SUMMARY:

• Saeed is a seasoned network and security consultant with extensive experience in design, build, operate and consultancy roles and over seven years in technical lead positions.
• He has worked with large enterprises within different sectors such as government, commercial, financial, service provider, and system integrator that has exposed him to various hybrid network designs and builds with multi - vendor setups and diverse business requirements, scales, and budgets.
• In recent years, Saeed has assisted Australian financial organizations through their private/public cloud transformations as well as security developments from designing stage to build and support.
• In addition to his technical competencies, Saeed has also shown strong technical project management and leadership skills through successfully delivering network and security projects that required sound stakeholder/vendor planning and communications.
• Saeed is interested in roles that the main focus of it is technical leadership and ownership of work and secondly it requires strong in-depth and diverse technical capability in the area of networking and security.

TECHNICAL SKILLS:

Routing and Switching: Cisco Nexus/Catalyst/ISRs, Juniper EX/QFX/MX, HP

Security Platforms: Palo Alto, Cisco PIX/ASA, Fortigate, MacAfee Enterprise Firewall, Huawei EuDemon Firewall, Barracuda Spam Firewall, Juniper IDP, McAfee IntruShield, Cisco ISE, Cisco ACS

Load Balancers: F5 Local and Global traffic managers (LTM/GTM), Microsoft NLB, HAProxy, NGINX

Network Management/Monitoring/Analytics: CiscoWorks/Prime Infrastructure, Solarwinds, Splunk, Netflow Analyzer, AlgoSec Firewall Analyzer, ManageEngine OpManager, Cacti, MRTG, Nagios, Rancid, Zenoss, Wireshark, Zenmap

Private Cloud: VMWare ESX/NSX, Microsoft Hyper-V, Parallels Virtuozzo

Public Cloud: Amazon Web Services (VPC, EC2, ELB, Route53, CloudFront, IAM, ACM, CloudWatch, CloudTrail)

Linux/Unix: CentOS, Fedora, Ubuntu, FreeBSD, Kali

Microsoft: Active Directory, DNS, DHCP, IIS, Exchange Server

Scripting Languages: Perl, JavaScript, SQL, Regular Expressions

IT Service Management Tools: BMC Remedy, ServiceNow, MS SCSM, Sunview ChangeGear

PROFESSIONAL EXPERIENCE:

Cloud Solutions Consultant

Confidential

Responsibilities:

• Planning, communicating, and executing various network and security infrastructure changes across multi region data centres.
• Commissioning, managing, troubleshooting VMWare NSX virtual networks and services.
• Building virtual Palo Alto firewalls on VMWare NSX
• Streamlining Palo Alto firewall configuration through scripting to expedite deployments across global data centres and reduce human related errors.
• Management of a large-scale multi-region Palo Alto firewall deployment through Panorama.
• Management of complex and diverse connectivity and routing infrastructure at a global scale.
• Planning and implementing BGP routing and policies between Palo Alto firewalls, NSX ESG and DLR components, and the physical network infrastructure
• Investigating network issues related to the private cloud build related to NSX components, Palo Alto firewalls, and physical network infrastructure.
• Use Splunk to analyze traffic trends, generate reports, and create monitoring dashboards for Palo Alto Firewalls.

Network & Security Engineer

Confidential

Responsibilities:

• Delivering network projects in a large and complex network with Cisco NX-OS/IOS, F5 GTM/LTM/APM/ASM, VPNs, VRFs, Firewalls, and diverse WAN connectivity.
• Active engagement with solutions architects and delivery leads to design and build new network and security solutions.
• Leading the PoC and Design (HLD, LLD) of Software Defined Perimeter to provide granular identity based and step up 2-factor authentication to business-critical applications through mobile push notifications.
• Leading the PoC and implementation of Cisco Identity Service Engineer (ISE) NAC solution across campus network to secure Corporate / BYOD / Guest network access.
• Developing detail design documents for new product development to be integrated into the existing environment.
• Review network security against internal and global baselines / industry compliance in preparation of audits.
• Contribution to regular DDoS testing exercises by working with internal teams to prepare the environment and scope the test, engaging with the managed DDoS protection service provider and coordinating with DDoS launch vendor.
• Actively contributing to security processes and procedures to comply with regulations, ING local and global compliance, improving risk appetite ratings.
• Working closely with IT Security to review risk and security findings and propose/develop solutions to address findings.
• Acting as the technical project manger for multiple projects.
• Review and optimizing IP routing design across ING network Data Centers, MPLS WAN, and Campus network blended with VRFs, BGP, OSPF, VPNs, and peered with third-party external networks.
• Evaluating, building and supporting AWS public cloud environment for development team.

Senior Network Engineer

Confidential

Responsibilities:

• Designing and implementing network services using Juniper routing and switching technologies as part of a new private cloud setup in a multi data center environment.
• Designing and Implementing a virtualized highly available Palo Alto firewall system on top of VMWare ESX platform
• Implementing and managing Remote access and site-to-site VPN and firewall access policies.
• Planning and migration of MPLS VPN inter-capital link between two geographically diverse Data Centers.
• Integration of OSPF and BGP routing and policing between the corporate network and new cloud infrastructure including re-addressing and migration of networks.
• Implement and managing open source and commercial network monitoring and management tools and improving incident altering by analyzing logs and configuring alerts and trending graphs.
• Designing the AWS infrastructure required for the migration of selected on premises services to the cloud.
• Migration of on premises Microsoft Exchange/Lync users to office365

Senior Consultant / Technical Team Lead

Confidential

Responsibilities:

• Designing and leading network and security projects to various al and governmental institutes.
• Leaded the planning and implementation of internet edge IPv6 readiness for various polytechnic institutes.
• Acted as a lead engineer in various problem escalation cases to assist onsite network engineers.
• Developed and delivered network to onsite network engineers from various government agencies.
• Managing network services across multi Data Centers with Cisco Nexus/Catalyst, F5 load balancers, McAfee/Cisco firewall/IPS solutions.
• Reviewed routing structure and improved network services by eliminating suboptimal routing and adding resiliency where previously recovering required manual configuration.
• Managing and reviewing firewalls, IPSs, and SIEM policies to comply with the requirements.
• Reviewed and analyzed traffic flows and implement QoS policies to address application performance issues during link congestions periods.
• Planning and leading network failover in a government DC annual disaster recovery exercise and perform root cause analysis on the findings.

Confidential

Senior DC Engineer / Technical Operations Lead

Responsibilities:

:

• Planning and executing the physical migration of a legacy data center to a purpose build facility.
• Leading the overhauling of legacy network devices.
• Building a resilient core data centre networking that scales well in an IaaS multi tenancy model.
• Building and coaching a team of network and system engineers to provide 27/4 support to IaaS, Web Hosting, and Collocation data center services.
• Developing plans for the support team and improve processes to create a smooth multi-layer support systems.
• Building strong working relationship with sales and enterprise account teams.
• Building monitoring and logging system to improve service visibility and incident response using open source and commercial tools.
• Developed Perl scripts to automate operational challenges and improve security.

Confidential

Security Team Lead

Responsibilities:

• Implementing, managing and optimizing Juniper IDP.
• Implement and managing Cisco PIX, and Huawei Eudemon firewalls.
• Hardening Windows/Linux servers and Cisco/Huawei network devices.
• Implementing and managing network monitoring solutions using open source tools.

Confidential

Technical Manager

Responsibilities:

• Scoping and designing various network solutions.
• Leading wired and wireless network project implementations across the country.
• Managing a team of project and support engineers.
• Supporting and establishing strong customer relationships.
• Developing and presenting technical to sales representatives.

Confidential

Project Engineer

Responsibilities:

• Installation and deployment of servers and network devices in a country wide project with high travel frequency and making proper arrangements to follow tight project schedule.