SUMMARY:

• Driving Performance and Strengthening Security of Global Network Infrastructure
• Accomplished, dedicated technical professional with accumulated, extensive knowledge in design, implementation, management, and support of robust network infrastructure for international data and voice (VoIP) communications.
• 9+ years of experience optimizing performance and extending capabilities of VoIP, enterprise WAN, and core networks.
• Committed to honesty and integrity with a “Get it Done Right the First Time” mentality to meet critical requirements.
• Able to optimize team member skills and resources to select the right solution and to identify/mitigate project risks.
• Network Architecture Design Network Deployment Resource Management Network Security & Confidential
• QoS Fulfillment Problem Resolution Stakeholder Communications Risk Assessment Policy & Compliance. Technical Training Vendor Management

KEY SKILLS:

• Risk Assessment, Threat Intelligence, Measurement, and Mitigation.
• Developing, implementing, and maintaining organizational policies, standards, procedures with guidelines.
• Firewall/Router/Switch Change Management Control Policy
• Identify and Protect the Critical Infrastructure CIP; NERC
• Compliance Organization e.g., HIPPA, ISO, Sarbanes - Oxley; GDPR
• SIEM through SPLUNK, Elastic Search along with Logstash & Kibana ELK
• Switch / Router / Firewall - Device Hardening.
• Firewall Rules Set ACL Context Based and Traffic Based ; Zone-Based.
• NAT / PAT
• Physical Design and Logical Design
• Protocol Identify. E.g., VRRP, HSRP, RIP, OSPF, EIGRP, BGP.
• Maintain and secure High availability. NIC Bonding. Redundancy.
• Performance test, optimizing, Using Riverbed pre-configured / production house network troubleshoot.
• Dual-Layer, Dual-Path Architecture Enterprise Firewall design and additional Protection for critical Service.
• Policy-based on Compliance and derive firewall rules based on the policy.
• VPN Design, Policy, access level assign.
• Design and Research on IDPS.
• IDS/PS Rules creation based on risk assessment, CVSS, update rules from the community. SNORT and SURICATA
• Analyze and troubleshoot using Wireshark Tools. Advance detection of malicious traffic, network scan, Logs, slow start, TCP rst.
• Network Scan, OS Detection, Exploit the Vulnerability including payload, etc.
• Dump hashes to check the password policy.
• Incidence Response Team Responsibility
• Forensic Evidence collection (System and Network).
• Data breach notify based on the requirements.

TECHNICAL PROFILE:

O/S: Windows, UNIX, Linux, Cisco IOS

Networking: TCP/IP, LAN/WAN/MAN, VoIP, VLAN, x.25, x.28, VPN, DNS, DHCP, SMTP, BGP, MPLS, OSPF, STP, RSTP, NIC Bonding, IPsec, TFP, P2P, Switches, Routers, Firewalls, Load Balancers, Proxy Servers, Mail Servers, Web Servers, Access Points, Network Cabling, Fiber Optics

Solutions: Cisco, MicroTik, Tsunami, Breezecom, TelcoBridge, Quintum, Multitech, Asterisk, Elastix, VoS 3000, VoIP Switch, Samba, Radius Remote Authentication Services, RSA Encryption & Authentication

Software: Microsoft Office, Access, Network Sniffer, Wireshark, Intrusion Detection/Prevention Systems (IDS/IPS)

PROFESSIONAL EXPERIENCE:

Confidential, Dallas, TX

Network Engineer

Responsibilities:

• Enterprise Network Build Out: Designed and implemented highly secure enterprise network infrastructure for leading energy company, including core network backbone and zones, routers/switches, firewalls/security, network policy and management tools, and financial institution site-to-site IPsec VPN with public/private key algorithm (PKI).
• IP Telephony Product Development: Created value-focused VoIP offering with flexible pre-pay and post-pay billing options and multiple client services, including SMS services and video call capabilities.
• Developed mobile VoIP application, recharge/check balance options, and Web call back/call shop services.
• Created calling card platform with PIN and caller ID authorization along with unique reseller programs.
• Designed local number of IP phone routing, PC-to-phone capabilities, and IVR-compatible dialing services.
• Soft Switch Design: Designed soft switch and configured WAN call routing schema with US-based soft switch hosting services that delivered low-cost voice calls with the TDM-level quality of service (QoS) minimizing delay, jitter, and packet loss, and provided secure voice and data communication through encryption and authentication measures.
• ERP Implementation: Led deployment of ERP platform for a large government agency.
• Infrastructure Modernization: Upgraded legacy VoIP technology using MSN-to-MSN and dialogic cards to deliver calls to the PSTN.

Confidential

Network Administrator

Responsibilities:

• Oversaw planning and execution of highly secure bank network implementations, including collaborative network design, configuration, and support.
• Coordinated network teams in the incident and problem management for servers and LAN, WLAN, wireless, VPN, and VoIP networks.
• Managed soft switch-based call routing activities.
• Led network management team in troubleshooting, support, problem resolution, and maintenance of mission-critical LAN/WAN networks for corporate banking customers.
• Monitored performance and availability of infrastructure. nterfaced with stakeholders to identify business needs and recommend technology products and solutions.
• Configured and installed Cisco routers and switches for optimal performance in Windows and Linux environments.
• Deployed radio link and LAN, including configuration of Cisco Catalyst switch and Tsunami 8 P2P radio to connect the remote site to network operations center 40km away.
• Provisioned 20 voice channels interconnecting office locations from Bangladesh to Canada.
• Collaborated with database partners to link VoIP platform with QIIQ billing system by SMS messaging.