I was instrumental in enhancing the client’s experience by implementing various network software, while improving network speed, agility, and security and overseeing development and troubleshooting. Next, I upgraded the BSS network data center to Cisco’s ACI, successfully incorporating zero-trust network security, automation, and policy-based management. • Lowered configuration time 30% by automating network provisioning and resource management via ACI fabric.• Heightened customer service response times 30% by launching a new system in collaboration with the BSS network team.• Grew network security and reduced the attack surface by implementing advanced firewalling strategies, including microsegmented east-west and north-south traffic flows within the ACI network. • Strengthened network visibility and control by embedding F5 firewalls within the ACI infrastructure and deploying Service Graph within ACI. • Migrated from traditional to ACI network with uninterrupted service and minimal disruption.• Increased network agility by enabling faster provisioning and configuration changes through automation.• Optimized resource utilization and firewall management by creating virtually isolated security contexts within a single physical device via Juniper SRX Series 5600 firewalls with LSYS functionality.• Facilitated proactive identification and mitigation of cyber threats by implementing Juniper IDP policy framework within the ACI environment.• Maximized performance of the ACI infrastructure consisting of 2 spine devices, 8 leaf devices, and 3 APICs.• Streamlined WAN connections with third-party providers by establishing secure site-to-site VPN connections using IPsec with AH and ESP protocols.• Prioritized critical traffic and enhanced overall performance by configuring and fine-tuning QoS policies across the network infrastructure. Increased security with intrusion prevention capabilities by streamlining Cisco ASA firewalls as WAN edge devices.

I streamlined the network and wired/wireless connectivity for 2k+ users at HQ, 70+ branches, and the DR site using wireless controllers. This entailed establishing high availability, reliability, and data integrity by embedding QoS policies, stringent SLAs, VSSs, on-premise SD-WAN, and a robust security framework to support the management of diverse data types across the network. I maximized traffic flow and network performance by deploying advanced routing optimization techniques. Next, I facilitated high-availability SAN connectivity by implementing a high-availability core switching infrastructure with VSS and MST, while integrating Cisco Nexus switches with vPC and FCoE.• Improved network efficiency by integrating PBR, EIGRP, OSPF, and BGP routing protocols across different zones. Troubleshot complex IP network issues and ensured rapid convergence with BFD.• Planned and configured FCoE technology on Cisco Nexus 5500 and 4000 series platforms, leveraging vPC.• Project managed web application security reinforcement by embedding, adjusting, and managing the redundant configuration of FortiWeb web application firewalls at the hosting edge.• Architected and deployed collapsed core network architecture leveraging VSS, achieving comprehensive redundancy, guaranteeing high availability and seamless failover.• Established loop-free topology, facilitating rapid convergence and minimizing network disruptions by configuring MST. Enhanced bandwidth by integrating EtherChannel and optimized network performance/resiliency by implementing link aggregation. Measures collectively increased reliability of local area network to 99.999%.• Fortified wireless infrastructure, ensuring seamless and secure connectivity for all wireless devices by deploying and managing WLCs and Cisco Aironet APs across multiple buildings within the corporate network.• Managed network device management access using ACS with TACACS+ protocols for AAA.

Whilst working for this network services provider, I gained extensive experience across various network environments and technologies from different vendors. During this time, the company managed diverse projects for various organizations, including the establishment and enhancement of networks, as well as the development and optimization of data centers.My role centered on designing, implementing, and configuring the following projects:• Integrated and managed Cisco 6500 series switches with ASA and NAM-3 modules.• Leveraged VSS and EtherChannel for redundancy and high availability in three-layer architecture.• Utilized hierarchical network model with Rapid PVST+, UDLD, and fiber connections.• Deployed and configured Cisco ISE for network access control with PAN, PSN, and MnT nodes.• Designed and implemented SAN with Brocade switches and Fibre Channel technology.• Deployed and managed a VoIP solution with Cisco CUCM and SIP trunks.• Embedded GLBP on Cisco routers for redundancy and load balancing in gateways.• Launched a remote access solution with Cisco AnyConnect and multi-context ASA firewalls.• Led a migration project from IPv4 to IPv6 using a hybrid approach with NAT64 and 6RD tunneling.