Pravin Singi Email & Phone Number

Mountain View, California, Us

Mountain View, California, Us

• Principal Network Engineer managing the company’s network infrastructure consisting of Juniper SRXs, Ubiquity switches, Ruckus zone director, Cisco switches• Setup networking for an entirely new office in another geographic region in the US• Deployed ElasticSearch and Enterprise Workplace Search• Dynamic routing between all the offices via full mesh VPN IPsec tunnels• Setup BGP based routing with the ISPs by procuring an ASN number from ARIN• Migrated company's on-prem DNS and DHCP services to AWS's cloud infrastructure• Implemented RANCID, IPAM to auto-populate records and backups via automation• Deployed 802.1x based Wifi authentication and encryption to authenticate users against Okta• Deployed DMARC• Deployed end-point security host-checks for Windows and macOS via Intune and Jamf, respectively

San Francisco, California, Us

• Managing the company’s network infrastructure consisting of Ruckus zone director, Cisco catalyst switches, Palo Alto Firewalls• Maintain JAMF and VMware MDM solutions used to manage company devices• Provide internal support on laptops, peripherals and accounts including setting up, configuring, and tracking machines• Maintain and create documentation for improving processes• Configured the company’s wireless SSID to leverage Google’s LDAP server by setting up fail-over stunnel routes from the office network to Google’s endpoint for LDAP and wireless authentication• Setup and configured Cloudpath(product offered by Ruckus) for SAML based authentication• Assisted with deploying a DLP solution, purchasing and deploying a Cisco access switch stack• Administered SaaS-based services such as Airwatch, Assemble, Backupify, Basecamp, BetterCloud, Casper, G-Suite, Lastpass, Slack, Tableau, Zendesk

Jacksonville, Fl, Us

• Lead a small operations team focused on providing and supporting infrastructure to over 300 developers across the globe• Sole Network Engineer since Sept 2017 for our business unit managing 3 offices and supporting 300+ developers. Thus, making me primarily responsible for all our Juniper SRXs Firewalls, EX-series switches, and VPN endpoints• Purchased and implemented a 4-Spine/6-Leaf fabric CLOS Cumulus Networks Linux on Edgecore switches. Leveraging Ansible, this topology was built using MP-BGP and VXLAN to provide layer two connectivity over a redundant and fast layer three fabric• Setup multiple new AWS child accounts via Terraform(initial VPC creation, Security Groups, Cloudtrail, I.T. Roles, etc.). Thus, making me primarily responsible for all AWS network management• Architected and implemented an HA Transit VPC on AWS in 2 separate availability zones. Two vSRX's were configured to establish IPsec tunnels to our offices on one end, and VPN tunnels to other child accounts. BGP was used to exchange routes. Cloud formation and Terraform were used• Implemented Zabbix check and Cloudwatch/Cloudtrail for network alerts for on-premise and on-cloud network services• Planned, purchased and implemented SevOne technology for detailed monitoring of flow logs, thus providing visibility to the company for network monitoring• Setup network infrastructure at a new branch office in Petaluma - implementing OSPF between branch offices and BGP for connectivity to the internet and corporate network• Managed and configured an IPMI network to be used only for network device management• Implemented IPv6 as a POC for development lab. This was implemented to fit standards for apple development guidelines• Architected and implemented our business unit's first Azure cloud. I learned how to set up our resource, IPSec tunnels to our offices and manage BGP routing(including failover routes)•• Along with all mentioned responsibilities in my previous role

Jacksonville, Fl, Us

——————————————————Infrastructure services administration——————————————————• LDAP-DNS/DHCP/Radius/User Management• Nexus, BitBucket, Gitlab, OwnCloud, Graylog, JIRA, Confluence, Rundeck, SVN, Codereview, HipChat, Fortify SSC• Cloudstack, XenServer, VMware vCenter administration• Assisted in certificate management - SSLs, Asset License Management• Fixing Vulnerability• Responsible for vulnerability management for our servers. Operated on our in-house scanning tool (IP scanning, vulnerability patching)• Responsible for Apple Development, Distribution and Push certificate and mobile-provisioning profile management• Troubleshooting Build Systems powered by Jenkins (Master/Slave node). This also included job promotions from internal to the production environment.———————————————Network services administration———————————————• Setting up and maintaining TFTP servers powering Shoretel PBX• Dynamic VPN set-up using split-tunnel network management————————Desktop Support————————• 1st level support for laptops (supporting FIS Mobile apps and OS)• 1st level ticket fulfilment of access requests (new user creation, group membership change, etc)• Procurement when provided detailed quotes (submittal through receiving of ordered items)• New hire onboarding (track onboard dates, having requested equipment ready, meet/greet session)• Laptop fleet management (inventory, hardware repair, imaging)• Mobile device procurement (tracks requests, keeps inventory)• Desk phone provisioning & troubleshooting——————————————Operational Responsibilities——————————————• Defining and maintaining team operational SLA• Analyzing and evaluating present or proposed procedures and solutions across the organization• Defining and maintaining team project tasks and timelines• Installing, configuring and maintaining system configurations, network settings, patching systems• Documenting system problems and resolutions and build a knowledge base for the team

La Mirada, Ca, Us

• Worked on Request Tracker tickets assigned in the intern's queue• Performed initial and memory module reformation on CISCO ASR 1001 and ASR 9001• Worked on K-12 Broadband Infrastructure Improvement Grant Program by conducting an initial assessment• Learnt and updated Circuit Layout Records for sites managed by CENIC• Learnt practical implementation of BGP, ISIS and inter-mapping cricket traffic• Got CCNA R&S Certified

Jacksonville, Fl, Us

• My network infrastructure and Linux skills were improved • Learnt and successfully implemented Bacula Enterprise Backup version 6 software. This includes creating and configuring a dedicated server to act as a Bacula Director, Storage Server and Database Server. A test was carried on network clients, and the backups were configured to automate as well.• Researched information on UPS and PDU monitoring and configuration• Setup software and hardware RAID• Analyzed current tools available in the market for network automation and suggested the top 5 among them. • Configure VoIP phones

• Supervised initial network installation using Cisco networking devices• Assisted in client network maintenance• Responsible for keeping the DNS records up to date with the most current picture of the network• Modified ACLs as per requirement• Maintained the backup of router configurations and CPU utilization• Set up communications (Polycom, 8X8 VOIP, Audio/Visual, codecs, etc)• Configuring static and default routes in routers

New Delhi, Delhi, In

• Assisted in maintaining internal intranet infrastructure• Assisted in resolving problems related to connectivity issues• Worked on a software called Sarthi/Baan which enabled the users to enter/modify the product details, quantities, rates, and discounts at real-time synchronization

Master'S Degree, Computer Science

Bachelor'S Degree, Computer Engineering

I.S.C., Mathematics And Computer Science

I.C.S.E., Secondary Education

I.C.S.E., Pre-Nursery