Core duties:• Complete end-to-end engineering and installation of route-based IP network solutions• Troubleshooting network infrastructureAccomplishments:• Have deployed design, configuration of the bank's data center network, using VXLAN EVPN MULTIPOD technology based on Cisco Nexus 9300 equipment• Have developed and implemented a network redundancy edge bgp Internet access solution• Have configured, tested, and ensured operation of LAN/WIFI/WAN VPN IPSEC components and connections (Cisco ASA, Cisco Firepower, Nexus, ASR1000)• Have configured, tested, and ensured operation of DMVPN Single Cloud, Dual Cloud• Have configured and maintenance Cisco WLC 9800, 3500 infostructure.• Have configured, ensured operation of Cisco NGFW• Have developed Python scripts to automate network processes (find a required network information from the network)• Development of a python script for collecting configuration information from network equipment and other automation scripts using Python + netmiko+ Netbox• Deployment Gitlab to collect the configuration information for network devices• Have developed and implemented Citrix Netscaler bank’s web applications.• Development, deployment and maintenance of a distributed VOIP network infrastructure (CME)• Development, deployment and maintenance of an old Cisco Wifi network (WLC 2500, 4400, 5520)• Deployment, installation and maintenance Netbox, GitLab, Zabbix, Netflow Analyzer, RSyslog, Observium

Development and deployment of a distributed network infrastructure of the data center. Remote sites are connected using the Cisco DMVPN (Dual Cloud+IPSEC+Phase 3 DMVPN) solution. Technologies and solutions: IPSEC, DMVPN, BGP, ASA Failover. - Deployment Test VXLAN EVPN fabric in Multisite mode using Huawei, Cisco network equipment at the BGW level, followed by implementation of the solution. - Development of a script for collecting configuration information from network equipment of various vendors using Python + netmiko.- Deployment network solution and implementation of the migration of the network load of the data center of a large bank (180 remote offices). Configuring network equipment Cisco ASAv, ASA5515x, Cisco Virtual WLC, Cisco ISR4451.- Deployment VXLAN EVPN Multisite network fabric was built on Nexus 9300, Huawei CE6680 equipment.- Configuration Nexus 7000 (+fex), Cisco Catalyst switches, firewalls: Check Point R80.30/40 15000/16000, 23500 (Gaia, Dashboard, cli), ASA 5500, 5500x, wireless controllers: Cisco WLC 2500, 4400, 5520,9800.Deployment communication infrastructure and services on the organization’s data transmission network.- deployment of a communication network for remote offices using the DMVPN scheme with redundant data transmission channels.-installation, deployment of the Netbox system based on Ubuntu Server.

- deploying a factory based on Mellanox (MSN2100/3700/2410/2010), AS4610 (EDGEcore) and Cisco Nexus 9300 equipment together in one POD and implementing VXLAN EVPN MH technology (6 data centers, 5-Mellanox, 1-Cisco Nexus 9300).-deployment of a multipod architecture of a distributed data center in a bank based on mellanox equipment, implementation of vxlan evpn technology, organization of network interaction, several processes of migration of the organization's computing power were carried out.- configuration of S5700 switches, AR2240 routers, AC6605-26-PWR WIFI controllers manufactured by HUAWEI.- configuration of routers Cisco ISR 800-4500, ASR1000x, Juniper mx204, Huawei AR series- configuration of Cisco Catalyst 2900, 3750, 3560, 3650, 3850, 4500, 6500, Nexus 9000 (+fex), Huawei S5720, S12708, Mellanox MSN 2010, 2410, 2700 (Cumulus+Onyx) switches- firewalls Check Point R80.30/40 15000/16000 (Gaia, Dashboard, cli), ASA 5500, 5500x- wireless controllers Cisco WLC 2500, 4400, 5520, Huawei AC6605-26-PWR.- WSA S170 Cisco Proxy.- Balancer Citrix Netscaller (3000/1000) solution maintenance (entry level).Creation of communication infrastructure and services on the organization's data transmission network.- deployment of a communication network for remote offices according to the DMVPN scheme with redundant data transmission channels.- implementation of Cisco ASA 5540, 5525-x, 5506 firewalls into the infrastructure of the bank's processing center according to the Failover scheme.- implementation of firewalls based on Cisco IOS (Cisco 4300) in the infrastructure of remote offices, as well as a complete upgrade of equipment, replacement, and building a network with the introduction of a core based on a stack of Cisco Catalyst 3850, 3750X switches.- organization of a communication network of head offices based on WS6506-6509 as a core according to the VSS scheme.

• Creation of communication infrastructure and services on the organization's data transmission network. • Deployment of a communication network of remote offices according to the DMVPN scheme with redundancy of data transmission channels. • Implementation of Cisco ASA 5540, 5525-x, 5506 firewalls into the infrastructure of the bank's processing center according to the Failover scheme. • Implementation of firewalls based on Cisco IOS (Cisco 4300) in the infrastructure of remote offices, as well as complete modernization of equipment, replacement, and construction of a network with the introduction of a core based on a stack of Cisco Catalyst 3850, 3750X switches • Organization of a communication network of head offices based on WS6506-6509 as a core according to the VSS scheme • Deployment of VXLAN EVPN factory pods based on Cisco Nexus 9300 and Mellanox (Cumulus) MSNx-series both with combining different vendors in one pod, in different ones, and a factory on one of the vendors. Installation and configuration of the NEO monitoring system. • Setting up CISCO ISE, ACS, self-introduction of MAB into the company's productive network, setting up various policies for the operation of the WLAN network and guest access portals. • Participation in testing and implementation of Qos based on Cisco equipment in the organization's network. • Installation and support of Wifi networks using Light Weight technology based on controllers 5508, 4402, 2504. • Installation and support of telephony based on Cisco CME. • installation of a communication network of the company's head office with remote divisions based on equipment Cisco ASA 5506, Pfsense, switches Cisco SG300-52, as a core - WS3850-12S. Installation and configuration of the monitoring system Opmanager, Observium, netflow collector NetflowAnalyzer, information collection LogAnalyzer + rsyslog, Rancid + ViewVC.-Installation and configuration of server OS Linux Ubuntu server.

• Participation and implementation of projects for the creation of communication infrastructure and services on the organization's data transmission network, as well as support for their performance. • deployment of a communication network of remote offices according to the DMVPN scheme with redundancy of data transmission channels. • implementation of Cisco ASA 5540, 5525-x, 5555-x, 5506 firewalls into the infrastructure of the bank's processing center according to the Failover scheme. • implementation of firewalls based on Cisco IOS (Cisco 4300) in the infrastructure of remote offices, as well as complete modernization of equipment, replacement, and construction of a network with the introduction of a core based on a stack of Cisco Catalyst 3850 switches. • organization of a communication network of head offices based on WS6506-6509 as a core according to the VSS scheme. • participation in the design, deployment and configuration of the bank's data center network using VXLAN technology based on Cisco Nexsus 9300 equipment. • setting up CISCO ISE. • participation in testing and implementation of Qos based on Cisco equipment in the organization's network. • installation and support of Wifi networks using Light Weight technology based on controllers 4402, 2504. • installation and support of telephony based on Cisco CME. installation of a communication network of the company's head office with remote divisions based on equipment Cisco ASA 5506, Pfsense, switches Cisco SG300-52, as a core - WS3850-12S. • configuration and maintenance of the transport network CWDM, DWDM bank on ECI equipment.

Development and administration of the bank's communication network. Connecting new network services, remote points. Technologies used - IPSEC VPN, Easy VPN, DMVPN, Cisco ACS, routing protocols EIGRP, OSPF, Rip, BGPv4. The corporate telephony network is based on the Cisco CUCM solution (+ IP phones: 79xx). Communication equipment used, Cisco ISR 28xx, Catalyst 49xx, 3560, 3750, 29XX, ASA 5510 5515, 5525IPS, 5505, UC520, Aironet. Own multihomed bgp AS was built. Implemented: • A method of identification using certificates for remote access VPN. • DMVPN remote point communication network infrastructure. • -monitoring system Opmanager, collecting statistics on traffic NetflowAnalyzer, collecting and storing configurations of OpUtils devices. Building a fault-tolerant network core based on Catalyst 45xx switches • Organized distribution level on CAtalyst 49xx. • Introduced ASA5525 + IPS (SSM) I carry out the choice of a circuit design, the choice of equipment, interaction with suppliers and the purchase of the necessary communication equipment, as well as interaction with communication operators.

Creation of a distributed fully connected data and voice transmission network over Internet channels. Implemented: IPSEC, Eigrp, Rip, OSPF, BGP, Callmanager express, Wifi technologies, RSTP, IOS IPS, CBAC, ZbFW. The issues of creating an auto attendant in each office based on the cisco callmanager express, CUE solution have been resolved. Work with equipment: ASA 5510, 5515, 5505, Cisco ISR 2800, 3800, UC520, Catalyst 3560 (x), 2960, Aironet, IP phones: 7900 (7921g, 7925g, 7940,7960,7962,7914, 7916). We have built our own autonomous Internet system (multihomed). Policies for traffic distribution over communication channels have been created. Creation of a network core cluster based on Cisco Catalyst 3750 stack and fault-tolerant server connections created.

Responsibilities: installation, redesign and administration of equipment and services of the data transmission network, ensuring the required level of network security, setting up new equipment (cisco systems) in the bank's divisions (remotely), network monitoring. (BGP, OSPF, STP, VTP, RSTP, Frame Relay, ATM, HDLC, ISDN, PPP, Remote access). Organizing telephony over data transmission channels and organizing Qos for voice traffic. Installation and administration of CUCME, CUCM, CUE systems. (Callmanager Express, Callmanager). Security: ASA 5500 + IPS, Cisco ACS, IPSEC, IOS IPS, CBAC, ZBFW, router security audit. Network protocols and technologies: • Ethernet, Fast Ethernet, Gigabit Ethernet • Frame Relay, ATM, HDLC, ISDN, PPP • TCP/IP • OSPF, EIGRP, BGP, RIP • MPLS, IPSEC, DMVPN WCCP • VTP, RSTP, STP. • Qos ISDN PRI, E1 R2. Hardware: • Routers Cisco Series 7200, AS5350,3825,3600, 2850, 2851, 2600, 2691, 2500, 1841,1700, 800. • Firewalls Cisco PIX 501, 515 (failover), Juniper NetScreen-5GT -Switches Cisco Catalyst Series 6500, 3750, 3550, 3560,2960, 2950, 3COM 3300XM • Wireless: Cisco Aironet 1130AG • ATM switches Cisco IGX 8410, 8420 • ADSL Hubs AES-100, IES-1000, IES-2000, IES-3000 • Modems RAD, Nateks, Cronyx, ZyXEL, CORECESS, Zelax • Proxy servers like Cisco CE 560 (2.51) • HP Open view • Adventnet OpManager; NetFlowAnalyzer • Cisco Works • Cisco Callmanager Express/Callmanager. • LINUX RH

Responsibilities - system administrator. Responsibilities included: administration of cisco equipment, unix servers, the inclusion of new services. AS administration (BGP) and organization of peer-to-peer policy with providers and organizations within RS msk-IX. Provider network administration (OSPF), installation and installation of new equipment for the data transmission network, interaction with operators.

Responsibilities: design, installation and configuration of data transmission nodes, corporate networks of customer organizations, administration of the data transmission network. Experience: • Experience in working with computer networks on a regional scale. • Experience in the design and installation of MAN, LAN, WAN networks based on equipment from Cisco Systems, 3COM, RAD, Zyxel • Experience in installing large multiservice corporate networks. The largest projects: • Design and configuration of MPLS networks based on IP, ATM protocols. The network has over 20 routing nodes. • Design and configuration of an access network based on ADSL technology using ZyXel AES-100, IES-1000, IES-2000, IES-3000 equipment.- • Organization of corporate fault-tolerant networks with the required level of security for a financial organization. The selection and analysis of the network solution and the installation of the communication network were carried out. • Organization of IP telephony networks based on cisco systems equipment. The choice of a network solution and the installation of a communication network were carried out. • Corporate network of a large state institution, with nodes of 30 • settlements. The IP network includes about 40 Cisco and ZyXel routers and • about 400 hosts. The choice of the network topology and equipment (platforms, • interfaces). The network is built using IP MPLS technology. • A corporate network uniting 12 stores within the city of Ivanovo, built • using ADSL technology at the last mile and MPLS on the side of provider B • network, a channel to the Internet with the organization of IPSEC VPN for connecting branches in • other cities. • Corporate network of a large bank, uniting 150 communication nodes. • Remote offices with IP telephony system based on CUCME and connection to PSTN via E1 ISDN PRI, R2, with organization of VPN corporate communication channels with the possibility of their redundancy.