Senior Network Consultant
Juniper Networks
مجموع سنوات الخبرة :21 years, 5 أشهر
• Juniper Routers, Switches & Firewalls design, implementation & troubleshooting
• Routing protocols ( BGP, ISIS, OSPF)
• MPLS, L2 VPNs, L3VPN & VPLS
• Carrier of carriers VPNs & Interprovider VPNs
• IPv6 implementation and support
• Juniper firewall design and management
• Python and Ansible for network automation and test automation
• SLAs, Contracts & Proposals
• IT Policies & IT Process
• RIPE understanding
Experience:
From January 2018 till to date ___ Network Consultant at Telecom - UNITED KINGDOM
www.juniper.net
Working as a Professional Services Consultant in the Core & Edge Practice at the Juniper Networks d doing the design, test, implementation and migration project from Cisco, Alcatel, Nokia Siemens and Huawei to Juniper Networks for one of the major telecom provider in the UK using PTX10008, MX2010, MX2008, MX480, EX4300, QFX5100, Junos Space, Robot/Nita . Currently working on the following
• JUNOS Fusion using MX2010 & EX4300
• JUNOS NODE SLICING ( Guest Network Functions - GNFs ) using the external routing engine and/or in-chassis routing engines
• vMX and vRR
• QFX Virtual Chassis
• BGP and
• L3VPNs
• Robot frame work + Ansible + Jenkins
www.geant.net
Working as Senior Network Engineer with core responsibilities for Designing, Configuring, monitoring and troubleshooting IP network consist of 50+ Juniper MX 960, MX 480, MX 80, T640 & T480 routers; EX 4200 Series Switches (Virtual Chassis), SRX Firewalls 1400 & 240 in (Chassis Clusters & bridging mode), QFX 5100 (Virtual Chassis), JUNOS Space VMs, Cisco 2950 terminal servers & HP Procurve Switches. With 200 Gbps backbones at IP level and 1Tbps backbones at the optical level, with about 12, 000 KM of dark fibers across 28 POP sites and network in 45 countries. Currently working on the following
• MPLS ( L3VPN, L2VPN, VPLS, Carrier of Carriers)
• Routing protocols ( BGP, ISIS)
• Multicast ( PIM, IGMP, MSDP)
• IP addressing (IPv4 & IPv6)
• Providing second & third level support for security incidents
• Security policies (SRX firewalls)
• SRX Firewall cluster
• EX4200 & QFX5100 Switch stacking ( Virtual switch chassis)
• Basic understanding of the scripting for proactive faults identification and automation of jobs
• Basic understanding of optical equipment, dark fibers
Tools in use:
• PYTHON
• Cacti
• Nagios & ICINGA
• RANCID
• NIPAP for IPAM
• NFSEN - NetFlow • FLOWMON NetFlow Version 9
• JUNOS Space
• Cisco terminal servers
• Splunk
• DNS: InfoBlox & Tortoise
• LastPass & PMP
• Intermapper
• Deepfield Analytic
• Audit: Nipper Studio & Riverbed Network Auditor
Achievements:
• Revamping of datacenter with documentation in Cambridge offices
• Design & implementation of connectivity among three offices in Cambridge & Amsterdam using MPLS Layer 2 VPN, Leased lines & Managed Internet Access (MIA), Internet capacities with fully functional IPv4, IPv6 & multicast network using eBGP, iBGP, MSDP, PIM & IGP with conditional route advertisements to BGP neighbors
• Design & implementation of SRX 240 firewall cluster & firewall policies
• Proposed the design for the AS number segregation for the GEANT network
• Design, implementation & testing of Remotely Triggered Black Holing (RTBH) in the GEANT network
• Designed several Python scripts to automate network tests and routine jobs
• Design of the Firewall on Demand ( BGP FlowSpec) in the MPLS base Layer 3 VPN
• Design & implementation of Radius in the GEANT network
• Design & implementation of NTP in the GEANT network
• Capacity expansion & implementation of eBGP, iBGP, L3VPN, L2Circuits, Carrier of Carriers for customers
• Capacity expansion of IXs & upstream internet providers
• Capacity expansion of internal backbones from 10G to 40G to 100G using aggregated interfaces
• Policy design & setup of traffic graphs in cacti graphs for the customers and backbones
Trainings:
• Five days training on programming with Python
• Four days training on Optical Transmission Systems
• Two days training on RIPE Database
Acting SBU Manager for Online Fraud Management), managing a team of 12 members for the technical consultancy, technical projects deployments and operational support for the customers including 19+ financial institutions in the Middle East with following:
•Management & consultancy of IT Security Services like
•WatchGuard, Cisco & Juniper Firewalls
•Cisco routers and switches
•Data Loss Prevention (Host DLP & Network DLP) , File Integrity Manager & ArcSight for loggin
•Barracuda load balancer, Foundstone Vulnerability Manager, Nessus to detect network vulnerabilities
•Management of Anti-Fraud operations in the Middle East for the financial institutions with in partnership with Mark Monitor for the services like, Phish detection/dilution/shutdown, Brand management, Domain Management & UDRP (Uniform disputes for domain names resolution policy) Services
•Member of steering committee working for business transformation into process based approach
Achievements:
•Design & implementation of End Point Encryption for PCs (EEPC) - Arab National Bank KSA
•Designed NDLP & HDLP solution Arab National Bank KSA
•Implementation of Device Control Module - HDLP at Riyad Bank KSA
(III
was reporting to CEO & managed a team of 6 members with responsibilities
•Ensured proper support from vendors & service providers through SLAs
•Ensured WAN connectivity of remote offices using DSL, Radio & Optical Fiber Technologies
•Supervised administration of Windows Servers (Exchange, AD, DNS & ISA), Black Berry & Oracle servers
www.mcb.com.pk
As IT Project Manager was reporting to Head of IT having responsibilities
•Feasibility study for network devices & media technologies
•Network planning & designing
•BCP & testing for different departments within IT Division
•Process flow designs & further improvements of existing process
Achievements:
•IT Service Desk implementation as per ITIL standards using Universal Service Desk of Computer Associates (CA)
•Web based centralized documentation of MCB networks
•Revamped NOCs at Karachi, Lahore & Islamabad
•Worked on shifting of MCB NOC from SST Building to MCB Tower
/
Appreciation:
•Received “Certificate of Excellence” from Head of IT
(Year 2007)
www.etilize.com
Leaded Network team to provided worldwide telephonic support to the customers of Ingram Micro & coordinated with manufacturers of different networking products to resolve customer queries
Provided System Support & network troubleshooting.
Provided System Support & network troubleshooting.