Professional Services Organization Senior NSX Consultant
VMware
Total years of experience :19 years, 7 Months
• Leading workshops and consulting engagements to critical VMware customers.
• Conduct VMware consulting solutions in a timely and effective manner.
• Craft detailed design documents and perform hands-on implementation work.
• Work with our project managers on all aspects of efficient delivery.
• Advise and consult internal groups by providing accurate effort estimations
• Level 3 resource for critical & escalated issues.
• Technical lead for critical changes related to Network Optimization.
To name few:
i. Technical lead for moving services from ASA 5540 to Palo Alto Next Generation Firewall PA 5060.
Came up with LLD related to migration of services from old platform to new one.
ii. Migration of e-government service like Hafiz Bayt from single point of failure setup to High Availability HA setup
iii. Since Elm VPN firewall was positioned wrongly and added additional layer 3 hop for all traffic moving from one DC to another, security design enhancement was done and VPN firewall was successfully moved to Internet Edge.
iv. In situations where Palo Alto running the 6.x series code failed to do load balancing using ECMP, introduce multi-layer switch to handle equal cost load balancing using OSPF as IGP.
• Key role in projects listed below
a. Provide necessary support from Network Security end for Proof of Concept initiatives viz. RSA
b. Publishing critical e-government services in Elm Hosted Data Center. Viz. Eskan, PEEC, Ejar
c. Hardware upgrade of perimeter routers and switches
d. Migrate services on ASA internet firewall to Fortigate 600C
e. Network set up for new offices.
f. Provision new SSL VPNs for clients on Pulsesecure SSL appliance MAG-SM160
• Administration of VCE V-block system - Cisco UCS, Nexus 7000, Nexus 5000, Nexus 2000 and Nexus 1K
• Proven ability to configure Nexus 5000 and MDS family switches for storage.
• Evaluating new networking technologies to help enhance and protect the network
• Support VPN connections between our strategic partners using site to site IPSec VPNs, DMVPN, Easy VPN, SSL VPNs
• Provide technical support for Mobily Enterprise Data Network and Mobily Hosted Datacenter Services running technologies like
a. Virtual routing & forwarding on ASR & Nexus 7 K
b. vPC between Nexus 5 K & Nexus 2 K fabric extenders
c. Virtualization on Nexus 7 Ks using VDC concept
d. OSPF in Enterprise Data Network
e. IS-IS in a separate network called Mobily DCN network
f. BGP
g. NAT, ACL and routing on Cisco Adaptive Security Appliance ASA.
h. Security contexts on ASA.
• Project Support for
a. Introducing new VRF for Mobily Bulk SMS Project
b. Change traffic flow using STP Port Cost in Layer 2 transit network.
c. Link migration from Layer 2 VPN to Layer 3 VPN.
d. Line card upgrade for Cisco 6500 series switches.
e. NX-OS & IOS image upgrade.
• Review handover documents related to projects.
• Review Operational Change Requests OCR documents. Adherence to change management procedure.
• Participate in Maintenance down times related to network enhancement.
• Implement Cisco Best Practices
• Remediate Cisco Field Notices.
• Raise TAC cases with Cisco for Root Cause Analysis RCA.
• Mentor junior engineers.
• Network Management Software
Orion Network Performance Monitor
• Perform problem determination, resolution, testing of LAN / WAN.
• Project support for
a. LAN upgrade of Head Office, remote offices.
b. IPSec over GRE for all remote offices.
c. QoS Traffic Shaping, Class Based Weighted Fair Queuing CBWFQ.
d. Link resiliency over IPSec.
e. Change of Intranet IP Addresses to private IP addresses, following standards set by RFC 1918.
f. Move IP Subnets to Firewall Security Module.
g. Introduce Access Control Lists for Audit Compliance.
• Manage teams for operations / projects, mentored junior level engineers.
• Create and update network/security documentation using MS Visio, MS Word.
• Seek senior management review and obtain approval while establishing new links, link upgrade/downgrade.
• Network Management
a. Link and Node Monitoring using HP Network Node Manager NNM i and addition of new nodes to NNM.
b. Configuration management using Cisco Works LAN Management Solution.
c. PRTG Traffic Grapher Link monitoring tool.
• Network Security
a. Administration of Cisco Firewall Security Module using command line interface and Cisco ASDM
b. Authentication, Authorization and Accounting on Cisco Routers / Switches and administration of Cisco Secure ACS, adding new network devices to Cisco Secure ACS.
c. Static NAT and PAT, Access Control Lists on Cisco PIX 525
• Administration of Bank wide MPLS Layer 3 and Layer 2 VPNs, leased lines, radio links, VSAT links.
• Administration of Juniper WAN Optimizers Juniper WX, Juniper WXC.
• Adherence to Router, Switch Configuration Standards.
• Adherence to operation process and procedure, security polices.
• Base lining of banking applications and analysis of base lining results.
• Identify critical WAN link faults and reporting of the same to the appropriate vendors
Client Name: Ministry of Interior Location: Diplomatic Quarters, Riyadh, Saudi Arabia
Description of Work:
• Designed and installed an enterprise switched network using Cisco Catalyst 3750 G series, Cisco 3845MB router and Cisco Catalyst 4500 series backbone switch.
• VLANs, VTP and STP Optimization.
Client Name: Araqa Palace Location: Araqa, Riyadh, Saudi Arabia
Description of Work:
• IP Multicast using Anycast RP.
• Monitoring, managing enterprise switched network consisting of Cisco 6500 series backbone switches, Cisco catalyst 3750 and Cisco Catalyst 2950 switches using Cisco Works.
• Programming frequencies in the DTSR satellite receivers.
• Descramming channels in DTCA decoders.
• Streaming video channels in Minerva Networks Video Concentrator 8000 series using Multicast IP Addresses.
• Administration of Minerva Networks ITV Manager
• Plan, design and deploy network infrastructure for Savoices.
• Static NAT, NAT overload
• Administration of Gajshield firewall.
• Monitoring of WAN links, creating rules on the firewall for remote-access.
• ACL management for routers/proxy.
• Active directory installation in Windows 2000 Server and administration of Windows 2000 domain.
• Administration of Parsec predictive dialer.
• Deploying Web and FTP servers using IIS in Windows 2000 Server.
• Coordinating with the ISP, software and hardware vendors.
• Deploy, configure, maintain and monitor active network equipment.
• Troubleshoot replication between sites in Active Directory; assign share permissions and NTFS permissions on folders.
• Create user accounts and mailboxes in Exchange Server 2K3, email client installation and configuration.
• Generate backup reports in BMB Server Explorer, schedule backups in BMB clients, Brightstor Mobile Backup client installation and configuration.
• Deny logon to users on specific Citrix servers configured in load balancing; disable published applications in Citrix Management console, citrix client installation and configuration.
Trained on Microsoft Windows Server 2003, Cisco Routing Protocols, WAN protocols and operation
Graduated with First Class