شهاب Nisar

• Lead all stages of network and security projects starting from RFQ to deployment, spreading across final deployment, and managing ongoing operations thereafter.
• Design and implement network solutions tailored to organizational requirements.
• Manage a team of 3 engineers to ensure efficient network operations.
• Maintain strong vendor relationships to facilitate network upgrades and solutions.
• Oversee and perform upgrades of core network components including Cisco ISE, FortiGate, FortiSwitch, FortiSDWAN, FortiManager, FortiAnalyzer, core switches, 850+ access switches, core routers, and other network equipment; also manage regular firewall signature updates to maintain optimal security posture.
• Prepare High-Level Designs (HLD) and Low-Level Designs (LLD).
• Conduct regular security audits and risk assessments to ensure compliance and secure environments.
• Manage access control for thousands of users via Cisco ISE.
• Develop and test disaster recovery and business continuity plans.
• Maintain detailed documentation of network architecture, security policies, and procedures.
• Provide training to employees on security best practices.
• Manage and maintain FortiSDWAN infrastructure to optimize WAN performance and ensure resilient connectivity.
• In-depth knowledge and practical experience with specialized networking protocols and security standards applicable to defense environments, ensuring strict compliance and operational reliability.

• Deployed and configured network infrastructure across the airport terminal, ensuring stable operations in a live 24/7 aviation environment.
• Maintained day-to-day Level 2 operations and provided real-time troubleshooting across Main Data Center (DC) and Disaster Recovery (DR) environments.
• Designed network data flows and supported ad hoc connectivity requirements across airport systems and operational zones.
• Led on-site commissioning activities in coordination with commissioning authorities and ground teams.
• Planned and executed disaster recovery tests, and prepared DR plans as part of business continuity strategy.
• Integrated and onboarded various critical airport systems (BMS, LMS, PAVA, FAS, PAS, FIS) to the network, understanding and accommodating their protocols and communication needs.
• Created and reviewed network design documentation including Low-Level Designs (LLDs) and High-Level Designs (HLDs).
• Managed technical escalations end-to-end, coordinating directly with vendors when required.
• Ensured timely patching of network devices in compliance with SLA and change management protocols.
• Operated within a private MPLS cloud environment with multicast, BGP, OSPF, VRF, and VPLS; monitored infrastructure using Cisco Prime.
• Conducted deep-dive log and trace analysis for troubleshooting within a complex, integrated airport network.
• Reviewed system changes for security implications and worked with architects to align network readiness with evolving application needs.

• Managed end-to-end operations of network and security infrastructure in a Tier 3 data center, supporting banking, government, and enterprise clients.
• Handled troubleshooting, log analysis, system upgrades, and firewall/device patching for UDC and NGDC environments.
• Deployed and optimized security devices including Palo Alto, Fortinet, and Cisco ASA; fine-tuned firewall policies and VPN configurations.
• Supported Cisco core technologies (Nexus 5K/7K/9K, 6500, ACI), working with OSPF, BGP, HSRP, MPLS, and multicast.
• Participated in DR topology planning, system backups, and 24/7 operational support.

• Designed and deployed network solutions, including Next-Generation Firewalls (NGFW), Endpoint Protection, routers, and switches, as per customer requirements.
• Led or supported projects across technical phases from design (HLD/LLD) to deployment and commissioning.
• Conducted POCs with customers and coordinated directly with vendors to resolve Layer 2/3 technical challenges.
• Acted as a key technical resource throughout project lifecycles, ensuring smooth handover and integration.

• Assisted in configuration and troubleshooting of core network devices and firewalls for Ultra Mobile’s campus and enterprise networks.
• Configured Cisco 6500 switches, VPNs (S2S, C2S), OSPF, and managed BGP routing for traffic control and load balancing.
• Worked with Palo Alto NGFW, Fortinet, and Cisco ASA firewalls, including multi-context and failover setups.
• Coordinated with vendors and service providers to resolve technical issues and perform network upgrades.
• Established KPIs and SOPs to support team performance and operational standards.
• Performed network maintenance, system upgrades, and security configurations, including patching and hotfixes.
• Configured routing protocols such as RIP and OSPF, and utilized Wireshark and log analysis for effective troubleshooting.
• Managed VLAN-based STP, QoS policies, ACLs, NAT, and port redirection to optimize network performance.
• Configured IVR using MLS/router-on-a-stick techniques and monitored network availability using NetFlow and other tools.
• Resolved customer tickets within SLA timeframes, ensuring adherence to KPIs.