As a Tech lead/Network Cloud Engineer in an industry lead company with more than 40 million customers around the country, a heavy burden is on your shoulder to consider all business aspects, satisfy customers’ demands, and simplify scaling. In CafeBazaar we started to design and Implement our Public Cloud infrastructure which is one of the biggest clouds in the whole country leveraging cutting-edge hardware and technologies in the world. Here is a list of what I’ve done and have to be done so far:• Migrating from legacy Layer 2 design to fully ECMP routing (CLOS)• Designing and Configuring edge layer in our legacy sites with IGP/BGP• Designing and Preparing HLD/LLD of a cloud-native Data Center from scratch• Preparing LOM/LOS based on cisco nexus 9000 series and Spine/Super Spine Design• Designing, Planning, Configuring, and documenting cloud-native multi-tenant data center based on Vxlan/EVPN technology• Designing Multi-Pod Vxlan/EVPN Data Center• Designing edge layer including border leaf, edge routers (ASR9900 series) with multi-homed upstream providers• Designing Centralized VRF Leaking Scenario for Multi-Tenant fabric• Designing Failover and Redundancy in every layer of the network, from hardware to software. • Designing and Planning IPv6 Vxlan/EVPN Fabric• Designing and Preparing Data Center Interconnect scenario with Multi-Site Vxlan/EVPN approach.• Designing and Configuring DCI between legacy data center fabric with classic ethernet and Vxlan/EVPN programmable fabric.• Designing network fabric covering all demands and challenges that Ceph forces! (Intelligent Buffer Management)• Designing redundant Remote Access VPN with Cisco AnyConnect, leveraging Cisco FTD, ISE, and Dynamic ACL.• Automating Fabric Deployment and Maintenance with Python leveraging NAPALM and NORNIR• Deploying Version Control and CI/CD with Git for Python Codes and Ansible Playbooks

FanapTelecom is a consortium of 7 major ISP in Tehran which follow a big goal. currently I'm trying to collect talented people to manage WAN network across whole country as direct chief WAN network.Here is short summary of what I’ve done here:• Interconnecting all seven ISPs together considering all aspects• Redesigning IGP based on a multi-vendor Network• Redesigning eBGP peering and planning and implementing AS Migration plan• Designing and Implementing Multi-Area OSPF and Optimization• Redesigning Core and Edge Network based on CVD• Optimizing Backhaul Network• Planning for TCP Wan Optimization• MPLS and MPLS L3VPN High Level Design based on ASR1k Platform• Designing and Implementing traffic classification QOS for xDSL User based on ISG• Researching and Planning for IPv6 Migration• Working on iWan technologies like PFRv3 and Cisco WAAS.• Securing and hardening protocols and all network elements.• Managing and designing and scaling WAN Network across all country

Padidar is the first ICP in Kerman that mainly provide bandwidth to other ISPs and also offering ADSL2+ service for end users. I was responsible for all IT operations and leading a team of technicians and administrators. I did my best to satisfy customers with quality that no other company could offer. I did radical changes to IT infrastructure of company just to make sure that company can satisfy customer’s need forasmuch as every day technology goes further, it defines new needs.here are some projects that i managed :• Designing and implementing EIGRP to replace all of static routes (migrating to a dynamic routing protocol)• Designing and configuring voice over ip solution based on Elastix platform and using advanced features like voicemail and flexible IVR.• Implementing advanced QOS to prioritize and shape customer’s traffic based on pre-defined policy.• Designing and implementing an entire Switching solution including VTP Domain, Inter-VLAN Routing, Port Security and optimized STP for Ministry of Roads and Urban Development.• Designing and implementing several long range P2P wireless links up to 30 km using Mikrotik high throughput MIMO wireless cards.

Tehran Gold and Jewelry Union have several high visitor website that provide real-time pricecharts for several high precious metals and world top 50 currencies. I have installed andconfigured a Linux server based on CentOS distribution and Nginx/Apache hybrid Webserver withfully optimization to hit highest performance and lowest response time. I have also secured serverwith Cloudflare technology and advanced iptables configuration plus common hardening.For best performance I have configured Nginx as reverse-proxy to handle static content and apache to handle dynamic content beside several cache solutions like PHP-APC.Here are the websites that I’m handling as system/security administrator:www.tgju.org www.eghtesadi.org www.arzbox.ir www.etehadieh.org www.etehadie.orgSome of these websites have 6000 simultaneous visitor and total page view of 200,000 and even more per day.

HomaTelecom is one of major internet service provider in Tehran that offering dedicated bandwidth on different types of media and wan links like fibre optic, PTP wireless links and MPLS links. Company has a Tier 2 Data Center offering Co-location and VPS-VDS solutions. We are also covering our customers need with Cisco and HP server & storage solutions. Most of our customers are organizations related to government or press like FarsNews Agency, Associated Press and Ministry of the interior. My role as a network/security engineer is managing and administering all of routing and security protocols to keep the network up and secure.Here are some projects that I involved in:• HomaTelecom Data Center: HomaTelecom Data Center is designed to be a TIER 2 DC based on top of rack architecture offering hosting & housing services to clients. I was supervising when Data Center infrastructure was being built just to make sure everything is based on Tier 2 standard.• HomaTelecom WAN redesign (OSPF, BGP, PFR): As an Internet Service Provider, HomaTelecom infrastructure is based on Cisco solutions, and I redesigned the WAN utilizing OSPF, BGP and PFR best practices, to make the IP flow more efficient and having High Availability routing between different Internet & Intranet Uplink providers, based on required policies and SLAs.• Bandwidth Utilization & Optimization: by design and implementation of eBGP peeringwith different Service Providers, to flow the internal traffic without utilizing Internet Uplinks, besides preventing being Transit (using Tunnels and P2P Wireless connections), also increasing High Availability• Ministry of defence storage solution: As data growing every day safety, security andavailability are more in attention, they asked for a scalable storage solution to replace inefficient existing one. I designed a SAN solution based on HP EVA P6500 series with dual controller 10Gb iSCSI/FCoE array.

I was working in the headquarter of company in Kerman. Kerman is one of biggest states in Iran. There were plenty of branch offices in small towns of state that working under headquarter supervision. As a network administrator i had to manage a huge number of end users and as a network engineer i had to optimize the network for best utilization, so i kept network up and secure beside i tried to make it scalable for company’s future growth.A short summary of what i’ve done there:Redesigning and migrating whole AD forest based on windows server 2008• Implementing redundancy for every critical service that was single SPOF (Single point of failure)• Designing and implementing a WAN solution based on Cisco technologies and E1 lines to keep branch offices connected to HQ.• Installing WSUS service to keep clients updated to latest hotfixes and patches that ensure clients are not vulnerable.• Implementing remote VPN on ASA platform using Cisco Easy VPN technology• Designing and implementing SAN solution for live and critical data beside Tandberg TAPE Storage for backups .• Supervising Data Center Infrastructure Implementation • Securing DMZ with ASA 5510 and AIP-SSM

This is the first Company that i started my career with. I learned so many things there I tried to use the opportunity to experience what i theoretically read before.Here is summary:• Installing and troubleshooting Microsoft windows clients• Installing and configuring Microsoft windows server and related services such as DHCP, DNS, Active Directory.• Installing Passive equipments (Cabling, Patch Panel installation and etc)• Configuring Wireless Distribution System (WDS) for extending the network coverage• Configuring IPsec Site to Site VPN on a hub and spoke topology• Installing and configuring mid-range P2P wireless links