John Hopkins(Saudi Aramco Dhahran)• Design and implementation of underlay routing and switching. • Design and implementation of OTV overlay transport virtualization.

SABIC- IBN-ZEHR(Jubail)(Cisco ASA to Cisco FirePower Migration Project)• Worked with pre-sale to sell and deliver the solution. • Design, configuration, implementation, Migration and testing of redundant Firepower 2140 with FirePower Management Center FMC4600 Appliance. • Existing ASA devices configuration migration to Cisco FMC with FMC Migration tools. (Objects, rules, policies creation)• Documentation (LLD, NRFU)

SABIC- Al-RAZI(Jubail)(Cisco ASA to Cisco FirePower Migration Project)• Worked with pre-sale to sell and deliver the solution. • Design, configuration, implementation, Migration, and testing of redundant Firepower 2140 with FirePower Management Center FMC4600 Appliance. • Existing ASA devices configuration migration to Cisco FMC with FMC Migration tools. (Objects, rules, policies creation)• Documentation (LLD, NRFU)

SABIC-UNITED(Juabail)(Cisco ASA to Cisco FirePower Migration Project)• Worked with pre-sale to sell and deliver the solution. • Design, configuration, implementation, Migration and testing of redundant Firepower 2140 with FirePower Management Center FMC4600 Appliance. • Existing ASA devices configuration migration to Cisco FMC with FMC Migration tools. (Objects, rules, policies creation)• Documentation (LLD, NRFU)

Ma’aden (Waad al Shamal, turaif)• Complete Redundant Network Infrastructure design and configuration, testing of WAN, enterprise routing & switching, network security and data switching. • WAN design and implementation (Cisco ISR 4461)• Kingdom-wide DMVPN design, configuration and testing (Riyadh, Ras Al Khair, Turaif)• Data center Nexus switches design and implementation (N7K, N9K)• Enterprise/campus switching (Core, Distribution and Access switches)• FirePower Management Center design and implementation (ASA 5585-X) • Firepower IPS deployment with FMC. • UCS design and implementation (Cisco UCS5108)• Vmware vCenter design and implementation• CISCO ACS 4.2 configuration and implementation

Saudi Electricity Company (SECECO)• SEC UCSM, Nexus switches, SAN director and SAN switches design, and implementation• Major WAN migration from old facility to new data center including Perimeter ASA Firewalls. • Various other routing, switching, security and data center implementations at multiple SEC sites around the KSA.• Kingdom-wide UCS chassis and blade servers upgrade and migration of workload by using VMware vMotion.

KJO Khafji Joint Operations(Khafji)• UCS design and implementation • Vmware (ESXi, and vCenter) design and implementation • Documents (HLD, LLD, NRFU)

Ma’aden (Raas Al Khair)• Complete Redundant Network Infrastructure design and configuration, testing of WAN, enterprise routing & switching, network security and data switching. • WAN design and implementation (Cisco ISR 4461)• Data center Nexus switches design and implementation (N7K, N9K)• Enterprise/campus switching (Core, Distribution and Access switches)• FirePower Management Center design and implementation (ASA 5585-X) • UCS design and implementation (Cisco UCS5108)• Vmware vCenter design and implementation• Cisco Email Security Appliance configuration

NETWORK DESIGN AND IMPLEMENTATIONDesigning & Engineering for network and security infrastructurePrepared the Project Execution Plan PEP.Worked and monitor AMCDE (design house) to develop all design engineering / installation drawings required for complete design.Working directly with customer Saudi Aramco to ensure highest quality product & services.Managing of all data, security & voice data engineers & technicians working on project.Responsible to provide direct and indirect guidance and leadership in order to ensure the highest degree of quality and the optimum level of profitability.Verification of Saudi Aramco standards for (SCS) Structured Cabling System and other performed jobs.Made and provided documents like as, ISP Construction execution plan, pre-commissioning procedure, high level design, and low level design BI-905 and BI-167.As a design engineer provided the complete design for following systems;Data Network SystemCore Juniper routersHigh capacity redundant 10 gigabit distribution switchesAccess switchesIP Telephony system (VoIP)Analog phones (TDM) using Huawei line access gatewaysVideo conferencing systemDigital voice conferencing and alerting systemUninterrupted Power supply system for 2 & 8 hours Network devices used in project are Juniper mx480 routers, 3200 series juniper switches, HP 5400 series switches, HP 3500 series switches, Cisco 3800 series router voice gateway, Huawei MSANs , polycom video conferencing , clearone DVAC and Cisco Call managers, Eaton & APC UPSs.

KFUPM(Dhahran) • Design, configuration, and testing of cisco ISR routers and Cisco L3 switches. • Configuration of routing and switching protocols• Design, configuration and testing of Cisco WLC and Access Points. • Documentation (LLD, NRFU)

Almajdoue(Dammam)• Design, configuration, and testing of cisco ISR routers and Cisco L3 switches. • Cisco Webex installation, configuration and testing• Documentation (LLD, NRFU)

Responsible for ensuring data center availability and reliability of multiple data center to meet the requirements of data operationsHandle responsibilities of developing communication channels for providing accurate information, externally and internallyPerform the task of providing support to the staff in preventative maintenance and repairing of systemsResponsible for providing 24 hours support in complex plant operations as requiredProvide support to senior engineers in preventative maintenance of data systemsTasked with building, configuring, installing, troubleshooting, and maintaining routers, switches, manufactured by Juniper, Cisco. Set up routing & switching for branches, customers and remote sites and main Administrative locations. Configured routers for TCP / IP, OSPF, EIGRP, BGP, MPLS. Upgraded network equipment from Nortel switches to Cisco 2900 & 3700 series switches for the whole group. Supporting WAN among 15 Sales branches all over Pakistan through Frame Relay Switching and OSPF NBMA Routing on Cisco 2851 series

Data Center Project BMC (Saudi German Hospital Group)Responsible for developing technical protocols and identifying process improvements techniques by using real time data collectionPerform responsibilities of providing technical specifications for communication protocols to enable accessibility of remote data to vendorsResponsible for developing corrective action plans of critical issues that have wide impactHandle the task of generating conceptual specifications and plans for effective and accurate data collection of the organizationPerform responsibilities of providing support in data center deployments and implementations of the organizationPerform the task of preparing and maintaining plant documentation and drawings

NETWORK DESIGN AND IMPLEMENTATIONDeveloped and documented the Network Architecture Diagrams of entire network Designed and implemented WAN and Security architecture by defining Segmentation, DMZ, IP Scheme, Routing and Security considerations for Data Centre at Main Processing Site (MPS) situated in Jeddah, Saudi Arabia.Implemented connectivity arrangement across Data Center at head office with remote braches in various branches by using IPSec for VPN and afterward MPLS connectivity with BGP as PE-CE Routing Protocol. The remote brache sites are located in Riyadh, Aseer, Madina, Egypt, Yemen, and UAE.Performed key role in implementation including sizing, its designing and deployment of connectivity arrangements with separate Co-Located Data Centre and primary Data Centre at head office.Implemented Virtual Switching System (VSS) on Cisco Core Switch (Catalyst 6509E) by using SUP 720. Additionally, implemented Multi Chassis Ether channel (MEC) between all Core VSS & Access VSS.Configured & installed wireless LAN controller and access pointsImplemented and configured Cisco ASA firewallsHIGH AVAILABILITY (HA) AND REDUNDANCYImplemented and managed BGP connectivity with multiple ISPs and remote sites to arrange HA on internet access and applications. The HA included the gateway redundancy protocol using HSRP for Router hardware failure and IP SLA for the availability of internet connectivity.Deployment of CISCO ASA Firewall with High Availability (HA) through implementation of redundancy in Active-passive mode for seamless service interruption.Deployment of CISCO ASA Firewall with High Availability (HA) through implementation of redundancy in Active-passive mode for seamless service interruption.Implemented site to site IPsec VPN between Cisco ASA Firewalls (5550). Additionally implemented remote access IPsec & clientless SSL VPN on same firewalls as VPN server.