Vijay Dubey

 Configured and maintained Spine-Leaf data center from NDFC, architecture supporting AI and GPU
based workloads.
 Configured VXLAN overlays with BGP L2EVPN control plane for scalable Layer 2 extension across
the data center fabric using OSPF as underlay.
 Managed VTEP configuration and validation on Leaf switches for VXLAN tunnel establishment and
endpoint connectivity.
 Established and monitored BGP EVPN peering sessions for MAC/IP route advertisement and
workload mobility
 Implemented VLAN-to-VNI mappings and tenant segmentation to support multi-tenant AI
infrastructure environments for backend networks
 Performed troubleshooting of overlay and underlay networking issues involving OSPF, BGP, EVPN,
and VXLAN tunnels
 Deployed Check Point SG29200 security gateways in VSX (Virtual System Extension) mode to
provide multi-tenant east-west traffic inspection across GPU compute, storage, orchestration, and
DevOps zones within the AIDC fabric
 Configured VSX virtual systems with dedicated routing instances per tenant VRF, ensuring full east
west traffic isolation between AI training workloads and production inference environments
 Deployed Palo Alto PA-5440 NGFWs in HA active/passive pairs at the perimeter to enforce north
south security policy for all internet-facing and inter-zone traffic.
 Dedicated Palo Alto PA-1440 NGFW cluster enforces all out-of-band management access,
separating management-plane traffic from production data-plane flows.
 Designed security zones: Outside, DMZ, Trust, GPU Compute, DCIM, OBN, Storage, NOC, SOC and
operations
 Configured Panorama for centralized policy management, log collection, and role-based admin
access across all Palo Alto devices.
 Part of deployment of F5 BIG-IP LTM in HA pair for application load balancing of AI API endpoints,
and management portals.
 Configured F5 virtual servers with TCP/HTTP profiles, SSL offloading (iRules), and health monitors
for GPU inference services.
 Integrated F5 ASM (Application Security Manager) WAF policies for GPU API endpoint protection.
 Installed and configured Cisco ISE nodes in VM and integrated with Active Directory for user and
computer authentication
 Deployed TACACS+ device administration via ISE for centralized CLI access control across Cisco
routers, switches, and firewalls — eliminating local enable passwords from all network devices
 Configured ISE TACACS+ command authorization sets with role-based privilege levels: read-only
read and write with AD as a Authentication.
 Used ISE Live Logs and RADIUS authentication detail reports to troubleshoot 802.1X authentication
failures, identifying mismatched EAP methods, expired certificates, and AD join failures as root
causes
 Worked on Dell PowerEdge GPU servers (XE9680/XE9780 series) supporting NVIDIA H200 and
B300 GPUs for AI and HPC workloads
 Managed network integration for Dell PowerEdge XE9680/XE9780 GPU servers running NVIDIA
H200 and B300, supporting AI and HPC workloads across frontend and backend GPU fabrics.
 Deployed Cisco Firepower Threat Defense (FTD) in passive mode on core network, receiving
mirrored traffic via Gigamon without impacting production traffic flows to send Splunk.
 Deployed Firepower Management Center(FMC), to manage FTDs and make any changes from FMC
 Worked on ManageEngine OpManager and SDP as an integrated IT monitoring and ticketing
solution, streamlining incident management and reducing ticket resolution time
 Integrated Cisco switch monitoring across the network infrastructure into OpManager, enabling
centralized log collection, real-time alerting, and proactive fault detection

 Managed a 24/7 high-availability enterprise network supporting 50K+ Customers geographic
regions.
 Masters in WAN and LAN, MPLS, VPLS, Xconnect, ILL, ADSL, GPRS 3G&5G Networks, Layer 2
Networks.
 Configure, monitor, and maintain, Palo Alto firewalls, and enterprise-grade routers/switches.
 SDWAN implementation with FortiGate firewall for 10k branches
 Collaborate with network architects to deploy BGP/MPLS solutions in a multi-tenant environment.

 Resolved routing issues (OSPF/BGP) and VPN tunnel drops across WAN and cloud infrastructure.

 Deployed redundant BGP configurations for global failover in collaboration with ISP vendors and
cloud providers.
 Optimize routing protocols (e.g., EIGRP, OSPF, BGP) used within the DMVPN network for all major
banks, high end customers.
 Designed and implemented Layer 2/3 network solutions across multi-site environments, ensuring
high availability and low latency.
 Conducted packet-level TCP/IP diagnostics to troubleshoot intermittent connectivity issues and
application latency.
 In Depth Trouble shooting on UDP, DHCP, ARP, NAT, DNS, HTTP, SSL/TLS, IPSEC protocols.
 Deployed and supported SD-WAN solutions for remote offices, improving WAN performance by
40%.
 Tuned QoS settings to prioritize voice and critical traffic across WAN/MPLS links, reducing latency
by 30%.
 Performed firmware upgrades on HO, critical devices and patch management during scheduled
maintenance windows.
 Worked with security teams to investigate and mitigate DDoS attacks and unauthorized access
attempts.
 Participated in the implementation of redundant routing architectures (dual-homed, HSRP/VRRP).

 Performed regular DR (Disaster Recovery) failover testing, ensuring all redundant paths and
systems worked as expected.
 Implemented network-level redundancy for all critical systems (dual ISP, dual routers, dual-homed
firewalls).
 Lead or contribute to network-related projects, such as migrations, upgrades, or expansions.
 Developed Python scripts with help from Cisco Tac, to capture the logs at the time of issues.
 Act as final escalation contact for NOC, resolving high-priority P1/P2 outages and recurring network
issues.
 Conduct root cause analysis (RCA/RFO) and author detailed incident reports for senior
management and clients.
 Ensured adherence to SLAs by monitoring incident MTTR, change success rate, and service
availability metrics.
 Mentor and train L1/L2 NOC technicians; developed SOPs and technical documentation.
 Mentored a team of 6 junior engineers, resulting in internal promotions and improved L1/L2 ticket
resolution by 35%.
 Represented NOC in Change Advisory Board (CAB) meetings to assess technical risks and business
impact.
 Handled escalations impacting customer-facing systems and ensured minimal downtime through
proactive response.

 Responsible for IBM Blue Sky WAN & LAN of whole US, Canada & EMEA Region.
 Deploying new sites depends on users, ECA, EDA, ECD and VSC
 Configure L3 protocols (IP, BGP, OSPF, EIGRP, IGRP, RIP, HSRP, VRRP)
 Redistribution, summarization, Filtration (using distribute list, route map, prefix list, access list).
 Performing Test & Turn-up (TTU) for all Global Customers which includes installation.
 Configuring and troubleshooting Juniper QFX5100 series in all formats
 Configuring and troubleshooting Juniper devices EX, 2200, EX4200, EX4300 as a stand-alone and
stack.
 Configuring, troubleshooting & upgrading controllers 2504, 5508, 5520 as Standalone, dual
standalone, HA mode, anchor tunnel
 Configuring latest model of cisco 9300 switches, having basic knowledge of 9500 switches.
 Upgrade/downgrade of IOS for switches/routers, worked on Cisco/Juniper platform.
 Handling project for LAN and WAN installation for network infrastructure Equipment.
 Configured Nexus 7K/6K/5K/3K/2K in Top of Rack & End of Row
 Handling migrations project for LAN and WAN installation for network infrastructure Equipment. Performed in New/Existing gradation Physical/Logical for Global Preventive maintenance for all network every quarterly. Interacting with Integration team and GCSC and closing backlog Handling Projects like tech refresh, implementing new network
 Ensure positive Client and client