SUMMARY:

• Hands on experiences in Computer Networks, Network Security, and CyberSecurity for more than 15 years.
• In - depth perception of TCP/IP concept, OSI model, LAN / WAN, and Network Security technologies.
• Diverse experiences in designing, installing, configuring, and maintenance of Complex Enterprise Network Environment for Unified Communication (Data/Voice/Video).
• Check Point / Cisco / Juniper Certified and hands on experiences with variety of hardware, software, and services to establish IT Infrastructure and Network Resources & Services in a reliable, resilient, and secured manner considering CIA, HA, FT, and BCP comply with ISO27001/ISMS standard and ITIL framework.
• Experienced in designing Data Center and familiar with Cloud Computing, SDN, and Virtualization.
• Familiar with Project Management and proposal writing including RFI/RFP/RFQ preparation.
• Strong communication skills with different stakeholders of project to facilitate smooth execution of the project on time and budget.
• Eager to learn with ability to work under pressure in a highly dynamic and professional environment and able to meet tight deadlines.

TECHNICAL SKILLS:

Multi: layer Switching (VLAN, STP, PVST, MST, HSRP, VRRP, GLBP, VSS, QoS, VXLAN)Advanced Routing (EIGRP, OSPF, BGP, Route Optimization, VRF, MPLS)Network Security/CyberSecurity (IPSec, DMVPN, L2TP, TLS/SSL, IDS/IPS, NAT, PKI, Public/Private Key, Key Management, 2FA, ISMS, PCI-DSS)Unified Communication (VoIP, IP Telephony, SIP, Trunking, H.323, Video Conferencing)Remote Access (AAA, Access Controls, RADIUS, TACACS, VPN, MPLS, WAN, iWAN, SDH)Cloud/AWS/GCP, Data Center, Virtualization, SDN, NFV, SD-WAN, Load Balancing, NAS/SAN, FC/FCoE, VPC, OTV, FabricPath

Cisco: Catalyst/Fabric/Nexus Switches, ISR/ASR Routers, PIX/FWSM/ASA Firewalls, Universal Gateways, CSS/ACE Load Balancers, Access Points, WLC, IP Phones, CUCM (CallManager), PDM, SDM, ASDM, CSM, IDM, ISE, Prime, NAM, AVC, ACS.

Network Solutions and Devices: Firewalls (Check Point/Juniper/FortiGate/SonicWall/Palo Alto), Juniper Routers, Load Balancers (F5/NetScaler), Switches (Juniper/3Com/Extreme/HP/Dell), Exinda WAN Optimizer.

Network Management and Monitoring: Solarwinds, AccelOps, SNMP, Netflow, Syslog, Wireshark, tcpdump.

Microsoft Services: AD, DNS, DHCP, WINS, IAS, IIS, Exchange, RRAS, ISA.

VMware Technologies: ESX(i), vSphere, vCenter, HA, vMotion, DRS.

Servers and Storage: HP (Proliant/EVA), IBM H-Series, EMC2 VNX.

RedHat LINUX Services: Squid, IPTables, Shell Scripting.

PROFESSIONAL EXPERIENCE:

Senior Network security Specialist

Confidential

Responsibilities:

• Leading the project of firewall migration in four data centers (from Cisco ASA and Juniper SRX to CheckPoint) including:
• Planning the required scripts and modifying the ASA & SRX config files to convert objects and policies to Check Point format.
• Designing and preparing the lab environment to simulate PROD and UAT and test all settings and traffic flows.
• Installing and configuring Security Management Servers & Security Gateways including all layer 2/3 settings through Gaia WebUI and SmartConsole such as: Interface Bonding, Clustering (VIP), VLAN, NAT, Routing Topology, IPSec Tunnel, and VPN Client.
• Designing and segregation of DMZ and Security Zones for back-end and front-end servers and implementing ClusterXL.
• Monitoring, Syslog, and Backup configuration.
• Supporting and developing existing network services and devices in offices and DCs.

Senior Network SecurityConsultant

Confidential

Responsibilities:

• Designed, implemented, configured, and installed Network and Security solutions for major clients
• Performed changing configuration of network gear based on Network Implementation Plan in multi-vendor environment utilizing:
• Cisco Catalyst / Nexus Switches
• Cisco ISR / ASR, Juniper Routers
• Cisco FWSM / ASA, Juniper SRX, Fortigate Firewalls
• Cisco ACE, Citrix Netscaler, F5 Load Balancers
• Performed changing active configuration, troubleshooting, and on-going maintenance of Network Devices and Services in both dedicated and shared environment based on BMC Remedy ticketing system.
• Acted as both designer and implementer, prepared network design (high-level / low-level) and NIP along with test procedure and deployed other’s NIP.
• Prepared fully redundant network connectivity in Cloud among multiple Data Centers.

Technical Specialist - System Integration

Confidential

Responsibilities:

• As a regional subject matter expert, provided technical advises and consultation to PMs (Major Projects) for all System Integration solutions including Network Infrastructure, Enterprise Integration, and IT based Enterprise Applications in all branches across Canada.
• Technical evaluation of different scopes in projects that require IT System Integration including:

Senior Network security Engineer

Confidential

Responsibilities:

• Designed, implemented, and managed the Confidential enterprise network including Campus LAN and Data Center for Data/Voice/Video integration by utilizing:
• Catalyst 6509/3750/2960 , Nexus 5K/7K/FEX, multiple VLANs, VSS, HSRP, FC/FCoE, OTV.
• VoIP, Cisco UCM, Gateways, CME, ISR Routers, SIP Trunking, Gatekeepers.
• Designed, implemented, and managed the WAN links and Internet connections by utilizing:
• Static Routing, BGP/EIGRP/OSPF Routing Protocols, Cisco ISR 2800/3800/2900/3900/4000.
• Fiber Optic, Wireless, MPLS, SDH, OPGW, and E1 links through the direct PTP or across the public telecommunication networks.
• Designed, implemented, and managed the network security (LAN / WAN / DC / Internet) by utilizing:
• Cisco ASA 5510, 5545, 5585, FWSM, Cisco ISR, F5 4K Load Balancer.
• Site-to-Site IPSec, DMVPN, IPSec EZVPN, SSL VPN, 802.1x.
• Network Management and Monitoring by utilizing:
• Solarwinds, AccelOps, Cisco ISE/Prime/ACS, Exinda, IAS, MRTG/PRTG, Wireshark, Netscout, tcpdump, rConfig, Nesus, Snort.
• QoS for Voice, Video, and critical data flows.