Network & Security Analyst
NETS International
Total years of experience :15 years, 8 Months
Responsible for the designing and implementing scalable networks those can fulfill the needs of customer. The responsibilities include:
• Preparation of the Low Level Designs (LLD), Method of Procedures (MOP) & Network Implementation Plans (NIP) and Port Matrices (PM).
• Configuration of Routers for enterprise management & data network routing and MPLS-VPN terminations as per requirement of the customers.
• Configuration of Firewalls for Lan2Lan IPsec-VPNs, Remote-Access SSL-VPNs, content filtering including URL/DLP/Applications/AMP and Intrusion Prevention System (IPS).
• Configuration of Cisco Switches Nexus-series & CAT-series to ensure proper connectivity for end-users to access centralized services by managing proper VLANs allocations.
• Configuration of Cisco ISE in conjunction with Active Directory for corporate and guest users’ authentication & authorization policies for wired, wireless, VPN and management access.
• Configuration of F5-Big-IP to ensure load balanced servers’ availability.
Being the network & security engineer, I am responsible for the establishing and maintaining a robust, secure and scalable network that can fulfill the needs to run business applications of the FEDNET project of Government of UAE and Du-telecom Network.
• Recent Activities:
• Implementation of Fortinet 100d (in HA) in conjunction with Cisco ASA 5555x (in HA) for Defense in Depth. Moreover F5-BigIP-4000 (in HA) were configured for Local Traffic Management to enable proxy services for installed four web servers (HP). While Cisco Nexus-3K (in HA) were deployed for connecting servers with rest of the devices.
• Replacement of Cisco ASA 5520 with a pair of ASA 5525x (in HA).Moreover Firepower was implemented for filtering URL, Applications, AMP and IPS.
The day-to-day activities conducted, include both installation and operation responsibilities;
• Installation & Configuration Responsibilities:
• Developing Low Level Design (LLD), Network Implementation Plan (NIP) and Acceptance Test Plan (ATP).
• Configuring IP core, edge and data center Routers, Switches, Firewalls and Servers & Load Balancers as per the customer requirements. Mostly network devices are configured in HA mode to avoid any network downtime.
• Configuring Cisco Routers for enterprise management & data network routing and MPLS-VPN terminations as per requirement of the customers.
• Configuring Firewalls for Lan2Lan IPsec-VPNs, Remote-Access SSL-VPNs, content filtering including URL/DLP/Applications (both web or thin client & desktop or thick client)/AMP and Intrusion Prevention System (IPS).
• Configuring Cisco Switches Nexus-series & CAT-series to ensure proper connectivity for end-users to access centralized services by managing proper VLANs allocations.
• Configuring Cisco ISE in conjunction with Active Directory for corporate and guest users’ authentication & authorization policies for wired, wireless, VPN and management users.
• Configuring F5-LTM to ensure load balanced servers’ availability.
• Configuring Syslog, SNMP, NTP & SSH for management network access & monitoring and packet captures on network devices and servers.
• Operation & Maintenance Responsibilities:
• Supervision of equipment and service configuration, testing and supporting in various stages of deployment.
• Managing and keeping internal networks running and implementing preventive maintenance.
• Maintaining and assuring update of network documents and diagrams.
Being the IT Engineer, I joined Bukhari Stationery LLC to provide Network Infrastructure, Security and Desktop support. The responsibilities included;
• Installation of Cisco Router 2911, Cisco Switch 3560 and Cisco ASA 5520 Firewall.
• Implementation of DMVPN across all branches on Cisco Router 2911.
• Installation and Maintenance of Computer & Peripherals both Software and Hardware.
• Installation of Wireless LAN across all branches and head office using Cisco WLC and Cisco APs
d;
Being the Network Engineer in this company, I successfully completed designing, implementation and troubleshooting of many different computer networks of enterprise environments. The responsibilities included;
• Installation, Configuration and Troubleshooting Cisco 2800 & 2900 series routers, Cisco 3500 & 3700 series switches, Cisco ASA 5500 series firewalls.
• Interaction with various service providers for connectivity of customers' branches for MPLS-VPN on Customer Edge.
• Implementation of several different VPNs including SSL-VPN, IPSec-VPN.