Network Manager
Agility Logistics
Total years of experience :18 years, 2 Months
Participated as a core team member in obtaining the ISO 27001 certification from TUV Rheinland for Infrastructure operations.
Lead the team to complete the quarterly reviews (Access Control Review, Capacity Plan Review, Network Log Review, Backup Review, Disaster Recovery Test Review, Technology Review, Patch Deployment Review, Performance Review, Incident Management Review, Change Management Review and Contract Review) for ISO 27001 (Version 2013) internal and external audits.
Played a key role in implementing the Data Center infrastructure and migration of critical services from Temporary Data Center to New Data Center.
Design and implementation of segregation in Data Center network with Inside, DMZs, WAN and Internet layers through Cisco FWSM and Juniper SRX firewalls.
Design and implementation of high availability on WAN & Internet links of KGAC Data Center and 14 major branch offices using BGP protocol through MPLS cloud.
Configured OSPF, EIGRP, PBRs and Route redistributions between different routing protocols for internal office connectivity.
Performed Redundancy testing activities for Data and Internet links to ensure minimal downtime (
Design, implementation and troubleshooting of complex network architectures.
Working on medium and major plans which will create/change the network architecture by keeping the service uptime to 99.9%.
Worked on severity calls 1, 2 & 3 and prepared RCAs and Incident Reports.
Expertise in designing and assigning IP addressing scheme in an enterprise level.
Hands on expertise in configuring Cisco high end routers (7600, 7200, 3800, 3600, 2800 and 1800) and switches (6500, 4500, 3750, 3500 and 2900).
Configured BGP over MPLS cloud with redundancy and tuned for minimal failover time (1 to 3 sec).
Performing redundancy testing for links and devices on quarterly basis.
Performed Capacity and Performance management for the customers.
Configured BGP, OSPF, EIGRP and static routing in LAN and WAN communications.
Expert in the use of PBRs (Policy Based Routing), route redistribution and ACLs.
Configured VLANs, VTP, trunk, Ether Channels and STP on Cisco Switches.
Implementing redundancy over the campus network through HSRP and VRRP.
Hardened Cisco devices against vulnerable services and performed VA tests.
Experienced in configuring routing, security policies and NAT rules in Checkpoint, Nortel and Juniper firewalls.
Centralized management of over 100 checkpoint firewalls through Provider 1 Smart Management appliance.
Upgrading IOS in stack switches and routers for supporting business requirements.
Cisco 6509 (High-end Model Switch) chassis installation and configuration.
Configuration of Cisco ISR Routers (1841, 2851 and 3845) and High-end Switches (6509, 3750, 3560 and 2960) for the enterprise needs.
Configuration of Cisco ACS for authentication, authorization and accounting using TACACS+.
Configured Juniper ISG 1000 firewall with policies, URL & content filtering and configuring Intrusion Detection and Prevention (IDP) using NSM.
Configured Packeteer (Bluecoat 3500) for bandwidth allocation to servers in data centre and PCs in NOC area.
Implemented BGP for our Data Center to advertise the APNIC IPs to and default route from two different ISPs.
Implemented MPLS connectivity with the client sites using static & dynamic routing.
Expertise in designing and assigning IP addressing scheme in an enterprise level.
Design and Implement VLANs, VTP, trunk, MLS and RSTP on Cisco Switches.
Configuring Ether channels between distribution and core switches using PAGP.
Implementing redundancy over the campus network using HSRP
Configured OSPF, static and default routing for our LAN and WAN communications.
Redesigned Network Infrastructure in client place with Enterprise Composite Model.
Implemented Site-to-Site VPN between the client’s sites using Cisco routers 1841.
Implemented Remote Access VPN for users, using Fortinet Firewall 200A.
Implemented port security on Cisco Switches to prevent internal network attacks.
Performed Vulnerability Assessment on servers, routers, and switches using tools (such as Nessus, SolarWinds, GFI Languard etc) and fixed the threats.
Good in the use of monitoring software like Cisco LMS and Manage Engine (OP Manager, Netflow Analyzer and MRTG).
Configured scheduled backups for Cisco devices using Cisco LMS 3.1.
Participated on planning and implementation of network hardening process.
Generating daily reports on bandwidth usage from MRTG and Netflow Analyzer.
• Configuration of vlans and trunk in the Cisco switches.
• Configuring VTP and STP on Cisco 2950 switches.
• Configuring static and default routing on the Cisco Routers.
• Configuring NAT, PAT and Access Control Lists for internet connectivity.
• Backup and restore the configurations on Cisco routers and switches using TFTP.
• Upgrading the router and switch IOS using TFTP.
• Managing users, groups and computers in the active directory infrastructure.
• Creating and deploying application packages using windows group policy.
• Installing and configuring DNS and DHCP servers.
• Managing patch management using WSUS and checking updates using MBSA.
• Configuring file and share level permissions to files and folders.
• Network and standalone printer’s configuration and troubleshooting.
• Installing antivirus on clients and servers and updating the virus definition files.
• Perform backups and restores in a scheduled basis using NT Backup utility.
• Implementing wired networks using switches, cables and RJ45 connectors.
• Configuring and troubleshooting Internet Connection Sharing.
• Configuring file and share level permissions to files and folders.
• Network and standalone printer’s configuration and troubleshooting.
• Installing antivirus on clients and servers and updating the virus definition files.
• Configuring Outlook Express and taking backups and restores of mails.
• Installing and troubleshooting operating systems and application softwares.
• Assembling computers and troubleshooting hardware related problems.