Junaid ahmed Bakhsh

● Designed and supported secure hybrid connectivity between enterpriseon-premise environments and cloud platforms, ensuring secure access, segmentation, and high availability.
● Designed high-availability data center and campus network architectures, ensuring 24/7 availability for emergency response, surveillance, and smart-cityplatforms.
● Led the design and implementation of enterprise SD-WAN and secure site-to-site VPN connectivity supporting distributed public safety locations andremote sites.
● Defined and implemented network security architecture using Next-Generation Firewalls (FortiGate, Palo Alto), segmentation, Zero Trustprinciples, and secure remote access.
● Played a key role in establishing the SOC, integrating SIEM, SOAR, andEDR platforms to improve threat detection, response time, and operationalvisibility.
● Designed and secured IoT-driven smart city connectivity, supportingsurveillance systems, sensors, and automated control platforms, whilemitigating IoT-specific security risks.
● Developed and enforced information security standards, policies, andguidelines aligned with industry best practices and regulatory requirements.
● Led and mentored a team of network and security engineers, providingtechnical direction, design reviews, and operational oversight.
● Acted as a key technical stakeholder coordinating with vendors, systemintegrators, and internal teams for network, security, and smart-city initiatives.
● Owned architecture decisions, high-level designs (HLDs), andimplementation strategies for public safety network and security platforms.
● Implemented security frameworks for IoT devices, mitigating potentialvulnerabilities in large-scale public safety networks. Delivered secure IoTconnectivity for surveillance, sensors, and smart-city platforms.

● Planning, designing of Corporate Firewalls architecture and implementing in distributed environment.
● Responsible for driving vision and laying out roadmap for security technologies Responsible for developing overall strategy and implementing different security technologies
● Assist in the administration of user access and privileges to applications/systems, ensuring that access requests are properly authorized, appropriately documented, and accurately fulfilled.
● Troubleshoot user access issues, including determining cause and implementing resolution.
● Designing and implementing reliable and highly available Network topologies.
● Assist in the implementation of logical user access policies, standards, and guidelines that balance business requirements, risk tolerance, and the clients policies
● Maintaining Corporate Firewalls & Analysis of firewall logs using various tools.
● Planning & implementation of information security guidelines as per the security standards.
● Designing and implementing different connectivity solutions with S2S VPN and Remote site VPN.
● Oversee a team of Engineers who perform network security technologies engineering and operation functions that include talent management, performance reviews, compliance tracking, entitlement reviews.

● Working as a Network specialist from IBM at Saudi Ma’aden industry in network modernization project to participate in implementation in SDWAN, SDA, ACI
● Hands-on experience in configuring Viptela devices and creating device and feature templates on vManage required for SD-WAN implementation.
● SD-WAN is assign policies, and configure devices and sites.
● worked with the team of network engineers to design and implement industry-leading SD-WAN infrastructure to provide secure, carrier independent
● Implement Cisco Prime Infrastructure and APIC-EM solution for network management and SD-WAN
● WAN connectivity across the enterprise. Integrated with existing BGP environment to redistribute routes seamlessly from Viptela into traditional MPLS WAN
● Worked in an environment with Border leaf, Spine and Leaf architecture
● Implemented Policy Maps, ACI, SOAP, Class-maps, and Policy Routing in the network infrastructure throughout all the different sites
● Provide second technical support for ACI (Application Centric Infrastructure), APIC technologies
● experience in Software Defined Networking (SDN), TCP/IP, OSPF, EIGRP, MPLS, BGP, routing, and switching technologies.
● Knowledge of routing protocols and network security design and implementations for BGP, OSPF, EIGRP, MPLS, NAT/PAT, IPSec tunnels, VPN, Zscaler, STP, PVST, RSTP, split tunneling, underlay and overlay routing, etc.

• Supported and maintained mission-critical aviation network infrastructure,
ensuring high availability and secure connectivity for air navigation and
operational systems.
• Implemented and managed Meraki SD-WAN, firewall policies, and enterprise
wireless networks, supporting distributed operational sites.
• Designed and enforced 802.1X authentication for wired and wireless access
using Cisco ISE, integrating with Active Directory for role-based access
control.
• Performed Level-2/Level-3 troubleshooting across routing, switching,
security, and identity services, minimizing downtime in a highly regulated
environment.

● Administering & designing of Data Networks.
● Configuration of Cisco switches, Cat-2960s, Cat-3750x, 450x, 650x series switches.
● Configuration of Cisco ISR 190x, 290x, 390x Routers.
● Installation designing of IP-Based networks.
● LAN, WAN designing & installation.
● IP-Switched networks installation includes VLANs, STP, VTP, EtherChannel’s, VPC, VSS, 802.1q, High availability
● Routing installation include OSPF, BGP, Static routing, Redistribution.

• Management and troubleshooting of Cisco Access points
• Troubleshooting network infrastructure devices, including: routers, switches,
wireless controllers and access points, and monitoring applications.
• Planning and implementing future IT developments and undertaking project
work.
• Hands-on experience on configuration of switches: 375x, 356x, 296x series
etc. and routers: 260x, 250x series.
• Diagnose problems and solve issues, often under time constraints.
• Work closely with colleagues to meet team goals and improve processes
and practices
• Troubleshoot networking issues both LAN and WAN.
• Handled multiple tasks to meet project deadlines.