Amit Chavan Email & Phone Number

Chicago, Il, Us

Chicago, Il, Us

Chicago, Illinois, United States

Responsible for 40 FTEs between onshore and offshore network engineering and operations. Direct responsibility of annual budget of $15MM in capital expenditures and more than $20M in operational expense.Shared leadership and responsibility for developing organization’s cloud adoption strategy to deliver $MM run rate savings and accelerate product roadmaps; deliverables include: design/implementation of hybrid cloud connectivity, secure service enablement, automation, infrastructure-as-code, upskilling staff, recruiting, and DevOps maturity.Create hybrid, cloud network blueprints, connect multi-cloud (AWS, GCP and Azure) to multiple, global on-prem datacenters using Transit Gateways, Direct Connect, ExpressRoute, Ingress/Egress VPCs, Route 53; built custom AWS landing zone, ownership of network, security, load-balancing, and DDI functions.Secure on-prem and cloud environments; implement ingress/egress security via Secure Web Gateway, WAF, IPS, firewalls, threat detection, and forensic tools, deploy SaaS based DDoS protection, DDI Threat Defense.Adopt DevOps tools; Ansible and Terraform, adopted DevOps philosophies and practices for on-premises network environment and bridged service delivery velocity gap between on-premises and cloud environments. Implemented automated inventory management, automated vulnerability risk assessment, and automated more than 80% of on-premises network changes within 18 months.Support M&A; execute infrastructure integration activities post-close, infrastructure, datacenter, back-office network, end-user compute.Re-architected back office network using a Cisco Meraki full-stack platform, optimized networks flows for SaaS applications, including O365, Azure Virtual Desktops (AVD), AlwaysOn VPN, and Amazon Connect. Provided consistent user experience between WFH and Office. Eliminated the need for a full-capability office network, providing potential savings of $3MM+ over two years.

Chicago, Illinois, United States

Planned, organized, and managed engineering and operations functions to ensure stable and highly available datacenter and remote office network services. Managed multiyear network technology road map and established a culture of high performance, transparency, and innovation.Modernized on-premises network environment; implemented software-defined and API-driven network solutions (Cisco ACI, Cisco SD-WAN, Cisco FTD, Palo Alto Panaroma, Arista CloudVision) and kick-started rapid adoption of DevOps practices.Network segmentation; defined and implemented network segments to maintain separation between Cardholder Data Environment (CDE) and the rest of the environment, ensured PCI/HIPAA/SOX compliance status. Direct responsibility of security controls Next-Generation Firewalls, NAC, Secure Web Gateways, and Micro-Segmentation tools.Collaborated with applications team in developing Disaster Recovery Enablement (DRE) strategy for Tier-I applications.Created daily application swing process between two datacenters and vacated one of the datacenter daily for infrastructure maintenance work, resulting in a direct impact on increase in application availability to 99.99%Supported M&A activities; network integration by enabling connectivity and enabling applications synergies between existing and newly acquired infrastructure. Advanced Network Automation; led a team of developers in creating automation platform with Apache front end, python and PostGRES for back end; advanced knowledge of Data Modeling, SQL queries.

Greater Chicago Area

Provided leadership to network team through first-time PCI certification process and identify, segment, and secure Credit card Data Environment (CDE) through creative network solutions. Collaborated with Information Security and develop new processes and procedures to adequately protect TransUnion against evolving network attacks, ensure internal / external audit compliance and legal compliance (e.g. HIPPA).Launched several initiatives to improve network stability and availability and met the enterprise target of 99.925% + availability.Defined staff augmentation organizational model to include offshore network engineers; reduced operational cost and met the growing demand for more resources. Created financial model, developed Capacity planning model and incorporated analysis data in annual operational budget forecast.Developed a strong mentoring and training program.

Greater Chicago Area

Worked on complex and strategic network projects. Part of senior most engineering team responsible for building NextGen network and migrating home grown applications from legacy network to NextGen network, collaborate with Enterprise Architectures and define network standards, design complex and highly available firewall solution for protecting Mainframe compute platform

Provide leadership through major cross-team firewall implementation projects to improve security policies and enhance network protection.Participate in long range planning of future enterprise, data, voice and video networking systems and provide technical support to users.Maintain awareness of evolving information technologies through professional publications, outside contacts, and ongoing professional development.Co-authored a white paper to orient both technical and management staff to the capabilities of firewall software.Assisted in recruiting and building a strong network team by participating in interviewing prospective candidates.Participate in the configuration of systems and updates and analyze system performance and resolving problems or make appropriate recommendations.Lead in the installation and maintenance of networked communication systems to link networked processing platforms with each other within and outside the University and participate in the configuration of equipment and software.Analyze network traffic patterns and resolves problems, lead the installation and maintenance of information technologies including, but not limited to, video, wireless communication, and telephony.Design networked processing and information technology systems in a VoIP environment (both wired and wireless) including deployment and operation of firewalls, intrusion detection and prevention systems and flow analysistools.Lead the maintenance and integrity of university data and participate in the resolution of problems.

Lead MPLS and GMPLS network deployment project for entire North America region.Conceptualized and designed a new regional head office network; provided integrated network monitoring service using NAM modules in Catalyst 6500 switches.Evaluated Cisco IPT and Avaya VoIP solutions and its respective network monitoring tools viz. Ciscoworks for Voice and Converged Network Analyzer.Performed capacity planning to accommodate voice traffic and configured QoS on voice routers and switches to make effective use of bandwidth.Enhanced inventory management, configuration backups, automated configuration changes, and fault and event detection systems.Managed OC12s, DS3s, T1s and other WAN links accounts with external vendors.Reduced operating cost by implementing smarted network designs.Developed and maintained a scalable IP addressing scheme and was in charge of IP address allocation.Involved in negotiating terms and conditions of MPLS and GMPLS WAN services with external vendor.Jointly in charge of network for the organization’s datacenter.

Deployed and maintain ISDN and MPLS network spanning over 36 locations and 500 employees throughout US, and CanadaSetup site-to-site VPN tunnel and GRE, using IPSEC VPN between Cisco 3000 VPN concentrator and Cisco PIX 500 series firewall and allow PPTP VPN as wellReviewed versions of Cisco IOS for security breaches and update them if necessary.Deployed AAA authentication, authorization and accounting using RADIUS and TACACS+ Designed wireless LAN using Cisco access points

3 Month Course, Managerial Decision Modeling - Business Management Course, B

Activities and Societies: Make an informed quantitative decision based on a mathematical model and change the impact on the business..

Ms, Telecommunications

Activities and Societies: Active member of Honors Society of Upsilon Pi Epsilon (UPE)Peer-to-Peer network: Aug. 2004 – Nov. 2004.

Bachelor In Engineering, Instrumentation

Electrical Engineering, Electronix Engineering, Engineering Drawing, Mechanical Engineering, Computer Programming, Microprocessor.