LAN Engineers

DRAWLINES ENGINEERING CONSULT is looking for Network/ LAN Engineers in Riyadh, Saudi Arabia

Objective

To complete all remaining network design review, configuration, integration, testing, documentation, and handover activities for the EXIT-10 project, in line with IFC drawings, approved material submittals, and client/consultant requirements.

Scope of Work & Responsibilities

1. Design Review & LLD Finalization

• Review, validate, and finalize the following Low-Level Designs (LLDs):

o Security Network LLD

o Landlord Network LLD

o Out-of-Band (OOB) Network LLD

o Revised Public Network LLD

• Align all LLDs with IFC drawings, approved submittals, and actual site implementation.
• Address comments and support consultant/client sign-off.

2. Stage-1: Network Components Review (Pre-Activation)

• Review installed network components and verify:

o Correct installation as per IFC and approved materials.

o Device inventory, serial numbers, and physical connectivity.

• Validate “Not Active” status of devices prior to configuration.
• Prepare readiness checklist and sign-off documentation.

3. Stage-2: IDF Configuration & Core Connectivity

• Configure all IDF switches with required VLANs and confirm end-to-end connectivity with respective cores:

o Public Network IDFs ↔ Public Core

o Security Network IDFs ↔ Security Core

o Landlord Network IDFs ↔ Landlord Core

o OOB Network IDFs ↔ OOB Core

• Verify uplinks, redundancy, LACP, and active-active paths.
• Perform connectivity testing and issue validation reports.

4. Aruba Access Switches – CX 6300M (VSF)

• Implement VSF stacking for access layer switches.
• Configure:

o Physical & logical interfaces (uplinks, downlinks, LAGs)

o VLANs, segmentation, tagging as per VLAN/Subnet schema

o LACP uplinks to distribution/core

• Apply standard configuration templates and naming conventions.
• Integrate switches with Aruba Central:

o Device onboarding

o Monitoring and configuration

o Firmware upgrades via Central

• Coordinate Dot1X / management control with ClearPass (scope under review).

5. Aruba Core Switches – CX 6410 (VSX)

• Build and configure VSX high-availability core pair:

o VSX ISL and keepalive links

o MC-LAGs

• Configure:

o VLANs and internal gateway SVIs

o DHCP services for internal VLANs

o Redundant uplinks to access, gateways, and firewalls

o OSPF routing

• Integrate with Aruba Central and perform firmware upgrades.
• Support management control with ClearPass (scope pending).

6. Aruba TOR Switches

• Deploy TOR switches in VSX high-availability mode.
• Configure:

o VSX ISL, keepalive, MC-LAG

o VLANs and segmentation

o LACP uplinks to distribution

o MTU settings

• Coordinate ClearPass-related management control (if finalized).

7. Internal FortiGate Firewalls (Active–Passive HA)

• Deploy and configure HA A-P cluster:

o Heartbeat and sync interfaces

o Priority and failover tuning

• Configure:

o Gateway services for servers across all networks

o OSPF routing with core switches

o Security profiles (IPS, Antivirus, Application Control)

• Perform failover testing and validation.

8. Perimeter FortiGate Firewalls (Active–Passive HA)

• Deploy and configure HA A-P perimeter firewalls.
• Configure:

o Dual WAN links from two ISPs (via routers)

o SD-WAN, health checks, and link monitoring

o Default internet routing

o OSPF routing with core

o NAT and security policies (Web Filter, IPS, Application Control)

• Conduct redundancy and failover testing.

9. ClearPass (Scope Under Review)

• Support design review and integration planning for ClearPass.
• Coordinate license validation (2500 endpoints across networks).
• Assist in integration readiness for:

o Dot1X

o Management access control

• Actual implementation subject to client approval.

10. Aruba Gateways & Wireless (AOS 10)

• Deploy Aruba Mobility Gateways in Active–Passive HA.
• Configure:

o SSID tunneling (if tunneled mode is used)

o Static routing

• Integrate gateways with Aruba Central.
• Perform HA and failover testing.
• Support AP integration:

o Central onboarding

o Firmware upgrades

o Authentication assignment (Captive Portal / ClearPass)

11. Testing, Documentation & Final Handover

• Perform end-to-end testing for all networks (Public, Security, Landlord, OOB).
• Support commissioning, SAT, and client demonstrations.
• Prepare and submit:

o As-built LLDs

o Network diagrams

o IP/VLAN schemas

o Test reports

• Support final handover and knowledge transfer to operations team.

Deliverables

• Approved LLDs
• Configured and tested network infrastructure
• Commissioning & test reports
• As-built documentation
• Final handover sign-off

Interested candidates share cv through email hr@drawlines.com or WhatsApp 77405500

Job Types: Full-time, Temporary
Contract length: 12 months