Senior Network and Security Consultant:
Hewlett Packard Enterprise (HPE) Technology Services Consulting (TSC)
Total des années d'expérience :23 years, 1 Mois
For HPE TSC KSA Riyadh: Saudi Post Project (KSA Local & Global Express Delivery Market Sector)
Work Role: Projects plus Operation:
F5 GTM (DNS) Design Enhancement and DR Failover Drill: Prepared LLD design and migration plan for DR F5 GTM (DNS) virtual machines and main DC1 (DR) physical F5 GTM appliances for users coming from internet and for users coming from HQ and branches for main HQ DC1 and DC2 (DR) F5 GTM (DNS). Part of testing team that has conducted and tested the DR drill for failing over main Data Center (DC1) selected applications scenarios to DC2 (DR) during failover period using F5 GTM based DNS solution.
Project, Operation and Support: Provided consultation, configuration audit, implementation, documentation, operation and support services for HPE/Natcom Saudi Post DC2 (DR) project for network infrastructure having HPE routers, switches, HPE IMC (SNMP Manager, Network Traffic Analyzer), Eight Fortinet FortiGate Firewalls for Internet, Server Farm, WAN and Extranet network segments, Fortinet FortiManager, Fortinet FortiAnalyzer, F5 LTM (DC2) and GTM (Main DC1 & DC2 DR). Prepared built-in and new customized daily reports from HPE IMC network traffic analyzer and security analysis, threats, breaches and other security reports from FortiAnalyzer using SQL query for DC2 (DR). Firewall policies configurations and configured FortiGate Next generation firewall security profiles features having intrusion protection (IPS), application control, web filtering, and antivirus using standalone firewall and FortiManager.
Operation and Project Support
Day to day operation and support activities to Sadad staff and management, infrastructure teams, application and DB teams, ITSM CAPA closure, ITSM CRM case closure, support for ITSM KPI report submission and new KPI addition, Firewall Network Access Request closure after approval, VPN token request closure and VPN user support, routing and switching activities, wireless LAN activities, load balancer support activities, IP address assignment and management. On Call support after business hours. Leaded the ArcSight SIEM Proof of Concept (PoC). Leaded the configuration and support of F5 LTM and use of i-rules to intercept, inspect, transform, and direct inbound or outbound application traffic for various scenarios. Leaded the F5 GTM (DNS) implementation, configuration and support for Sadad S1/S2 service by service migrations across multiple data centers and GTM operation support for various Sadad environments including internal testing, banks/billers testing and banks/billers production network segments/blocks for Sadad partners/billers and banks via SJN cloud, Government billers (GSN) cloud and Private billers on STC, ITC and Mobily MPLS clouds.
Products Supported During Operation: F5 GTM (DNS), F5 LTM load balancers, Nortel Load balancer, Cisco ACE load balancer, Two factor authentication SSL VPN operation and support using F5 APM (SSL VPN) and RSA Authentication Manager, day to day security policies implementation on multi-vendor Juniper SRX and NetScreen Firewalls, Fortinet Firewall and Cisco ASA/PIX firewalls for business network segments/blocks, corporate network segments/blocks and Internet network segment/block, Cisco IronPort Proxy, Cisco routers, switches. Cisco wireless LAN, PRTG IPCheck, IBM Tivoli SNMP.
For HPE TSC: Saudi Investment Bank (SAIB) (Banking) September 2013-Feb 2014:
Work Role: Project: Technical Lead Wireless and Assisted Technical Lead for HPE DVPN WAN
Prepared High Level and Low Level (HLD & LLD) design for HPE wireless infrastructure for SAIB kingdom wide wireless project. Leading role for SAIB bank kingdom wide wireless deployment and assisted team member role for HPE DVPN technology deployment for replacing existing Cisco DMVPN. Worked on staging for HPE wireless network for Byod (Bring Your Own Device) technology with HPE IMC UAM and HPE MSM wireless controller and MSM access points for the bank wireless guest users.
For HPE TSC: Security Forces Hospital (SFH-Dammam) (Defense Health) 2013:
Work Role: Project: Technical Lead Wireless
Prepared high level (HLD) and low level design (LLD) for Security Forces Hospital (SFH) wireless infrastructure with HPE wireless MSM products. Deployed the HPE wireless MSM controllers and MSM access point infrastructure in SFH Dammam Hospital having HPE ProCurve switches for hospital Campus LAN.
For HPE TSC: Ministry of Health (MoH) (Health) 2013: Mid of 2013 to Early 2014:
Work Role: Senior Team Member Role for MoH Western Regions Hospitals Project:
Prepared low level design (LLD) for HPE wired and wireless, Fortinet Firewall and HPE Tipping Point Intrusion Prevention System (IPS) network infrastructure for MoH for various western region hospitals across Saudi Arabia. Staged and implemented HPE wired and wireless, Fortinet Firewall and HPE Tipping point IPS network infrastructure for MoH for primary, secondary and tertiary hospitals across Saudi Arabia.
For HPE TSC: National Guard Health Affairs- KAIMRC (Defense Health): Mid of 2013:
Work Role: End of Project Support and Fine Tuning:
Configured and fine-tuned the Cisco wired, wireless and security infrastructure with the VDC based Cisco Nexus 7000 core and distribution network and policy tuning of Cisco ASA firewall
ParagonEDS/Dhahran Tower:For HPE TSC: King Abdullah Economic City(KAEC)/Emaar (Real State)
Work Role: Project Plus Operation Support: Senior Network and Network Security Consultant:
KAEC/EMAAR Audit and Assessment:
Performed network and security firewall products configuration audit and assessment for existing gap analysis, closure and built future road map direction for network infrastructure upgrade for main site and DR. Managed the operation of the customer network and security products for the main data center and disaster recovery for the project activities during the project. Design and implementation of network and security infrastructure services at disaster recovery site.
KAEC/EMAAR DR Project: Technical lead for OSPF routing, LAN switching and security infrastructure deployment for KAEC/Emaar EC DR data center. Provided design and implementation network services for Layer 2 stretched subnets (Vlans) for Vmware based virtualized and Non-Vmware non-virtualized applications, 3APR V400 array based replication using remote copy between main DC campus LAN and DR site.
Products Supported During Project and Operation: Configuration support for Cisco 6509, Cisco Nexus 5000, 3750 and 3560 switches, Cisco and Aruba wireless controller and access points, Cisco ACS 4.2 to Cisco ACS 5.3 migration support, Cisco routers, Juniper perimeter Firewalls, Cisco FWSM data center Firewalls, Cisco IDSM2, Cisco WAAS, Cisco LMS, Cisco MARS. Provided the cabling, network, network security, documentation support activities to deploy the VMware 5.X virtualization, HP Blade System Enclosure C7000, HP 3PAR V400 storage array, Tape Library, D2D backup, Data Protector, Brocade SAN switches and Microsoft Exchange 2010, MS TMG, MS Active Directory for main DC campus LAN and DR. Provided the project network and support activity for Oracle ERP. Provided the design review and implementation supervision support Barracuda Server Load Balancer for load balancing application servers.
ParagonEDS/Dhahran Tower: Business Unit Head: IT Solutions & Systems Integration :
Responsible to create new business unit for IT solutions and systems integration for active components technologies along with ParagonEDS business unit of tier-3/tier-4 data center design and consultancy. Built partnership with network and system vendors and distributors. Participated and supported in Tenders response, RFP, RFQ, BoM, proposal, solution design and technical write-up for Cisco partners for LAN/WAN and data centers with other team participating in tier-2/tier-3 data centers design and consultancy.
ParagonEDS: California Housing Compound Riyadh (Real State) 2012:
Work Role: Project Network, Unified Communication and Security Consultant:
Provided the consultancy for Cisco based VRF based multitenant campus LAN and security infrastructure in the housing compound including Campus LAN with Cisco EVN/MPLS, UTP & Fiber cabling, IPTV, IP video surveillance, Cisco IP Telephony and ISP Internet access and billing system for multitenant services. Evaluated the Proof of Concept (PoC) for VRF based multitenant campus LAN for IPTV, IP video surveillance, Cisco IP Telephony, ISP Internet access and Internet service billing system.
For RGTS HQ, managed, designed, supervised, installed, configured, maintained, supported and optimized Cisco LAN, WAN and Internet infrastructure, Cisco Firewall and SonicWall Firewall appliances, IPSec VPN, Blue Coat Webproxy, Astrocom/(Ecessa) ISP Internet Links load balancer, Nortel PBX integration with voice gateway and Manolia Cisco Unified Communication Manager Express (CUCME) IP Telephony over wireless link of Al Raha Group for Technical Services (RGTS). Configured and maintained MPLS Network (IP VPN) connectivity between sites. Provided the technical project support for RGTS customer projects.
For RGTS for Booz Allen Hamilton Saudi Arabia : Royal Saudi Airforce (RSAF)- (Airforce): RSAF PSAB Project: Period: End of 2002 to Early 2003
Work Role: Member of Campus LAN Implementation Audit and Cisco IP Telephony Support for PSAB Project . Project team member of Booz Allen Hamilton Saudi Arabia for final phase of RSAF Prince Sultan Airbase Campus LAN, WAN, NMS, Security and pilot IP Telephony infrastructure project. Project team member to supervise project implemented work that were performed by the implementer and contractor as per Project SoW, scope and project plan.
For RGTS for TAMSCO and Other Contractors: Royal Saudi Airforce (RSAF) Head Quarter:
Work Role: Operation: Senior Level 3 Network/Consulting Resident Engineer: Early 2003 to March 2007
Provided Level 3 support for the RSAF kingdom wide General Business LAN and WAN setup for air bases having campus switches, routers, security, IP Telephony and data center products. Assisted, supervised and supported RSAF Data Center active products. Managed, supervised, consulted, installed, configured, maintained, supported and optimized firewall, VPN, IDS/IPS appliances, Host based IDS/IPS, AAA. Managed and supervised new LAN/WAN upgrades, implementation, testing and migration rollout. Provided technical consultancy to RSAF network department for various RSAF requirement and projects.
Work Role: Information and Communication (ICT) Solutions Manager/Department Head:
SMB/Mid-Market Technology Vendors/Distributors/Partners Management: (Cisco, Avaya, HPE, 2N, Niksun, SonicWall, Creation Source (AMX partner, automation and control systems) and Vendor local distributors). Evaluated potential suppliers to support alignment and understanding of the expectations and requirements of engagement. Monitored and reported on the performance of selected vendors to ensure delivery in line with contractual obligations and performance. Managed outward communication to vendors to facilitate understanding and awareness of organizational strategic direction, changes and challenges. Managed the interaction between vendors/partners, my company and our customers. Liaise with partners to reviewed, reported on and revised commercial proposals agreements as necessary. Managed the balance in vendor relationships to support the achievement. Managed department strategy planning, prepared business plan for ICT products solutions. Participated in Tenders response, RFP, RFQ, BoM, proposal, solution design (HLD/LLD) and technical write-up for multi-vendors active component technologies (Cisco, SonicWall UTM, HPE, Avaya, Niksun, AMX etc.) for various government and private sectors customer organizations. Managed, designed supervised, installed, configured, maintained, supported and optimized wired and wireless LAN infrastructure, Cisco IP Telephony and Internet setup for Al Manolia Services Company (MSC)
Leaded and worked on the pre-sales and post-sales activities for various customer projects across Saudi Arabia. Participated in tenders response, RFP, RFQ, BoM, proposal, solution design (HLD/LLD) and technical write-up for vendor active technologies (Cisco Silver Partner) for various government and corporate sectors customer organizations.
For AGCN/Getronics: Almarai (Dairy/Distribution) 2002
Work Role: Technical Lead as for Network, VoIP and PBX Integration : As technical lead of the project, managed, designed, supervised, installed, configured, maintained, supported and optimized Cisco Catalyst 6500 Core/Distribution and access switches, Cisco routers and Cisco VoIP gateway having FXS/FXO voice modules with Nortel PBX in Almarai HQ, CPP, and remote sites project
For AGCN/Getronics: Riyadh Bank (Banking) 2002
Work Role: Assisted Technical Lead for Network: As technical lead for network team for routing and switching infrastructure deployment for HQ of the bank, for highly reliable, scalable and available network to provide transparent and uninterrupted services of the network using Catalyst Core 6500 series core switches, distribution and access series switches across multiple floors.
For AGCN/Getronics: Bindawood (Supermarket Chain) 2001
Work Role: Technical Lead for Network, VoIP and PBX Integration: As technical lead of the project, managed, designed, supervised, installed, configured, supported and optimized Cisco routers and Cisco VoIP gateway having FXS/FXO voice modules with Panasonic PBX in Bindawood HQ, warehouse and remote sites WAN VoIP project
For AGCN/Getronics: Institute of Public Administration (IPA) (Education) 2001-2002
Work Role: Technical Lead for Network, Network Security, VoIP and PBX Integration: Managed, supervised, installed, configured, maintained, supported and optimized Cisco LAN campus core 6500 and access switches, Cisco routers Cisco PIX firewall and Cisco VoIP gateway using E&M ties line with Ericson PBX in Institute of Public Administration (IPA) HQ and branches project. Re-designed the IPA network with Cisco Catalyst 6500 Series Firewall Services Module (FWSM) and problem resolution for Cisco PIX Firewalls
For AGCN/Getronics: Saudi German Hospital Riyadh (Health) 2001
Work Role: Technical Lead for Network: Deployed the Cisco 6500 based campus LAN infrastructure in the hospital for various departments and building floors.
For AGCN/Getronics: STC Riyadh Region (Telecom) 1999-2000
Work Role: Technical Lead for Network Support: Supported and maintained Cisco 6500 core, 2900 access switches and routers products for STC Riyadh region main site and remote sites
For AGCN/Getronics: Saudi Hollandi Bank (Banking) 1999
Work Role: Network Operation and Support: Resident Network Engineer for Saudi Hollandi Bank and supervised, managed configuration changes and maintained the operation of installed Cisco routers, Cisco Catalyst core/distribution and access switches, Cisco NMS for network Monitoring, Netscout ngenius Network Trend analysis, Network Baselining.
For AGCN/Getronics: Saudi Aramco 1999 (Oil Sector)
Work Role: Senior Network Engineer for Replacement of Resident Engineer: In palace of existing resident engineer during his vacation, provided onsite support for new and installed Cisco routers and switches products for Saudi Aramco Dammam/Khobar HQ and remote sites having support contract with AGCN/Getronics.
Leaded and provided pre-sales support activities to sales department for Cisco router & switches solutions, Systimax structured cabling, EICON IBM SNA Gateway, Microsoft and various other systems integration products. Participated in Tenders response, RFP, RFQ, BoM, proposal, solution design (HLD/LLD) and technical write-up for multi-vendors active technologies (Cisco, EICON, Systimax, Microsoft etc.) for various Government and private sectors customer organizations. Leaded and provided PoC support for various product integrations. First Cisco VoIP solution sold in Pakistan in 1998 replacing a solution of Motorola MSR (VoFR) and Vanguard. Provided IBM SNA integration with EICON IBM SNA gateway to IBM SNA installed customers. Provided the support for the implemented Motorola Voice over Frame Relay (VoFR) project in Bangladesh.
Managed and supported telecommunication and data communication products:
Managed department, daily assignments for field and hardware repair engineers and technicians, customer handling for technical support, vendor/supplier management and support contract management. Provided implementation and support services for systems integration, links and connectivity for multiple locations of various government organizations, service providers (X.25/Frame Relay), banks, Custom House, PIA airline, SITA, pharmaceutical and other private sector companies using Motorola leased line/dialup modems, Motorola routers, Microwave, Gandalf Multiplexers and Cylink radio modems.
Technically leaded and implemented regional Voice over Frame Relay (VoFR) project for Beximco Bangladesh Head Office and site factory via Cylink wireless using Motorola MSR (VoFR) and Vanguard VoFR and VoFR via Satellite to Beximco Singapore office. Leaded the Five Pearl Continental Hotel and Marriot Islamabad WAN project using Motorola MSR and Vanguard routers for PSL company. Leaded the implementation of WAN project for Marriot and Per Continental Five star hotel chain across Pakistan using Motorola MSR and Vanguard routers.
Systems & Networking Products:
As Pre-Sales, Provided networking solutions and technical support for Novell Netware, Microsoft Windows servers, Unix operating system software and hardware support for PC and servers. As Post-Sales provided the implementation and support services for Novell Netware, Microsoft Windows servers, Unix operating system software and hardware support for PC and servers.
BE Electronics Engineering