SUMMARY:

• Network Engineer with more than 17 years experience, primarily in the areas of integration, implementation and support of Internetworks, WAN and LAN and security.
• Over eight years experience with internetworking protocols such as EIGRP, OSPF, IS - IS, BGP and MPLS
• More than ten years experience managing/administering Campus Wide Gigabit Ethernet Networks involving VLANs, STP, VTP etc, deployment and management of LAN and WAN Networks, design and implementation of tiered network infrastructure, IP Telephony. Well versed with handling issues surrounding data center build and migration
• Direct experience with Cisco Routers 7600, 7500, 7200, 4500, 3600, 2800 and 2600 Series, Nexus 7000/5000/2000 Series, Cisco Catalyst 6500/5500/3500
• Cisco UCS B Series blade servers and C-series rack mount servers, Cisco Fabric Interconnect 6100/6200 UP, UCS Manager 2.x

TECHNICAL SKILLS:

Routed Protocols: TCP/IP

Routing Protocols: RIP, EIGRP, IGRP, OSPF, BGP, IS-IS and MPLS

WAN/Core: BGP, MP-BGP, MPLS, MPLS TE, Frame Relay, ISDN PRI/BRI, T1/E1, DDR, Serial Encapsulation (PPP, DSL, L2TP, QinQ

Switching: Layers 2, 3 & 4, VLANs, Spanning Tree Protocol (STP) and Bridge Assurance, Fabric Path, VPC, Etherchannels, ISL/LACP and Dot1q tunneling protocols

High Availability: VPC, Enhanced VPC / VPC+, VSS, HSRP, VRRP, GLBP, Load Balancing (Cisco ACE module 30, appliance 4750)

Network Security: Implementation of standard/extended access lists on Cisco routers, ASA/PIX Firewall 5500 series, Cisco 3000 VPN Concentrator, and Knowledge of RSA ACE/Server, CSA, IDSM, FWSM, AAA (TACACS+ and RADIUS), Cisco NAM and IPS 4200 series

Network Management: SNMP, RMON and MIB management, using HP Open View and Cisco Works 2000, MRTG etc.

Protocol Analyzer: Network scanning tools: Network General Sniffer & Distributed Sniffer, Cisco SPAN

Cisco Routers: Cisco 7xxx, 4xxx, 3xxx, 2xxx Series, ASR 1000 series

LAN Switches: Cisco Nexus 7000, 5000 and 2000 series switches, Cisco Catalyst 6xxx, 5xxx, 3xxx, 2xxx & 1xxx Series,, 3Com Core Builder 7000

Virtualization: VMWare ESXi (VMWare vSphere), VMWare Workstation / Fusion

Internet/IntranetAdministration of Exchange Proxy Servers, NAT/PAT, RAS, WINS, NetBIOS, POP/IMAP/SMTP, VPN, SSL/SSH, IPSec

Server Operating Systems: MS Windows 2008/2003, UNIX (SCO), Linux, VMWare ESX Server

PROFESSIONAL EXPERIENCE:

Confidential

Sr. Network Engineer

Responsibilities:

• Analyze and document the existing 3rd party/partner connections and associated subnets
• Build a detailed inventory of all network hardware / network elements in provider edge environment and classify these based on the complexity and deviation from standard build
• Provide a leadership role in discussions with these 3rd party clients/partners with to migration planning and implementation
• Prepare two template MOPs for infrastructure build and T - zero activities, leading to specific detailed MOPs for each of these connections
• Worked very closely with multiple project managers to help with migration from existing to new data center consisting of multiple waves
• Provide level 3 support on any BGP/OSPF issues during the T-zero activities
• Provide design document to install and configure a single UCS Chassis with six blade servers, two Fabric Interconnects linked with dual Nexus 7018
• Design involved UCS 5108, eight slot chassis hosting 6 x B200 M3 blade servers. 5108 connected to 2 x UCS 6248UP Fabric Interconnects (FI) using 4 x 10GE links from each 2204XP I/O Modules (IOM) all managed through UCSM 2.1
• VMWare vSphere 5 Enterprise was the hypervisor running on each blade server

Confidential

Sr. Infrastructure Engineer

Responsibilities:

• Implemented company’s first Cisco UCS B series chassis with two blade servers connected to a pair of Nexus 5548 Unified Port in high availability VPC design
• Configured Fiber Channel interfaces for EMC storage switches and helped storage team with zoning
• Acted as a subject matter expert in design, implementation and support of company’s tiered network architecture in a multivendor environment
• Spear head the design for backup data center (Nexus 5548/5596UP, FEX 2248s) and devised a detailed DR strategy
• Resolved some of company’s long outstanding application performance issues by in depth troubleshooting around Cisco ACE / Web Servers using packet analysis
• Implemented QoS for specific applications on WAN links to efficiently utilize the available bandwidth thus avoiding un-necessary circuit upgrades resulting in cost saving

Confidential

Sr. Network Engineer

Responsibilities:

• Build entire data center network infrastructure from a green field environment based on Cisco’s next generation Nexus Platform, Cisco ASR routers,
• Configure datacenter Core and Server Farm switches (Nexus 7018s/2248s) and Cisco 6509s in provider edge and extranet environment
• Worked very closely with project managers to help with migration from existing to new data center consisting of multiple waves
• Provide on call support during the implementation phase (wave migration) until it is handed over to day two support
• Write different support procedures and processes with regard to data center migration and BAU (Business As Usual) support
• Troubleshoot and customize network for optimum performance.
• Coordinate and interface with cross-functional teams like Security/Development etc.

Confidential

Sr. Network Consultant

Responsibilities:

• To be the network architect for designated clients towards any new IT initiatives involving existing infrastructure and/or new deployments
• Prepare network part of proposals in response to customer’s RFPs and be the prime engineer for its implementation
• Work very closely with project managers to help achieve the project milestones and documentation such as Work Breakdown Structure (WBS), Network Design Documents, detailed execution plans/Method of Procedures (MOPs) etc.
• Provide on call support during the implementation of a project until transitioned to operations
• Troubleshooting and customization of network for optimum performance, co-ordinate with Telco’s and ISP with regard to any ongoing projects and connectivity issues.
• Collaborated with cross-functional teams consisting of technology and business stakeholders, facilitated discussions, resolved conflicts and balanced priorities etc.
• Architected RSA’s datacenter build and migration from their HO in Toronto to CGI’s data centers in Montreal
• Examined data from various existing routers, switches to setup new environment as close to original infrastructure as possible
• Setup of transition links on Bell provided Lan Extension to allow transport of multiple VLANs using QinQ technology to seamlessly migrate over 500 servers and mainframe
• Helped troubleshoot any issues during the implementation
• Servers were migrated seamlessly while keeping their existing IP addresses with minimal downtime
• Architected Beer Store’s datacenter build and migration from their HO in Mississauga to CGI’s data centers in Mississauga
• Migrated datacenter of BDL (Brewers and Distributers Ltd) from Calgary and integrated it with one combined datacenter infrastructure at CGI’s Mississauga datacenter.
• Examined data from various existing routers, switches and firewalls to setup new environment while consolidating a lot of old LAN segments etc
• Created new DMZs, load balancers and used VRFs to isolate different type of traffic in net environment
• Setup of transition links on Bell/Shaw provided Lan Extension to allow transport of multiple VLANs using QinQ technology to seamlessly migrate over 400 servers and mainframe
• Overcame the seamless migration of servers while keeping their existing IP addresses with minimal downtime, helped troubleshoot any issues during the implementation
• Write different support procedures and processes with regard to data center migration and BAU / Day Two Support
• Migration of Interac’s legacy Frame Relay network to state of the art MPLS based setup.
• Addressed all issues surrounding CE-PE and CE-C protocols.
• Setup Frame-MPLS bridge for smooth operation during transition.
• Wrote detailed network implementation plans and actively participated in execution of the project
• Architected RSA’s network migration from a mix of Frame Relay and ATM to MPLS VPN.
• Responsible for detailed design, implementation and handover to operations
• Examined data from various network elements to help with migration
• Provided detailed QoS configuration for a successful deployment of multi-vendor VoIP solution and helped troubleshoot any issues during the implementation

Confidential

Sr. Network Analyst

Responsibilities:

• Maintaining WAN circuits over Frame Relay and LAN Extension among five sites connected through Cisco Routers 7500, 3740 and 2600
• Maintaining LAN of about 1500 nodes including multiple Catalyst 6509, 3550, 2950
• Maintaining network security and remote access appliances including PIX 515, 525, IDS, FWSM and VPN Concentrator 3030
• Troubleshooting and tuning of routing protocols EIGRP and OSPF for optimal performance
• Coordinate with Telco’s / ISP with regard to any ongoing projects and connectivity issues.
• Voice over IP connectivity of the PBXs for Toll Bypass and in depth network optimization using different QoS policies for different user applications.
• Maintain security policies and procedures under high level security policy document.
• Deploy and maintain network and system security services, and document all the procedures and configurations and keep them up to date.
• Threat and risk assessment, periodic penetration tests and devise mitigation steps
• Analyzing system logs to explore any security threats on an ongoing basis and investigate and respond to any security incidents based on their severity.
• Played a key role in getting a disaster recovery (DR) and business continuity plan (BCP) in place and provide compliance audit on an ongoing basis.

Confidential

Network Administrator

Responsibilities:

• LAN: Responsible for administration of NT Servers and MS Exchange Server 5.5 for about 350 users. Installed and configured Fast Ethernet LAN comprising IBM RouteSwitch 8274 as the backbone linked over multi-mode fiber to Cisco Switches at five remote buildings
• WAN: Installed, configured and managed multiple radio links interfaced to Cisco 2600 Router with ISDN DDR and Gandalf MUX respectively supporting different applications.
• SECURITY: Reviewed security requirements for mission critical engagements, designed and implemented security infrastructure from ground zero using Cisco PIX Firewall 525, VPN 3000, Intrusion Detection System IDS 4200 series to provide protection against hacking of internal systems and DDOS attacks
• AUDITING: Provided security-auditing services on an ongoing basis to provide a current risk assessment of internal systems using tools such as Nessus and Cyber Cop security scanner

Confidential

System Support Engineer

Responsibilities:

• Responsible for Network Designing, Implementation, Support and Project Management
• Conduct Audit Surveys of customer’s legacy networks and provide complete overhaul solution to phase-out and replace their networks with no impact to their business.
• Hands on experience of Installation and configuration of Cisco 2500/2600, 3600 and 4500 Routers and Cisco 3600/2900/1900 Switches involving IP, IPX, Frame Relay, X.25, ISDN and RIP, OSPF, BGP and other protocols. Also handled Configuration of communication equipment such as Bridges, Multiplexers, Network Access products, etc.
• Provide IT security vulnerabilities and threats assessments for a vast clientele of Saztel, propose and implement the right solutions to mitigate the identified risks, security auditing etc.
• GlobalNet: Have implemented BGP for GlobalNet ISP. Project comprised of configuring dual Internet backbone at center site and configuring three POPs.
• Muslim Commercial Bank: Designed, Installed and Commissioned: Wide Area Network in between 33 different branches running EIGRP and OSPF as routing protocol. Network was based on Frame Relay and ISDN as backup link on Cisco routers.
• Habib Bank AG Zurich: Designed, installed and commissioned WAN for the bank comprising 12 branches linked through satellite and radio links to HO, implemented on Cisco routers and Cisco Switches. Routing protocol being OSPF.

Confidential

Field Engineer

Responsibilities:

• Installations and troubleshooting of LAN/WAN for major clients of ICL starting from site selection and preparation to building a production network
• Responsible for the daily operation of NT based Local Area Network, including user management, File and Print access management and other tasks