SUMMARY:

• I am Cisco Certified Internetwork Expert, Palo Alto Networks Certified Network Security Engineer, Fortinet Network Security Expert and VMware Certified Implementation Expert - Network Virtualization with impressive track record in handling high-end Data Center & ability to install, configure, secure and administer networking projects pertaining to network management for some of the reputed entities in the region.
• I have more than 9 year experience in Internetworking, Data Center and network security planning, designing, Implementation, securing, maintaining, troubleshooting, performance monitor and tuning networks technologies, on multivendor equipment i.e. Cisco, Juniper, Fortinet, Palo Alto. Below is brief summary of my hands-on experience and platforms that I have worked on,
• Cisco ASA, vASA, SourceFire / FireSight / AMP, Cisco ISE, Dot1x, MAB, PKI authentication, Cisco FMC, Cisco/Ironport ESA/WSA, WebSense, Clientless VPN, Flex VPN, Site-to-Site-VPN, IPSec VPN, Cisco Anyconnect VPN, DM VPN, Get VPN, SSL VPN, MPLS VPN, TE, IS-IS, OSPF, BGP, Cisco Nexus, VDC, VSS, VPC, FEX, and IOS, IOS-XR, Juniper Routing/Switching/Security.

PROFESSIONAL EXPERIENCE:

Confidential

Senior Network Engineer

Responsibilities:

• Network and security Engineer, Analysis, up gradation, Implementation, Migration time to time as per business requirement.
• Designing/Deploying/Maintaining, Configuration, Monitoring and Troubleshooting for FortGate/Juniper SRX firewall/Cisco ASA 55XX ZBF (NGFW): URL filtering, Content Filtering, SSL inspection, User identity.
• Designing/Deploying/Maintaining Cisco Security Appliances/Suite of FirePOWER FTD, FMC, NGIPS, AMP, ISE, ACS, WSA, ESA, WLC, WCCP, Umbrella & Talos.
• Designing/Deploying/Maintaining Next Generation Firewall (NGFW) features such as SSL inspection, user identity.
• Describing/detecting & mitigating common types of attacks such as DoS/DDoS, evasion techniques, spoofing, man-in-the-middle & botnet.
• Deploying/Maintaining with Cisco Secure Routing: IOS AAA with TACACS & RADIUS, Access Control, ACL, Traffic filtration & Unicast forwarding.
• Deploying/Maintaining with Cisco Secure Switching: DHCP Snooping, Port-Sec, VLAN, PVLANs, GRE Strom Control, TACACS & RADIUS.
• Designing, Configuration, Monitoring and Troubleshooting for Network Security Devices, which includes for Data center Cisco NGFW 5585X, IPS and FortiGate 2000E NGFW for DMZ, IP-VPN & Internet zone.
• Packet capture and analysis using Wireshark, tcpdump, SPAN, RSPAN.
• Analyze & manage various monitoring software including Solar winds, EMC Smart and NCM, KIWI Syslog, Forti Analyzer, Net Flow Analyzer Packet Capture and recommend enhancements in order to take proactive action to improve overall performance of IT services.
• Designing, Configuration, Monitoring and Troubleshooting for Data Center Core, Distribution and Access switches which includes Nexus family N7K, N5K, N2K, N9K & CAT 6500, 4500, 3800 and 3700 Series.
• Designing, Configuration, Monitoring and Troubleshooting for Data Center Core, Distribution and Access switches which includes Juniper SRX 3600, SRX3400, Ex4200/Ex4300, EX4500/EX4600, EX8200/EX9200, QFX5110, QFX100008 and MX104.
• Designing, Configuration, Monitoring and Troubleshooting for Data Center Backbone Routers Which Includes Cisco CRS-1, 7606, ASR9k, ASR920, ASR207 and Cisco Optical network devices.
• Configuration, Monitoring and Troubleshooting for LTM and GTM load balancer, which includes Cisco ACE and F5 LTM 2400.
• Data Center Operations experience of completely managing Data center operations for existing system integrated with Active Directory, Business Applications, Share point, Oracle Database, VMWare, Exchange, Windows and Linux OS, Net Backup and Symantec Anti-Virus.
• Designing, Managing & playing a vital role in IT projects and taking lead to review for technical documentation (RFP, HLD, LLD, NIP, NMP and NRFU) & generate network configuration for highly complex enterprise networks.

Confidential

Solution Architect

Responsibilities:

• Designing complex IT solutions based on emerging technologies for Confidential clients; developing strong relationships with technology vendors to influence emerging product strategies and Developing new IT frameworks, delivery approaches and methods and championing them with our clients and within Confidential Technology practice.
• Worked as Network consultant, designing network Low Level Design (LLD), High Level Design Design (HLD), Request for Change (RFC) and providing support plus leading the project helping out with three sub con’s to transform the network with unique & efficient way’s. Mainly worked on Cisco 4506-E, 2911/K9, 2960 PS-L, 3850-PS/TS/FS.
• Worked on Cisco identity service engine security consulting services project for Saudi Telecom.
• I was involved in Engineering, configuring and leading the design, configuration and deployment of Cisco ISE, Cisco routers / switches and other network infrastructure devices. Consulting on, installation, and configuring the ISE software and integrate ISE software into MS Active Directory as well as verify the profiling, posturing, and guest services. Worked on configuring & verifying profiling, posturing & guest services. Involved in designing of HLD & LLD.
• Worked on the designing of the network for Saudi Telecom Managed LAN, WAN, IPT & Firewall on cisco ASR 9K, ASA 5500/5508, Juniper SRX200 Firewall, L2VPN, IP-SEC over GRE Tunnel, IP Aware Natting. Designing Low Level & High Level Design (LLD & HLD) for Managed services.

Confidential

IT Technical Lead

Responsibilities:

• Worked on Confidential Expansion Project for Local Area Network (LAN), Closed Circuit Television (CCTV) & wireless connectivity on Cisco Wireless controllers, access points.
• Involved in designing Low Level & High Level design (LLD & HLD).
• Pre & Post designing implementation meetings with customers.

Confidential

Network Administrator

Responsibilities:

• Worked as Network Administrator for Confidential Solutions and Maintained router and switch configurations updated and changed configurations depending on requirements and documentation.
• Resolved end-user problems and made necessary modifications to the operating system, network software, and hardware configurations.
• Responsible for monitoring, networking systems, networking devices.
• Use of monitoring tools to diagnose and troubleshoot network failures.
• Maintained and upgraded network hardware. Blade servers, HP ProLiant Configuring Installing OS, and monitoring.
• Performed the tasks of providing network operations support at client site. Responsible for handling first level troubleshooting issues.
• Network performance and utilization monitoring.
• Kept system at maximum uptime through proactive oversight and scheduled maintenance.
• Updated user documentation and analyzed performance reports.
• Installing & Troubleshooting printers, barcode printers, and scanners.
• Configured, maintained and troubleshot Cisco 2800 series router.