Security Engineer

PROFESSIONAL PROFILE 
Experienced Network Professional with a 9 + years of demonstrated history of working in the computer networking field. Skilled in Large Scale Enterprise and Data Center, Deployment, Support & troubleshooting complex network security environments with a Master’s Degree focused in Computer Engineering. 

WORK EXPERIENCE 

INTERN NETWORK & SECURITY, AVANDE/ RELIG STAFFING

Working on both High level and Low level design of Cisco ASA 5585 firewalls. Audited rules generated new clean configuration, made recommendations for naming convention changes, zone and network design changes and rolled out new revised configuration and designs to remote data centers.

Working of 24/7 rotation daily ticket work included add/delete changes such as user add/delete for VPN access, access rule changes on various firewall devices (primarily Cisco firewalls), port/VLAN switch assignments and changes, firmware management.

Working onnetwork documentation that includes physical and logical designs, version management, IP schemas, and firewall ruleset.

  
SENIOR NETWORK ENGINEER / IBM 
Karachi,Pakistan / April 2011 - April 2017

Technical lead for south operational team for IP Transport Network & Security at IBM Technical Support Services. 

Responsible for architecting, design and deployment design HLD and then convert them into LLD based on customer requirement. 

Responsible for diagnosing/repair of outages, implementing code upgrades, topology changes such as physical moves and upgrades to improve capacity designing, and implementing port allocations. 

Designing IP addressing scheme and configuration of VLAN, VXLAN, LAG Port Channel, HSRP, VRRP on Cisco/Juniper devices. 

Worked on network topologies for a large enterprise customer that involves configuration of TCP/IP, DNS, DHCP, Dynamic DNS, OSPF, BGP, IS-IS, MPLS and STP. 

Architected, planned, configured, deployed and documented IWAN deployment projects for multiple global customers to greatly improve network reliability and uptime while integrating them flawlessly with existing LAN infrastructure.

Implemented Cisco based Nexus architecture, Nexus 1K, 5K, 7K using Cisco Nexus NX-OS command line and Nexus Fabric Extension architecture.

Created Cisco Nexus 9k, 7K, 5K, 6K, and FEX module design and deploy MOPs for each datacenter; also presenting these new initiatives for enterprise management and upper management teams.

Configuring & managing around 500+ Network & Security Devices that includes Cisco Nexus Switches, Juniper MX Series Routers, and Juniper SRX Firewalls.

  
Junior Network Engineer/ National Institutional Facilitation Technologies (NIFT) LLC
Karachi,Pakistan / June 2008 - March 2011 

Remodeled the entire NIFT network security environment, a multiphase high budget project to migrate Pix500 to ASA 5500 firewall. 

Designed firewall policies, network/route summarization and complete LAN/WAN redesign; providing load sharing and automatic failover for Core Routers and Firewalls. 

Network/Security of the entire NIFT’s network based on Cisco and Juniper devices by migrating backend systems related the corporate website over to different NIFT’s datacenter locations,

Education

MS IN ELECTRICAL & COMPUTER ENGINEERING University of South Alabama // 2016 -2018 
Mobile AL, USA

BS IN ELECTRONICS ENGINEERING Sir Syed University of Engineering &Technology // 2004 – 2008 
Karachi, Pakistan

CERTIFICATIONS 

Cisco Certified Network Associate (CCNA) 
Cisco Certified Internetworking Expert (CCIE(w)) 
Juniper Networks Certified Internet Associate (JNCIA) 
Juniper Networks Certified Internet  Specialist (JNCIS) 
Juniper Networks Certified Internet  Specialist (JNCIP) staff augment internet security