Lead Network Security Engineer
Afiniti
Total years of experience :11 years, 10 Months
Resposible to manage global Network of the organization
having Network foot print in more than 20 countaires.
Managing the Network Secuirty and Clients connectivity based on Cisco Firewalls ( ASA, FTD, Firepowers ) PaloAlto
Hand on experience of BIG IP F5 Load balancers for managing the services and WAF, Irules etc.
Invloved in Network Design and operation of company netowrk based on Cisco Nexus switches and Cisco ISR routers
Manage all the connectivities like MPLS, L2 / L3 links and to make sure 100 % uptime for all sites using dynamic routing like BGP, OSPF, GREs
Manage Netowrk Secuirty and DMZ setups with rules based on ASA 5555x, FTD 21XX, FMC.
Having handon experisnce of Mirosoft Azure Cloud
Achievements/Tasks
• Leading & managing the team of Network Professionals involved in the designing, technical presales & IP operations for Layer-2/Layer-3 data & internet circuits, MPLS IP Transit, L2/L3 VPN services.
• Responsible to provide the 24*7 level-2/level-3 support to customers & internal departments for IP network configuration and troubleshooting.
• Assisting subordinates in trouble shooting daily routine network related issue.
• End to end solution design from preparation for the network up-gradation on access, distribution & core layer till customer end deployment.
• Planning, Design and implementation of upgradation and redundancy of Metro Ethernet fiber POPs.
• Managing and configuration of auto heel redundant fiber Rings using STP, RSTP and REP.
• Design, Maintenance and Provisioning of MPLS based L2, L3 VPN circuits.
• Troubleshooting Core Network and Access Layer devices (Cisco ASR 9000 Series, Cisco 7609, Cisco 7200, Cisco 9300/6500/3800/3700/3600/3400/2900 series, MikroTik CCR series, RB2011, RB3011, RB750, Huawei 5700/9303 series Switches and NE-40/NE-20 Routers.
• Q-in-Q circuit design and provisioning for corporate customer through Metro Ethernet Ring.
• QoS implementation on Layer 2 and Layer 3 circuits.
• Planning and Commissioning of DPLC and IPLC
• Responsible of Deploying Layer 2 / Layer 3 auto Failover for customers and maintaining 100 % uptime.
• Configuration and Troubleshooting with TEIR-1 Operators for BGP Peering’s, MPLS connectivity and NNI connectivity and TEIR-2 / TEIR-3 Operators for Layer-2 connectivity.
• Maintaining and upgradation of 24/7 Network Monitoring using Solo wind NMS, NPM Orion, syslog’s, PRTG, Dude.
• Manage Virtual infrastructure of services on EXSi 6.0/5.5, install and configure different services like BIND DNS, SMTP servers, Voice Gateways and Data Center design and cabling.
• Monthly Tasks assignments to NOC team members and evaluation, Team Trainings over different technologies.
• Complete Network Reporting, documentation and Project proposals.
•Configuration and Management of complete LAN environment, Access layer switches (3750, 2960, 3550, CE 500, 3COM, SMC).
•Managing and configuration of WAN link aggregations between different sites.
•Interaction to ISPs for different link, layer 2, layer 3 VPN data links,
•MPLS and BGP peering with ISPs in all regions connectivity.
•Managing and deployment of CME for inter site communications and communication with remote DSNGs via satellite links.
•Managing Alcatel PABX and Asterisk based Elastix PBX for enterprise, aggregation of DIDs from different vendors.
•Configurations of QoS and policy based routings in all regions on Cisco 2900, 3800, 7200.
•Design and implement network operation in all regions and plan and implement proper redundancy of all WAN circuits and manage traffic flow.
•Planning and development for the upgradation of Network and assign different projects to network team in all regions.
•Managing Team of more than 10 Network professional and assign tasks and plan activities.
•Complete Enterprise network security using Cisco ASAs 5510, 5550 firewalls and IPS/IDS management using Panda GDP e9100 and using Pfsense for some projects.
•Manage ACS server, Radius server for the security and gateway of Wi-Fi Network.
•Complete Network monitoring of all regions using Solar Wind Orion server, Cacti server,
PRTG, Environment monitoring of data center using AVTECH.
•Schedule weekly meetings with all team members in all regions.
•Complete documentation of Network dept and reporting to Director IT.
•Configuring and managing Cisco switches 3750, 3550, 2960, 2950 in multi vlan environment for data and voice.
•Monitoring and troubleshooting Enterprise Network using PRTG, solar wind SYSLOG, Netflow analyzer, NPN Orion server, Cacti server
•Deployment, commissioning and configuration of WAN circuits (E1, MPLS) in all offices, locally in Lahore and remotely in USA, China and Philippines.
•Configuring and troubleshooting Cisco 3700, 3800, and 2800 series routers for routing between Corporate office in USA and branch offices in Lahore, China and Philippines (EIGRP, OSPF, Access control and policy based routing)
•Configuring Cisco ASA5515 and PIX 515 for network security and IPsec VPN to multiple clients to different location.
•Deploying and configure redundancy of all P2P link using IPsec GRE tunnels.
•Server administration and configurations of DNS, FTP, DC, ADC, Proxy Squid, DHCP
24 /7 monitoring and troubleshooting of Lahore region network of Qubee.
Monitoring and configuration of Core network of Qubee
Escalations to different Transmission vendor for rectification and communication with upstream vendor.
deal with any power issue on sites
configurations of Wimax core equipment and huwaei Routers and switches NE-40, NE-20, S9300
managing and monitoring of DNS servers
Deployment of Cacti server,
Primary job responsibilities includes
• Configuring and managing Catalyst 3750 switch (VLANs)
• Configuring and managing DHCP Server.
• Monitoring and troubleshooting Network using PRTG, SYSLOG, Netflow analyzer.
• Deployment and configuring SIP based Asterisk VICI DIAL Server.
• Managing RED HAT based SQUID PROXY Server.
• Configuring and troubleshooting Cisco Routers (inter VLAN routing, IGP protocols, ACL)
• Configuring Cisco routers for NAT/PAT.
• Monitoring of IPSec GRE tunnels and dedicated IPLC.
• Managing Local IT.
I have done BS in Electrical Engineering specialize in Telecommunications my major courses were listed below 1) Digital and Analog communication 2) Microwave communication 3) Data communication and computer networks 4) Wireless communications systems 5) Network Programming
URL removed due to policy violation. Please contact support for further information.