Summary

  • Professional experience in Enterprise Network & Security Design, Project Management and Implementation, Capacity planning, Security, scalability, Writing Technical Approach Document / Method of Procedures, Implementation Planning, Pre/post installation Testing, Deployment, Project Documentation.
  • Experience with UC Lync, VM and Cloud SaaS
  • Data Center Network Design and Architect for new move-in location and upgrade.
  • Monitoring tools like Cisco ISE, HP Open view, Juniper STRM, eHealth, Spectrum, Brocade.
  • VDC and VPC in Nexus 7710, 5548 and 2248
  • UCS Avaya 480, Avaya call Manager, CSS, F5 load balancer and GLBP.
  • Evaluate and implement SDN
  • Working knowledge of Linux Ubuntu and VM work stations
  • Experience in Network & System Management Tools like Cisco Routers (800, 1700, 2500, 2600, 3000), Catalyst (2900, 3550, 3560), Alcatel Core Router 7750 SRc12, 7705-SAR8, OmniSwitch 6855, 6800, Harbor Switches Layer 2, Harbor and Paradyne DSLAMS, Wireless Access points (D-Link), ADSL Router/Modem (Aztec, Paradyne, Alice).
  • Next Generation Firewalls – Source fire (Firesight) and Palo Alto.
  • Support ATM & POS Machine’s connectivity on network.
  • Expertise in BGP, ISIS, OSPF, EIGRP, RIP Routing Protocol.
  • Good understanding of EGP routing protocol like BGP.
  • Designed, deployed and managed Large EIGRP/OSPF network.
  • Worked Route Redistribution between different routing protocols.
  • Worked on various network integration and Data Center Implementation Projects.
  • Expertise in Routing, Switching and TCP/IP Suit and networking protocols.
  • Expertise in upgrade, maintenance and testing of Heterogeneous Data Networks.
  • Expertise in working with Cisco Routers, Switches, ASA5500 series, Checkpoint, PIX Firewall.
  • Process Management of Enterprise network, process validation and Cisco scripting.
  • Worked on various Network migration & upgrade projects.
  • Avaya Gateway 450 and Call Manager 2804.

 

 

Technical Skills

IOS & OS/Operating Systems

Cisco CAT & IOS, Windows NT 4.0, Windows 2000 Server, MS Windows 98/ 2000 (Server and Professional)/2003 Server/XP.

Routing/Redundancy

RIP, OSPF, EIGRP, BGP, MPLS, and HSRP & VRRP.

Protocols/LAN Switching

ARP, FTP, ICMP, DNS, PPP, SNMP, ICMP, IGMP, DHCP, TCP/IP, UDP, TELNET, SSH, IPSec, Frame Relay, Fast Ethernet, Gigabit Ethernet, MLS, VLAN, STP, PVST, QoS, port security, Ether Channel, PAgP, LACP, VTP, ISL, 802.1q Trunks.

Routers Hardware/Switches HW

Cisco 1700, 2500, 2600, 2800, 3600, Series, D-Link, Cisco 6509 E, 6513, 4507R+E, 4506, 3900, 2900, 6509, 6513, 3550, 3560, 2900, 2950, Nexus 5k and 2k.

Alcatel Lucent 7750 SR, 7705 SAR, Omni6855, Omni 6300

WAN/MAN Links/Wireless

T1, E1, OC-3, OC-12, 802.11b , 802.11abg, SONET Ring, Frame-Relay, OC-48, OC-192, OC-12

 

Other

ASA5500 series, Cisco PIX 525, Languard Network Scanner, Netflow Monitor, Spectrum, Solarwinds, Ethereal, Etherape, Sniffer Pro, Kiwi SysLog, PRTG, Professional Gold, Microsoft Office, Visio Network Design Tools, Paradyne ATM and Harbor Layer 2, AS 5300, AS 5400, AS 5400XM, Cisco ACS, Cisco 1811, 1711,

 

Experience

10/14 – Present   Alameda County

1221 Oak St, Oakland CA 94612

Senior Infrastructure Service Engineer

 

  • This role involves building network from scratch, upgrades, planning and support existing Data Center infrastructure and Metro Network.
  • Take action on security events generated by a variety of network and/or host based security appliances.
  • Creating cloud platform for engineers to configure Next Generation Router, Switches and Firewall remotely.
  • Avaya gateway 450 migration and Call Manager 2804 for VoIP.
  • Support VMs and Cloud SaaS application for different agencies.
  • Working knowledge of Linux Ubuntu and VM work stations.
  • For Monitoring tools Net Scout, Solar Winds, HP Open is used.
  • Cisco Prime for configuration backup and ISE for ACS replacement.
  • Juniper IDS and IPS for security, ASA firewall and Source fire for security.
  • Support Office 365, Azure, and Cloud migration.
  • Asses new firewall capabilities of Source fire and Palo Alto.
  • Follow Development life cycle for Architecture and development of network from scratch.
  • More 500 branch offices of different agencies connects to our Primary and DR Data Center.
  • Configure, manage and upgrade 5500 Wireless controllers with 1000+ Aps.
  • Make recommendations for upgrade existing infrastructure.
  • Phase I of all projects is to gather information from different Agencies like (Sherriff’s, Public Health, and Department of Justice Etc.)
  • Design and deploy new installations of Lync for Business.
  • Phase II of projects I have to work as Network Architect / Design and come up with a design for WAN, LAN, Security project planning and wireless connectivity.
  • Phase III is to get budgetary numbers, Return on investment (ROI) and create / submit Proposal to clients.
  • Phase IV is to order equipment, configure, test and implement.
  • Configure and troubleshoot routing protocols like BGP and OSPF.
  • Create VLANs and manage spanning tree.
  • Create and support IPSec for VPN.
  • Day to day job involves working on different projects and handle any troubleshooting issues as tier-1.
  • Our core consist of 6500, 6800, 4500 series, Nexus 7710, 5k and 2k, and on distribution / access is 7200, ASR 1000 series, 3700 series.
  • For security we has ASA 5500, IPS and Juniper STRM and IDS.
  • Source Fire(Also known as firesight) implementation.
  • 1000+ routers and switches resides on our network which involves Data center and Metro client sides.
  • In terms of routing protocols we are using BGP and OSPF and for Layer 2 RSTP.
  • Using NetScout, STRM and HP Open view for monitoring purpose.
  • IPSec tunnels for some 3rd party vendors who requires connectivity to County network.
  • HSRP is used for dual home redundant connectivity.
  • Create MOPs for upcoming enhancements and Config changes.
  • Standardize configuration and update documents
  • Recommendation for upcoming hardware and upgrades.
  • Live Action and Next Gen firewall (Firesight).
  • Next Gen Data Center to support Spine Leaf topology.

 

08/12 – 9/14 Alcatel Project (ComEd – Exelon)

3 Lincoln Ctr,

Oak Brook Terrace, IL 60181

 

Sr. System Integration Engineer/Architect

Working onsite at ComEd as Senior System Integration Engineer/Architect as Alcatel Lucent contractor.

Roles & Responsibilities

  • Configure Alcatel Lucent 7750SR for core and 7705 SAR as base and sub-station
  • Prepare documentation for upcoming sites in terms of Visio and Pre-config sheet.
  • Prepare and LAB test configs for Routers and switches.
  • Support migration from Cisco 2811, 1811, 3600 and 6500 to Alcatel 7750/7705.
  • SONET, DMX, JMIX and ICON Rings are used for backhaul connectivity.
  • Involved in Upgrade and optimization of network.
  • Configure and test different Services on 7750SR and 7705 SAR.
  • Configure MPLS network using RSVP-TE
  • MPBGP and EBGP is used for routes sharing and ISIS is used as IGP.
  • Configure VPRN and VPLS on each router to communicate between different services.
  • Test failover scenarios in lab for all locations before onsite deployment.
  • Configure, test and troubleshoot IPSec link
  • Configure services for SCADA, DA, NERC-CIP, Enterprise, AMI, Security and Management.
  • Prepare technical documents for site turn ups and bring any service up.
  • Using SAM5620 and Solar winds as monitoring devices.
  • Troubleshoot any network issue.
  • Design Network as per accumulating requirements.
  • Create and implement information technology strategy, maintaining regular contact with both executives and staff to determine business direction and need for technology support.
  • Educates staff and executives regarding the status of technology relative to the strategic goals and objectives.
  • Recommends the business’s long-term system needs and proposes hardware/software solutions to accomplish the business objectives and to support goals and participates on key business committees.
  • Participates in the development of strategies and the completion of contract upgrades and renewals with department heads.
  • Communicates regularly and effectively with management on significant site issues, risks, opportunities, and general progress towards contractual and business goals.
  • Responsible for managing on-site personnel actions, staff training and development.
  • Prepares and submits required reports in a timely manner.
  • Performs other job related duties as assigned.

 

08/08- 08/12         First Data

500 Frank W. Burr Boulevard
Teaneck, NJ 07666

Ph: +1 201 801 0233
Fax: +1 201 801 0243
Toll free: +1 888 937 3277

Manager Operations

Working on site at First Data Corporation also known as Concord / STAR. Providing services to their prestigious clients (Banks, ATM users, POS and VISA card).

Roles & Responsibilities:

  • Train and mentor newly hired IT Network Consultants.
  • Collect and analyze system utilization data to monitor trends and forecast future (IT) requirements.
  • Manage data center facilities’ infrastructure, and support relevant upgrade projects.
  • Currently managing team of four people for the migration of Data center. Usually work at night shift due to low traffic within our network.
  • I have worked on more than 300 projects that include Frame, DMVPN, MPLS and data center    migration with multiple banks and firms.
  • Manage team of 3 for MPLS migration.
  • Provide support to Clients like Bank, ATM machines and POS customers.
  • Configure routers, Firewalls and Layer 3 switches for DMVPN connectivity.
  • Configure & support troubleshooting for various protocols like BGP, OSPF, MPLS and EIGRP
  • Configure and troubleshoot HSRP, VRRP and ISDN for backup connectivity.
  • MPLS over Frame Circuit.
  • Spectrum and eHealth are used for monitoring devices.
  • Monitor routers on Spectrum and use ehealth.
  • Configure and support VPN routers for various customers.
  • Route sharing with customer using different protocols like EIGRP, OSPF and BGP.
  • Conversion of existing frame circuit to MPLS over frame circuit by creating Tunnels.
  • Configure TACACS for SSH and telnet authorization.
  • Create Visio diagrams for client connectivity.
  • Use of sniffers while troubleshooting.
  • Configure Frame relay on T1 and 56K link.
  • Share routes with clients on different protocols if required by customer.
  • Use Ethereal sniffer for troubleshooting.
  • Design security policies for various firewalls like PIX and Router.
  • Used Sniffer software on network.
  • Swaps of router from 2600 to 2811, Motorola WAN Guard to Cisco and upgrade their configuration accordingly.
  • Configure 1811 for VPN connectivity.
  • Configured Cisco routers 7200 VXR, 2800 and 3600 series and make changes at core switches 6509, 5506 and 5503.
  • Used IPSec and SSH for secure connectivity between routers and switches.
  • Configured VLANS and enabled dot1.Q trunking protocol between switches.
  • Used SNMP protocols for network management.
  • Used PRTG for different ports bandwidth consumption.
  • For troubleshooting purpose we use sniffers, Ethereal, IP Accounting and dial modems.
  • Process management of Enterprise network.
  • Configured HSRP for backup routers.
  • Configure Frame relay for Primary connectivity and ISDN for backup.
  • Support and troubleshooting of Layer 1, Layer 2 and Layer 3.
  • Provide connectivity solutions LAN/WAN to various clients.
  • Used Microsoft Visio and Office for Network infrastructure diagrams and documentation.
  • Worked on various protocols like TCP/IP, OSPF, SSH, ICMP.

 

10/07- 08-08         Logistic Solutions INC., Delaware, USA

200, Centennial Avenue
Suite 209 Piscataway
New Jersey – 08854
(T) 732-457-0015
(F) 732-457-0016

Network Engineer

Roles & Responsibilities:

  • Provide support to Clients like Bank, ATM machines and POS customers.
  • Configure routers, Firewalls and Layer 3 switches for DMVPN connectivity.
  • Configure & support troubleshooting for various protocols like BGP, OSPF, MPLS and EIGRP.
  • Configure and troubleshoot HSRP, VRRP and ISDN for backup connectivity.
  • Configure Frame relay on T1 and 56K link.
  • Share routes with clients on different protocols if required by customer.
  • Use Ethereal sniffer for troubleshooting.
  • Design security policies for various firewalls like PIX and Router.
  • Used Sniffer software on network.
  • Swaps of router from 2600 to 2811, Motorola WAN Guard to Cisco and upgrade their configuration accordingly.
  • Configure 1811 for VPN connectivity.
  • Configured Cisco routers 7200 VXR, 2800 and 3600 series and make changes at core switches 6509, 5506 and 5503.
  • Used IPSec and SSH for secure connectivity between routers and switches.
  • Configured VLANS and enabled dot1.Q trunking protocol between switches.
  • Used SNMP protocols for network management.
  • Used PRTG for different ports bandwidth consumption.
  • For troubleshooting purpose we use sniffers, Ethereal, IP Accounting and dial modems.
  • Process management of Enterprise network.
  • Configured HSRP for backup routers.
  • Configure Frame relay for Primary connectivity and ISDN for backup.
  • Support and troubleshooting of Layer 1, Layer 2 and Layer 3.
  • Provide connectivity solutions LAN/WAN to various clients.
  • Used Microsoft Visio and Office for Network infrastructure diagrams and documentation.
  • Worked on various protocols like TCP/IP, OSPF, SSH, ICMP.

Environment: We are using Cisco routers, switches and LinkSys wireless access point for LAN and WAN connectivity. Windows XP is being used at our client’s site and on servers we are using Windows 2000 Server.

8/06-10/07            KS Exchange

The Karachi Stock Exchange (Guarantee) Limited,
Stock Exchange Building,
Stock Exchange Road,
Karachi-74000.

(T) (92-21) 111-001122                                                                                                                            (F) (92-21) 241 0825

Sr. Executive Network Officer

KSE is the premier stock exchange which has more than 200 router & 60 switches within KSE and at client’s site. Worked as a Senior Executive Officer Networks in worlds’ most volatile stock market KSE where more than 2000 remote and local clients are connected.

Roles & Responsibilities:

  • Monitoring and troubleshooting of more than 2000 nodes that are connected remotely and within the premises of KSE. Cisco Routers/Switches, Extreme Switches, LAN/WAN/MAN Technologies, Ethernet, EIGRP, VLAN, Trunking 802.1, Spanning Tree, Wireless 802.11, ISDN, Secure Modems, Encryptors, Sniffer Pro, Fluke, Fiber and copper cabling.
  • For all sorts of authentication and privilege levels we are using Cisco TACACS.
  • Maintaining relationship with clients and solving their issues remotely.
  • Implementation of security on Layer 4, Layer 3 and Layer 2 level.
  • Process validation of Network.
  • Implemented IPSec on all routers and switches, i.e. within WAN/LAN connectivity.
  • Coordination with remote area clients to resolve their connectivity issues i.e. on ISDN, Wireless, Metro Ethernet and DXX.
  • Evaluate, test, install and implement new and existing hardware across physical media, protocol stacks, hubs, routers, bridges, gateways and network management components.
  • Perform problem isolation and resolution of network problems through troubleshooting and devising effective solutions.
  • Perform Network Management functions such as, network monitoring, network performance measurement and reporting.
  • Collaborate and work with network service providers in diagnosis, troubleshooting and resolving network related issues.
  • Support and troubleshooting of Layer 1, Layer 2 and Layer 3.
  • Hardware Solid understanding of Cisco routers (800, 1700, 2500, 2600, 2800, 3000), Alcatel Layer 3 Omni Switch (6800-48), Cisco IDS and Juniper IPS 200, Cisco Switches (2900, 3550, 3560), Fluke test tool), Cisco Access Servers (AS-5300, AS-5400 and AS-5400XM).
  • Involved in various Network Migration activities and provided step by step procedures for the migration.
  • Configured Router inter VLAN routing.

Environment: KSE has mesh environment of Linux 10, Windows 2000 Server/Professional and XP. Mostly Cisco routers, switches and IPS are used but we also have Alcatel omni switches, Juniper IDP 200 and for spamming we have Spam guard hardware. Also had ES7001 and SUN Solaris machines for database and trading purpose.

10/05-7/06            DANCOM Online, Internet Service Provider

Dancom Online

Suite 1915-1917, 19th Floor,                                                                                                               I.I. Chundrigar Road,                                                                                                                            Karachi, Pakistan.

   (T) 111-600-111

DSL Network & Support Engineer

Role & Responsibilities:

  • Evaluated site parameters against equipment and network specifications to ensure optimum operational performance.
  • Support large scale Frame Relay & ATM Networks.
  • Worked on different protocols like BGP, OSPF, MPLS, Telnet, ICMP and maintained VPN Connectivity for various corporate clients & banks.
  • Worked on different ATM DLSAMS (Paradyne) and IP DSLAMS (Harbor). Monitoring client’s bandwidth usage with MRTG.
  • Provided DSL, ADSL, SHDSL ISDN connectivity after checking remote client’s local loop line quality.
  • Configured various Cisco routers (800, 1700, 2500, 2600 & 3000 series), Cisco Catalyst and Harbor switches and wireless access points of different vendors.
  • The key skills were: L3 switching, VLAN, access control, wireless networking in a LAN/WAN environment.
  • First line response for any WAN/LAN related issues. Maintained system; adding and configuring software and hardware at client and Servers’ site. Analyzed and corrected software and hardware problems.
  • Administered routine maintenance, backups, security patches and updates on Servers.
  • Worked on OSPF and Static route configurations in ISP Setup.
  • Configured VLANS on Harbor DSLAMS.
  • Support and troubleshooting of Layer 2 and Layer 3.
  • Cisco script writing.
  • Configured static routes on Harbor DSLAMS.

Environment: It was a mesh environment of Windows 2000 Professional and XP. More than 100 Cisco routers, LinkSys accesspoints, Paradyne ATM and Harbor layer 2 DSLAMS, 3Com switches, PIX 510 firewall, Paradyne and Aztech ADSL and HDSL modems are used.

Project Accomplishments:

Askari Commercial Bank Limited – Project Engineer

Nationwide VPN and Internet connectivity for more than 20 branches in Karachi city, connected to server by Cisco 837 router for VPN by using IPSec protocol on ADSL technology.

Meezan Bank – Project Engineer

VPN connectivity of different branches to head office through ADSL technology.

KFC VPN Project – Project Engineer

Connected 20 outlets to KFC call center by using ADSL router through ADSL technology.

Amadeus – Project Coordinator

Nationwide project; more than 75 branches in Karachi city, Pakistan to connected Germany through Amadeus server.

Fauji Foundation – Project Coordinator

VPN connectivity between Karachi to Lahore and Islamabad, by creating tunnel using Cisco 3800 series router and pix firewall

4/05-10/05            EC Cubed Technologies (US based firm)

(T) 1.203.877.7776                                                                                                                                       (F) 1.203.783.0500

Network Engineer

EC Cubed Technologies is a consulting firm which provides its services regarding Back office support, Web development, maintenance and support, Domain registration and space for web sites. Online network support for different clients.

Responsibilities:

  • Used ISA server version 5 for ICS.
  • Active Directory was used to create domain environment.
  • Coordinated with clients regarding Web hosting and management.
  • Used different Online Marketing strategies.
  • Maintained LAN/WAN connectivity.
  • Installed and configured Windows 2003 at server and Windows 2000 Professional at user end with security patches.
  • Responsible for Network & System Planning, Upgrade and Implementation.
  • Vulnerability assessment for Microsoft Windows OS.
  • Security and Patch Management for Microsoft Windows.
  • Design, deploy, configure & troubleshoot Windows based Networks.
  • Configured Backup Exchange server for email clients.
  • Support and troubleshooting of Layer 1, Layer 2 and Layer 3.
  • Worked on protocols like TCP/IP, Telnet, ICMP, and SNMP.

Environment: Windows 2003 server and 2000 Professional based environment. Cisco router, 3Com switch and access points are being used for LAN and WAN connectivity.

6/04-4/05               PIA, IT Department

Head Office

PIA Building                                                                                                                                 Quaid-e-Azam International Airport                                                                                                 Karachi 75200, Pakistan.

(T) 92.21.457.2011                                                                                                                                   (F) 92.21.777.2727

Internee

Pakistan International Airline is one of the renowned airlines. PIA has offices all around the world which connects to Head Office in Karachi.

Responsibilities:

  • Looked after remote end clients. Installed and configured of VPN & IATA.
  • Software and hardware troubleshooting of PC’s. Assisted in configuration of Cisco inter VLAN connectivity.
  • Worked on X.25 technology. Maintenance of physical connectivity between routers and switches. Testing and creating STP cables (CAT 5) for routers and switches. Troubleshooting of Server and PC’s at hardware level.

Environment: PIA has more than 400 routers and switches that include Cisco and Alcatel. Different OS like Windows XP and Linux. IBM servers for database, website and mail servers.

1/03-6/04               Saiban

GRE – 319 (2-B)                                                                                                                                      Britto Road,                                                                                                                                       Karachi 74550, Pakistan.

(T) 92.21.721.9049

Software and Network Consultant

Responsibilities:

  • Install, configure and support Windows NT/2000 servers, including application and database servers in support of business processing requirements as well as design and migration of NT infrastructure to Active Directory.
  • Software installations and upgrading NT/2000 operating systems.
  • Scheduled installations upgraded and maintained them in accordance with established IT policies and procedures.
  • Monitored and tuned the system to achieve optimum level of performance.
  • Ensured server data integrity by evaluating, implementing and managing appropriate software and hardware solutions.
  • Ensured data recoverability by implementing a schedule of system backups and database archive operations.
  • Conducted routine hardware and software audits of workstations and servers for compliance with established standards, policies, configuration guidelines and procedures.
  • Studied latest Server Technology to provide recommendations for system improvements to meet business goals and reduce cost.

Environment: In Saiban we were using Windows 98, NT 4 and 2000 Professional. Using 3Com switches and Cisco 1900 switch for VLANS.

EDUCATION

2004-2006, Mohammad Ali Jinnah University

M.Sc. in Network & Telecommunication (3.1 GPA)

 

1999-2003, Allama Iqbal Open University

B.S. in Computer Science (Grade B)

 

Certifications

 

  • Cisco CCIE (Written) (CSCO11041635)
  • Cisco CCDP (CSCO11041635)
  • Cisco CCNP (CSCO11041635)
  • Alcatel-Lucent Scalable IP Networks exam (4A0-100)
  • Cisco CCDA (CSCO11041635)
  • Cisco CCNA (CSCO11041635)
  • Juniper JNCIS-ER (Enterprise Routing)
  • Juniper JNCIA-ER (Enterprise Routing)
  • Juniper JNCIA-EX (Switching)
  • PGC ISP Engineering, from NED University of Engineering & Technology
  • PGC in Oracle 9i, from NED University of Engineering & Technology
  • MCSE training Certificate, from Times Tech, Karachi
  • IT IS Team Lead – TechAdm NW-Assessment (Element K, USA)
  • Business Communication (Brain Bench, USA)
  • Cisco Network Support (Brain Bench, USA)
  • IP Routing & Switching (Brain Bench, USA)
  • ITIL Concepts (Brain Bench, USA)
  • Managing People (Brain Bench, USA)
  • Project Management (Brain Bench, USA)
  • WAN Technologies (Brain Bench, USA)