Ahamedsha Shahib

Routing & Switching: Advanced design and implementation of L2/L3 architectures using Cisco Catalyst 9000 series, ASR 1000, and C8200 routers. Expert-level configuration of BGP, OSPF, and EIGRP for optimal path selection and rapid convergence.

Data Center & Switching: Implementation of Cisco Nexus 9000 (NX-OS) environments, focusing on high availability through vPC, OSPF, and advanced ACL security protocols. Managed large-scale migrations from legacy Catalyst 6500-E VSS to modern C9606R VSS.

WAN & SD-WAN: Managed Cisco SD-WAN deployments for 20+ sites with a focus on automation and policy enforcement. Designed 50+ branch DMVPN solutions, reducing WAN operational costs by 35% by replacing legacy E1 circuits.

Wireless & Monitoring: Administration of Cisco Catalyst 9800 Wireless Controllers (100+ APs) maintaining 99% uptime. Utilized SolarWinds NAM 3000 for NetFlow analysis, performance baselining, and real-time network health monitoring.

Designed and implemented the Layer 2/Layer 3 architecture for campus, branch office network using Cisco Catalyst (C9606R, C9500-48Y4C, 9300L) switches and Routers (ASR1009-X, C8200L-1N-4T).

Migrated core/distribution layer from Catalyst 6500-E VSS to Catalyst C9606R VSS Switch, improving redundancy and increasing backbone throughput.

Configured, deployed, and maintained a data center network core utilizing Cisco Nexus 9000 series switches (NX-OS), implementing VPC, OSPF, and ACLs to ensure high availability and security.

Supported the implementation and the management of a Cisco SD-WAN solution for 20+ sites, applied standardized templates & security policies,
and utilized vAnalytics to troubleshoot connectivity issues.

Enforced centralized security policies (FW, IPS) across all SD-WAN edges, ensuring consistent compliance.

Configured and optimized OSPF/EIGRP/BGP routing across WAN and
campus backbone, ensuring optimal path selection and rapid convergence.

Designed and deployed DMVPN solution using Cisco routers at 50+ branches, replacing legacy E1 circuits, reducing WAN costs by 35% and enabling secure connectivity.

Implemented regular alerting and monitoring of network performance, decreasing network down-time by 22% yoy.

Collaborated with new clients to build firewalls using Cisco FTD, enabling employees to access critical resources.

Ability to analyze complex technical issues and devise effective solutions, a critical skill in maintaining network performance and reliability.

Administered Cisco Unified CM (v12.5) for a 500+ user environment: managed user extensions (DN), deployed common phone devices (78xx/88xx), reset passwords, monitored system alerts, and assisted endusers with basic call routing issues (call pickup, forwarding).

Utilized Cisco Prime Infrastructure (PI) for daily network operations: monitored health/performance of 500+ devices (routers, switches, WLCs), managed software upgrades, enforced configuration compliance via templates/templates, and generated reports for WAN/LAN/Wi-Fi infrastructure.

Ability to collaborate effectively with other IT professionals in project implementation and problem-solving scenarios.

Deployed new access layer switch stacks across 5 sites, configuring VLANs, trunking (802.1Q), LACP port-channels, and LLDP.
Resolved complex L2 connectivity issues (VLAN mismatches, STP blocking, MAC flapping) using Wireshark and CLI diagnostics, restoring
critical services within SLA.
Implemented and enforced 802.1X port-based authentication and dynamic VLAN assignment for all corporate wired access ports.
Optimized STP topology (RSTP/MSTP) to reduce convergence time after link failures.
Created and maintained comprehensive network diagrams and documentation detailing VLAN schemas, port assignments, and switch
configurations.

Expertly installed and configured high-capacity Ubiquiti Wi-Fi towers and Point-to-Point (PtP) bridges to ensure seamless long-range connectivity and maximum uptime.

Engineered robust network architectures using multi-vendor hardware, implementing Load Balancing, VLAN segmentation, and dynamic routing protocols to optimize traffic flow and redundancy.

Administered enterprise-grade security via Cyberoam Firewalls, specifically focusing on the deployment and tuning of Intrusion Prevention Systems (IPS) to mitigate real-time threats.

Designed and maintained secure remote access frameworks, including Site-to-Site tunnels and client-based VPNs using IPsec, SSL, L2TP, and PPTP protocols for secure cross-site communication and remote workforces.

Designed and executed comprehensive physical layer implementations, ensuring high-standard cable management and adherence to industry specifications for data center and office
environments.

Expertly configured and maintained Active Directory (AD DS),
managing Group Policy Objects (GPOs), DNS, and DHCP to ensure high
availability and streamlined identity management.
Audited and managed software assets to ensure 100% licensing
compliance and maintained an up-to-date repository of all enterprise
applications.
Established and maintained rigorous data protection strategies using
Druva Sync, ensuring consistent recovery points and data integrity.
Empowered branch managers by developing and delivering training
programs on fundamental network troubleshooting, reducing Time
to-Resolution for remote sites.

Managed the full hardware lifecycle, including the custom assembly
and deployment of high-performance workstations tailored to specific
departmental requirements.
Orchestrated the installation, network integration, and high-level
troubleshooting of enterprise imaging solutions, including multi
function network printers (LaserJet/OfficeJet) and high-speed
document scanners.
Streamlined the deployment and configuration of diverse Operating
Systems; implemented centralized Antivirus/Endpoint Detection &
Response (EDR) solutions to ensure system integrity and defense
against malware.
Engineered and deployed Local Area Networks (LAN) from the ground
up in both Peer-to-Peer and centralized Domain environments,
ensuring robust connectivity and resource sharing.