Senior Network Solution Architect
CGI
Total years of experience :12 years, 9 Months
• Managing credit unions and banks in Canada and US connected through MPLS (EIGRP/OSPF) & IPsec tunnels terminating on Checkpoint firewalls and performing GRE with Cisco platforms.
• Configuring and working with EIGRP, OSPF and BGP between clients VRFs and their sites.
• Managing Credit unions and Bank internal infrastructure for IPS, DLP and IDS.
• Configuring of policy-based tunnels between Checkpoint, Azure, Fortinet, and Palo-Alto Firewalls.
• Working with load balancer (F5 - BIGIP) for various CGI Banking applications for Credit unions and Banks.
• Responsible for handling Incidents/Problems/Change Management tickets by using Service Manager console.
• Ensuring that the projects are managed in accordance with the project management methodology including document templates, identifying project phases, reporting, and planning information for successful project delivery.
• Coordinating with Security assessment vendors and Operational Risk teams to assess the organizations security measures, to identify any weak points that might make information systems vulnerable to attack.
• Handling incident responses in a prompt manner, by determining and mitigating the cause in close coordination with the relevant Credit unions and banks, helping in analyzing reports SOC reports to identify trends that might indicate a future risk.
• Contributing towards development of security baselines for all IT infrastructure and Applications, and annual review and updating of all IT Security related SOPs and Information security procedures related to IT in coordination with the CISO of the Bank and CUs.
• Managed over 41 Maple leaf site offices and production plants across Canada, US and Japan connected through MPLS (EIGRP/OSPF) & IPsec over GRE tunnel.
• Implemented EIGRP routing between sites to head office by using Cisco ISR 4300 series routers & Cisco 9300 series and 9200 series switches. Managed HSRP between Core Router for redundancy.
• Configuration of switches as per project requirements after taking approval by CAB/RAB.
• Configured and managed Cisco IP Phones for users in Cisco Unified Communications Manager.
• Worked with Cisco Prime infrastructure for Wireless mapping and APs status.
• Conducted survey for Wireless Access points installation and configure them with WLC. Troubleshoot user problem related to wireless.
• Responsible for handling Incidents/Problems/Change Management tickets by using Service Manager console.
• Provided level best customer service to users in different sites particularly in Alberta & Saskatchewan region.
• Worked with Data Center team on Nexus upgradation project.
• Successfully finished BMC helpdesk project for network product categories and asset management. Merged with BMC ITSM with BMC Helix discovery to relate items with tickets.
• Successfully moved to Cisco Collector version 2.9 from 2.7 for Cisco devices inventory. Currently working on deep vulnerability inspection with IBM team.
• Managed daily IT operations and participating in IS and plant projects. Completed various projects with 100% satisfactory outcome.
• Responding 24x7 to incidents as part of the IS on-call rotation.
• Managed over 100 Running-room stores across Canada and US connected through IPsec over GRE tunnel.
• Implementation of OSPF routing between stores to head office by using Cisco ISR routers (800 series) & Cisco 3850 switches and managed HSRP between Core Router to provide redundancy.
• Configured Policy-based routing, Access Control List & Route-maps on ISR routers and configured Policy-map for QoS on store routers to connect with VOIP phones (Ring-Central).
• Configured Windows Servers 2012/2016 for AD, FTP, DNS, WDS, WSUS and DHCP. Configured VMs in a vSphere environment and maintain server backups by using Veeam Backup and Replication software.
• Participated in the on-call rotation (after-hours) as per scheduled timetable.
• Handled Incidents/Problems/Change Management frameworks & Help-desk tickets by using Service-Desk Plus.
• Improved network efficiency, reliability, and security by hardening network devices.
• Managed Fortinet 300D for IPSec VPN tunneling for remote access users and performed IP routing, Web-filtering, and Intrusion prevention.
• Configured QoS & VLAN infrastructure to support data and VOIP traffic on HP 5500 series switches and managed Microsoft servers (AD, Exchange Server 2013, DFS, DNS & DHCP) on Windows 2012 Server by using VMware infrastructure.
• Accomplished project of Cisco Meraki MR Series APs for VLAN tag & Radius (AD) authentication.
• Configured Network Monitoring Server (Whats-Up-Gold) for Application performance monitoring and for Network Flow.
• Handled helpdesk tickets by using Spice- work and SA manage Softwares.
• Implemented routing by using layer protocols (OSPF) between sites on Cisco 2900 & Fortinet firewalls 800c & 300c.
• Configured various features like DMZs, VDOMs, SSL-VPN, Web & Email filters & IPS on Fortinet. Managed IPsec Site-to-Site VPN tunnels between FortiGates (300C & 800C) and Cisco ASA (5515-X).
• Configured Policy-based routing, Ether-Channels, Access Control List & Port security on Cisco 6500 series & 3800 series multilayer switches and Juniper Ex 4200 series switches. Managed Cisco & Alcatel wireless controllers for binding Mac-addresses to provide secure environment through Cisco AIRCAP 1600 & 2700 series APs & Aruba APs
• Managed and worked with Whats-up-Gold & Solar wind Network Monitoring Tools.
• Designed Network Infrastructure for new company branch by using Cisco switches (3850), Routers (2950), Wireless controllers (2504) & APs (2700 Series).
• Coordinated with vendors and contractors for various project.
• Worked in 24x7 environment for network related issues as per team calendar.
• Completed projects ahead of schedule, within budget, saved time and cost. Produced Information Technology Activity Form (ITAF), SOPs, SLAs & technical manuals.
• Worked in critical and Complex 24/7 ISP operations.
• Configured Layer 2 technologies like STP, VTP and Ether-channels on Cisco 3750 switches.
• Configured OSPF & BGP on Cisco 7200 series core Routers in connection with upstream providers and configured multi layer Switches (3800, 3700 & 3600) for client sub-interfaces and switch virtual interfaces. Configured VRF & MPLS for multiple clients and managed multiple vendor’s firewalls.
• Configured Linux Servers (Sendmail, Bind, MRTG & CACTI) on Centos.
Master's Degree (Networks & Telecom)
Bachelor's Degree (Computer Engineering)