Network Administrator (CCNP-JNCIS)
Thuraya Telecommunication
Total years of experience :14 years, 7 Months
• Manage 7 firewalls, 6 routers, 60+ switches, wireless solutions, web gateway, SSL-VPN and Antivirus server.
• Able to design and manage WAN backbone, lease line, MPLS, IPSEC.
• Applied thorough knowledge in Firewall technologies by writing security policies, Network address translation, Virtual Private network, Policy base routing and bandwidth shaping configurations.
• Obtain in-depth knowledge in routing protocols such as OSPF, EIGRP and BGP.
• Analyze, identify and provide improvements on areas that contain single point of failure, congestions and bottlenecks.
• Design and implement high availability for Network devices by configuring RSTP, Link aggregation, HSRP, VRRP, NSRP and clustering.
• Build a Network monitoring server (PRTG) and syslog server (KIWI/Splunk) to proactively supervise the overall state of network links and services as well as to leverage the troubleshooting of any network related issue.
Technical Skills,
*Network
Layer 1 - Skills in structured cabling both copper and fiber and able to trace and troubleshoot end to end connectivity.
Layer 2 - Knowledge in configuring switches (Cisco, Juniper, HP, Brocade) for protocols such as Rapid Spanning Tree, VLAN, Trunks, aggregation and mirroring.
Layer 3 - Knowledge in configuring Router (Cisco and Juniper) for static routes, dynamic routes such as OSPF, EIGRP, BGP. Thorough understanding of Router access-list as being applied for security or route advertisement.
Layer 4 - Strong knowledge in configuring (Juniper Netscreen/SRX and Fortinet) Firewall features such as zone based firewall, Access-list and Firewall policies, IPSEC-VPN, GRE, NAT, Policy based routing and Policer or bandwidth shaping.
Layer 7 - Have initiated a project of upgrading the Perimeter firewall to Next generation firewall and perform a proof-of-concepts with Palo-Alto firewall.
*Security
Kaspersky Security Center
- Write policies and create automated task to ensure that all servers and workstations are having the latest version of AV application and latest database Signatures.
Nessus scanner
- Experience in scanning network or host scan to identify vulnerability on the version of software and applications as well as to identify the violation of configuration compliance.
Symantec Messaging Gateway
- Experience in writing mail gateway security policies to eliminate SPAM and viruses and malicious code embedded on the email messages.
Websense Secure Web Gateway
- Successfully implemented and obtain an in-depth knowledge on how Internet proxy works. Create web gateway policies to control URL filtering base on website categories and able to provide internet usage reports.
Pulse-Secure
- Obtain a strong knowledge and skills in managing our SSL-VPN gateway and providing secure connections to all internal and external customers as well as third party supports and consultants.
- Securely publish resources such as intranet web portals and provide ssl-vpn tunneling to support network dependent applications.
*Network Monitoing and Troubleshooting Tools
- In-depth knowledge in PRTG for Network bandwidth and traffic FLOW monitoring
- In-depth knowledge in Manage-engine Device expert that provides automatic device configuration backup and configuration change auditing.
- Experience in KIWI and Splunk syslog server to provide centralize syslog server for all network devices.
- Experience in using Wireshark packet sniffer, iperf and other online network lookup tools
*Operating Systems and Virtualization
¬ - Possess good experience working with Windows Server, SQL, Active Directory, DNS, Radius, DHCP
- Experience in managing virtual machines in both Hyper-V and VMWare
My duties are administering MSSQL 2000/2005 Database Server on Windows 2000/2003. Managing MySQL Database Server on Linux Fedora 8. Monitor the server performance and disc utilization. Optimized database transactions, user connectivity and security, database backup, migration, archiving and replication. Generate Ad-hoc reports requested by users and coordinate with other teams in performing daily administrative and development task.
Elected as the Team leader and lead programmer of our thesis. Obtain a grade of 1.75 Assigned as Database Administrator in a provincial hospital as part of the on the job training during our college practicum.