controls: SD WAN, SWG, CASB, ZTNA, identity aware policies, micro segmentation, service insertion, and telemetry for enforcement. Outcome: secure remote access, reduced lateral movement, improved branch performance.
5. SIEM, SOAR and EDR/XDR Deployments
SOC enablement with centralized telemetry and automated response: log ingestion and normalization, detection engineering, threat intel integration, SOAR playbooks, endpoint telemetry, automated containment, and forensic capture. Outcome: reduced MTTD, automated containment, improved forensic readiness.
6. Virtualization, Backup and AD Resilience
VMware ESXi cluster design, Veeam backup/replication, Active Directory hardening and HA, DNS/DHCP optimization, and SQL Server HA guidance. Outcome: met RTO/RPO targets and simplified failover procedures.
7. NAC and Identity Integration
802.1X/RADIUS/TACACS+ deployment, posture checks, RSA MFA integration, and onboarding workflows to enforce device compliance and secure access.
Core Technical Expertise
• Routing & Switching: Cisco, Juniper, Aruba, HPE, Dell, Huawei/H3C, Allied Telesis, Extreme, D Link, industrial switches; VLANs, STP, OSPF, BGP, MPLS, QoS, HSRP/VRRP, route redistribution, packet level troubleshooting.
• Wireless: Multiple end to end Cisco and Aruba deployments; RF surveys, capacity planning, WPA2/WPA3, 802.1X/RADIUS, QoS, roaming, NAC integration.
• Security Platforms: Fortinet, Cisco ASA/FTD; policy lifecycle, IPsec/SSL VPNs, IPS/IDS, UTM, SSL/TLS inspection, NAT, HA/clustering, centralized management.
• SASE and Zero Trust: SD WAN, SWG, CASB, ZTNA, microsegmentation, identity aware policies, east west controls.
• SIEM & SOAR: Log ingestion, correlation, detection rules, threat intel, automated playbooks, case management, tuning for low false positives.
• EDR / XDR: Endpoint telemetry, behavioral/ML detection, threat hunting, rapid containment, automated remediation, SIEM/SOAR integration.
• Virtualization & Backup: VMware ESXi, Veeam backup/DR orchestration.
• Identity & NAC: Active Directory, DNS/DHCP, GPOs, 802.1X, RADIUS, TACACS+.
Technical Certifications: CCNP R&S, CCNA R&S, CCNA Security; JNCIP SEC, JNCIA SEC, JNCIS SEC, JNCIA JUNOS, JNCDA; Fortinet NSE4–NSE7; CEH; RSA MFA SolarWinds Certified, MCSA, MCITP.
Compliance: ISO 27001 certified ISMS practitioner experienced in risk assessments, control frameworks, audits, and compliance.
Network Monitoring
ManageEngine ServiceDesk Plus
Server
Desktop Support
Microsoft Active Directory
System Monitoring
Fortinet
Helpdesk
Cisco IOS
Network Administration
Arslan H.
Dubai, United Arab Emirates
$25/hr
5.0
1 jobs
Storage and Backup
• Creating, extending and shrinking Lvs using LVM2
• Rsync and zfs snapshot
• Deployed SFTP, FTP and FTPS setup for backup
• Veeam Backup and Replication.
• DoubleTake Live backup and Replication.
• Zerto Virtual Replication.
Email Systems
• Experience with multi-tenant email hosting using Zimbra, quota management, SPAM control,
email backup
• Some experience with Postfix based MTAs
• Microsoft Exchange Server.
DNS Servers
• Bind
• DNS Client tools like nslookup, dig and drill
• Extensive knowledge with extremely secure and reliable, authoritative-only server, used in
many TLD and ROOT registries
Virtualization
• Extensive experience of VMware(5,6)
• Experience of OVMM, OVS and VMs
• Virtual Box and VMware workstation
• Physical to Virtual server migration tools.
Operating Systems
• Proficient with Centos, Ubuntu, Redhat and window(7,8,10,2008, 2012, 2016)
Web Technologies
• Apache HTTP Server
• Squid with Dansguardian Web Content Filtering.
• cPanel/WHM and DirectAdmin for webhosting control panels.
Server Monitoring and Misc Projects
• Nagios, ManageEngine OPmanager, Zabbix and Cacti
• Deep knowledge and implementation of Linux channel bonding.
• Deep understanding of zfs snapshot, File system encryption, compression and deduplication
• Bash Scripting.
System Administration
Windows Server
Email Support
Veeam
cPanel
Linux System Administration
Backup Administration
Mathew J.
Dubai, United Arab Emirates
$80/hr
5.0
126 jobs
Windows Server 2008R2/2012 R2/2016/2019, MS Exchange server 2003/2007/2010/2013/2016/2019, MS Lync Server 2010/2013, SFB 2015/2019, SCCM 2007/2012, SCVMM, Hyper-V, PKI,SSL, ADFS, Virtualization, Private Cloud, Office 365/DirSync/SSO, Windows Clustering/NLB. VMWare, ESXi,DRS, ESXi Cluster, VMotion, Azure Infrastructure
Tell us what you need. Create your own job post or generate one with AI then filter talent matches.
Hire top talent fast
Consult, interview, and hire quickly, so you can meet the freelancers you're excited about.
Collaborate easily
Use Upwork to chat or video call, share files, and track project progress right from the app.
Payment simplified
Manage payments in one place with flexible billing options. Only pay for approved work, hourly or by milestone.
Don't just take our word for it
“Upwork provides an umbrella-level of security. I can see a talent’s work history and ratings. I can hold payments in escrow. I can communicate through Upwork Messages instead of working through my email address.”
KD
Kim Darling
Emerald Tiger
“Upwork is the best platform to hire skilled professionals when we're not looking for a full-time employee. All the companies in our portfolio use Upwork to find talent across a wide range of fields.”
DM
David Merry
Kinetic Investments
“Our very specific requirements can be a challenge—With Upwork, we’re able to access a bigger community to ensure the success of our projects.”
KK
Katja Krohn
Summa Linguae
How do I hire a Xen Hypervisor Specialist near Dubai, on Upwork?
You can hire a Xen Hypervisor Specialist near Dubai, on Upwork in four simple steps:
Create a job post tailored to your Xen Hypervisor Specialist project scope. We’ll walk you through the process step by step.
Browse top Xen Hypervisor Specialist talent on Upwork and invite them to your project.
Once the proposals start flowing in, create a shortlist of top Xen Hypervisor Specialist profiles and interview.
Hire the right Xen Hypervisor Specialist for your project from Upwork, the world’s largest work marketplace.
At Upwork, we believe talent staffing should be easy.
How much does it cost to hire a Xen Hypervisor Specialist?
Rates charged by Xen Hypervisor Specialists on Upwork can vary with a number of factors including experience, location, and market conditions. See hourly rates for in-demand skills on Upwork.
Why hire a Xen Hypervisor Specialist near Dubai, on Upwork?
As the world’s work marketplace, we connect highly-skilled freelance Xen Hypervisor Specialists and businesses and help them build trusted, long-term relationships so they can achieve more together. Let us help you build the dream Xen Hypervisor Specialist team you need to succeed.
Can I hire a Xen Hypervisor Specialist near Dubai, within 24 hours on Upwork?
Depending on availability and the quality of your job post, it’s entirely possible to sign up for Upwork and receive Xen Hypervisor Specialist proposals within 24 hours of posting a job description.