US-CTS-ADVISORY-Business Consultant

We are looking for onsite contractors with the following skillsets :

(A) Cloudflare and Akamai with F5

Enhance platform resilience, security, and performance for Client's applications through the deployment of Cloudflare Content Delivery Network (CDN), Web application Firewall (WAF), and Distributed Denial of Services (DDoS) capabilities, leveraging automation and improved failover mechanisms.

Scope of Work

1. CDN Application Ownership

• Deploy and manage Cloudflare CDN to determine content delivery and application performance.
• Implement and maintain Web Application Firewall (WAF) and DDoS protection to safeguard applications from cybersecurity threats.
• Optimize CDN configurations to enhance application speed and reliability.

• Assist client in developing and automating control plane processes to streamline CDN management.
• Determine effective failover mechanisms to maintain application availability.
• Integrate Cloudflare with on-premises technologies to create a cohesive control environment.

• Implement client s tool for observability to monitor and analyze Cloudflare CDN performance and security.
• Provide real-time insights and alerts to proactively address infrastructure issues.
• Enhance visibility into application traffic and performance metrics.

• 7+ years of experience in CDN configuration and functional design.
• Hands-on experience with Cloudflare, Akamai, and F5.
• Strong networking knowledge (routing, switching, firewalls, load balancing).
• Familiarity with NetScout or Arbor for network monitoring and DDoS protection.
• Experience with infrastructure automation and scripting (e.g., Python, Terraform, Ansible).

Facilitate the migration of remote users from the existing Pulse Secure Virtual Private Network (VPN) solution and Microsoft Azure Windows Virtual Desktops to PANW s Prisma Access Global Protect solution for internet access and VPN.

Scope of Work

1. Build and Test Phase

• Analyze the current Pulse Secure VPN architecture and configuration.
• Identify specific user requirements and constraints for migration.
• Assist Client in developing a pilot implementation plan for transitioning to PANW Prisma Access and physical firewalls.
• Establish foundational infrastructure and apply baseline configurations.
• Test readiness of Prisma Access and PANW physical firewalls.

• Draft standard operating procedures and engage information technology (IT) operations teams.
• Execute pilot implementation to migrate up to 5% of remote users and Azure Windows Virtual Desktops (WVD).
• Update design documents with operational and site-specific details.

• Prepare for production transition, including change management and communication plans.
• Migrate remote users and Azure WVDs to Prisma Access, including specific regional transitions.
• Conduct knowledge transfer and operational responsibility handover to IT Security Operations.

• Infrastructure Analysis: Analyze existing VPN configuration and identify migration requirements.
• Pilot Implementation: Develop and execute a pilot plan for initial user migration.
• Documentation Update: Regularly update design documents to reflect operational changes.
• Production Transition: Ensure readiness for full-scale migration and operational transition.
• Knowledge Transfer: Provide comprehensive training and documentation to support ongoing operations.
• Detailed Design Document: Technical requirements and operational details for Prisma Access and PANW firewalls.
• Knowledge Transfer Documentation: Training materials and standard operating procedures.
• As-Built Configuration Document: Final configuration details for service components.

• PCNSE (Palo Alto Networks Certified Network Security Engineer) is preferred.