Sr. Network & Security Engineer
Mekadam Technologies
Total des années d'expérience :18 years, 3 Mois
• Responsible to provide design and implementation support for wireless related domains and execute project deliveries.
• Support configuration management of network topologies for wireless, switching and security (WLC, APS, ISE, Prime Infra and Airwave).
• Working with customers, internal teams via Webex/onsite on regular basis to resolve network issues.
• Working on switching, routing, wireless and monitoring, SD-WAN support for clients portfolios.
• Supporting network systems, changes to current and future network requirements to meet the customers IT needs.
• Supporting and aligning with end customers to implement ICT projects along with supporting existing customer network.
• Providing technical expertise primarily on Cisco & Aruba Wireless technologies.
• Handling Technical discussion meetings and on-site implementation activities with clients for project deliveries.
• Assisting configuration management of Cisco & Aruba Wireless products.
• Preparation of Network project documentation, configuration and network diagrams (HLD & LLD).
• Handling network escalations assignments as per project SLA and deliverables.
• Submitting status reports to the reporting Manager.
• Participating in trainings and maintain awareness of developing trends and advances in Wireless technologies and services.
NMS Installation, configuration and Tracking report plan by implementing NMS like OPNet, Voyence, RiverBed
Cascade Profiler, IPAM, PortIQ, HP OpenView, Cacti, SolarWinds, PRTG, Graylog, Syslog, EPI-Center,
ManageEngine Netflow Analyzer, WhatsUp Gold, eG Innovations, Commview, Ethereal, Observer, Iperf,
Packet sniffer, Cisco Prime, Palo Alto Panorama, CheckPoint SMS, BlueCat Address Manager (IPAM),
Huawei eSight & Huawei Log Center.
Wireless Cisco WLC 5500 / 8500 Series, Cisco MSE 3365, Juniper WLC 2800, Huawei AC6605-26 WLC
Servers Linux / Ubuntu / Windows 2003, 2008, 2012, 2016
Virtualization Windows Hypervisor, VMware ESX3.5, ESX3.0
KAHRAMAA) - Doha, Qatar
* Responsible for designing, implementing, maintaining the operation stability and security of the network
environment. Leading and influencing leadership decisions to ensure proper technologies and security practices
are deployed, in a fast-growing environment.
* Establish Network Design focused on Security & Operation.
* Engineering traffic management solutions, including the design, low level engineering, and application load
balancing solutions for client applications across the pre-provisioned ADC infrastructure.
* Collaborating with Application owners, DNS Team, and Firewall Team, to deploy new applications to F5 BIG-IP
Local Traffic Manager and post-application-migration sessions.
4
* Engineering and configuring Virtual Server, Pools, iRules, Profiles, Persistence, and monitor on F5 LTM to match
the configuration the Application had on F5 BIG-IP Local Traffic Manager
* Used Confidential to dynamically assign reusable IP addresses to Confidential clients using IPAM and resolved IP
address conflicts.
* F5 migration of applications to new BIG-IP vCMP infrastructure.
* Configuration and troubleshooting F5 LTM and providing level 2 and level 3 support for the client.
* Maintenance and analysis of the F5 network for any possible up-gradation.
* iRules scripting using TCL (Tool command language) for HTTP redirection, redirection of HTTP traffic from one
data center to another data center, content based redirection.
* Extensive hands on experience with BIG-IP 5000 and 2000 series.
* Support network environment which consists of multiple security & network technologies, including but not
limited to: switching, routing, virtualization, firewalls, VPN and network monitoring tools.
* Design & deploy a remote-site VPN environment & solutions, providing an integration means for all business
partners and integrated companies. Act as an escalation point for network incidents and services. Also, ensure
proper support documentations are available.
* Ensure and manage Network stability, scalability, performance management and operational uptime.
* Provide afterhours support and change implementation on the system (As needed).
* Enable Site-to-Site VPN and network integration model.
* Lead Network standardization and best practices adoption.
* Work with vendors and partners on deploying network solutions and remediating any incidents.
* Creating process documents on network architecture, its design criteria, performance metrics, etc.
* Establish and own network reporting score cards.
* Perform routine backup and patch management operations for all network appliances.
* Strong communication skills to interact at all levels of the business domain
KAHRAMAA) - Doha, Qatar
* Responsible to Design, Configure, Deploy and Maintain the states enterprise network & security infrastructure.
* Responsible for new business integration and upgrades of complex network architecture to accommodate with
growing business requirements.
* Provide L3/L2 support for datacenter network components, Switches, Routers, Network Virtualization solutions,
Wireless and Data encryption.
* Monitor network traffic for circuit utilization, unusual activity, investigate and respond to security violations.
* Ensure security vulneraries, hardening standards are being adopted and followed.
* Onboarding and Certifying new F5 device to replace End of Support, End of Life legacy F5 appliances
* Licensing and provisioning of F5 modules such as LTM, GTM, VCMP (Virtual Cluster Multi Processing).
* Extensively worked on code upgrades from v11.5.3 to v11.5.3 and downgrades from 12.0.0 to 11.5.4.
* Extensively worked on virtual F5 LTM module on VMware for application testing.
* Extensive knowledge in configuration via CLI (TMSH and advance shell).
* Good knowledge on basic iRules scripting and debugging.
* Creating custom profiles, health monitors, and also configuring SNAT pools, syslog and SNMP
* Implementation of major application services with the iApps templates.
* Extensive knowledge and experience regarding F5 BIG-IP LTM VIP configuration with health check.
* Extensive knowledge and experience with hosting SSL certificates on F5 platforms.
* Experience in managing the load balancers in a high-availability infrastructure.
* Responsible to Refine and execute on the underlying technical requirements to increase corporate network
performance, by optimize, capacity planning and implement new technologies.
* Recommend best security practices to achieve stated business objectives, advises on risk.
* Assumptions for any variances granted and provides alternatives to achieve desired end results.
* Develop and update business continuity and disaster recovery protocols.
* Plan preventative maintenance schedules and managing network growth and development.
5
* Work with management and other IT Teams to build and implement security strategies that provide secure and
productive business.
* Creating documents on network architecture, its design criteria, performance metrics, etc.
* Perform routine backup and patch management operations for all network appliances.
* Network availability and performance measured through SLA Customer satisfaction, timely closure of risk and
audit observations.
* Responding to outages with a full diagnosis and rectification through incident management during business hours
and in an after hour on-call capacity.
* Active participation in process documentation as well policies and procedures enforcement.
* Ensure up-to date documentation of network infrastructure and inventory Liaise with vendor to ensure work
orders are performed satisfactorily Identify, research, evaluate and recommend network related tools and
emerging network technologies.
* Responsible to co-ordinate with Vendor for RMA
Responsible to provided support for Chase Paymentech Core Infrastructure Enterprise wide.
* Shouldered Resilient support for core network, front end merchant network, backend Authorization network and
internet network.
* Maintain the integrity and high-availability of network communications equipment at multiple locations.
* Responsible to perform implementation and support of all network communications equipment. Including but not
limited to routers, ethernet switching devices, terminal servers and network hubs.
* Support includes a large, complex and fault tolerant, scalable enterprise network, supporting our LAN and WAN
connectivity to worldwide clientele thru multiple data centers. Support various operating systems, protocols and
hardware for routing, switching, Internet connectivity, load-balancing, security, analyzers and monitoring.
* Diagnose, isolate, identify and resolve network communications issues of Paymentech networks.
* Maintained network communications configuration, policy and procedure documentation of all associated
equipment.
* Implemented Network Management capabilities of all network-based devices.
* Installed, configure, benchmark, test and document network communications hardware/software
installations/upgrades for all systems.
* Interacted with other Paymentech departments for support of various projects.
* Responsible to prepare network design with Cisco Network devices like Cisco Nexus 5020, 5010 for configuring
VDC, vPC.
* Responsible for design & implementation of Data Center Migration project.
* Responsible for publishing Application from F5 LTM Load Balancer, maintaining Server Farm, Persistence, SSL
Offloading.
* Responsible to plan & implement Network design within provided timestamp.
* Responsible to maintain core network devices in network such as routers, switches, wireless controllers, WAN
optimizers.
* Network support for products from Cisco, Microsoft, CheckPoint, TopLayer, F5, Riverbed, OptNet, InfoBlox, Voyence
and many others.
* Designing, creating standards and maintaining our enterprise network
Design Network and Implement complete connectivity solutions for L2/L3/MPLS/Leased Circuits/Internet
Gateways.
* Planning, Designing & Implementation for 2 Data Center setup.
* Provide Network Infrastructure for Migration of Online trading application from UAT to Production.
* Involved in IDC setup for hosting Online Trading based applications servers.
6
* Coordinate with multiple internal teams & with Customers for MPLS/leased/ISDN/IVPN based solutions and its
implementation.
* Handover of the projects to Operations Team with transition Methodology.
* Planning, Designing & Implementation for 6 Branch setups.
* Fall-Backup for Branches with VSAT through IPSec VPN.
* Responsible to break down complex problems into manageable chunks for fault diagnostics and root cause analysis.
* Responsible for case management, knowledge capture, defect management and Trainings.
* Working as a L1\L2 level support to large Global and domestic clients Operation.
* Management of all data center activities like Inventory Management, Change management, Incident Management.
* Managing daily service reports depending up on Downtime, Actual MTTR and respective RFO for reported faults
also escalations of the same to ISP to minimize downtime.
* Laisoning with Vodaphone, VSNL, BHARTI, RELIANCE SME for testing, commissioning of leased lines and ISDN
lines.
* Responsible to co-ordinate with Vendor for RMA.
* Coordination with the Cisco NOS and TAC Team to proactively support planned activity and correctively solve
network issues to ensure challenging uptime of the Critical Network.
* Responsible to break down complex problems into manageable chunks for fault diagnostics and root cause analysis.
* Responsible for case management, knowledge capture, defect management and Trainings.
* Working as a L1\L2 level support to large Global and domestic clients Operation.
* Working on a Ticketing Tool to support end user requirements in network LAN, WAN, Wireless.
* Responsible to design & implement client network.
* Supporting Data Center Servers commissioning, decommissioning and network operation, addition deletion of
devices in TACACS AAA Server on CentOS server.
* Responsible to co-ordinate with Vendor for VSAT Link & form the connectivity with VSAT links
Debugging hardware & software system level problems in a multi-vendor multi-protocol IP network environment.
* Handling production networking environment by implementing and managing it. Tier 3 support of incident
management and problem resolution process.
* Configuring & Troubleshooting issues related to Multicast based application in live environment.
* Monitoring & Troubleshooting MPLS, Leased Lines, ISDN, Radio Frequency, VSAT & VPN links.
* Monitoring Back-Haul connectivity towards Service Providers. Monitoring & Troubleshooting links towards
Exchanges (NSE / BSE / NCDEX / MCX / NSDL / CDSL / Conenct2NSE / NOW).
* Monitoring & Troubleshooting PRI/BRI, Channalized E1 links. Configuring ISDN backup for primary links.
* Maintaining Firewall, creating rules/policies with respective ports, as per request from applications team.
* Implement VPN connections using NetScreen Client.
* Manage TACAS+, RADIUS and Network & Security Monitoring tools.
* Maintaining & Troubleshooting Load Balancing Device (Radware) placed at local as well as in ISPs IDC.
* Remote configuration/planning/troubleshooting of Branch & Franchises offices. Managing & securing a complete
network & monitoring of Cisco routers connecting all India branches.
* Co-ordination with ISP (VSNL/TATA/Bharti/Reliance/MTNL) for links failures with RCA & troubleshooting.
Experience on MUX troubleshooting.
* Troubleshoot networking / Security issues on local LAN/WAN.
* Designing and Implementing New branch office network projects.
* Involved in UAT environment to roll-out multicast based application with coordination with application team.
* Involved in planning of activities with appropriate plan of action, documentations, Process/Change management.
* Involved in BCP for Planning & Designing.
* Design and deployed networks as per the company requirement. Consult on logical and physical network design.
* Maintaining backup configurations of all devices (Routers/Switches) & up-to-date network diagrams.
* Handling Network Infrastructure devices and equipment placed in Network HUB.
ITIL – Foundation Certification in IT Service Management (Certificate Number – 604027A187960
in
courses: Classroom Training * Implementing the Cisco Nexus 7000 v2.1 * Implementing Cisco ACI * Implementing Cisco ISE * Implementing BlueCat Address Manager
from