Designed and configured high-load Clos/VXLAN multi-site fabric on 3 DC based on Cisco Nexus with border-gateway for DCI and border-leaf for external connections. Migrated services from legacy network to vxlan fabric.Data center racks are configured with dual-homed VPC leaf switches and an Anycast gateway to connect a Proxmox hypervisor, virtual machine and Kubernetes cluster. Designed and integrated firewall (PaloAlto, FreeBSD pf) in fabric. Designed a network architecture in compliance with PCI DSS.Connected our autonomous system to different ISP and anti-ddos providers. Implemented Ansible and GitLab to automate network device configurations, streamlining processes and improving reliabilityMonitoring with Grafana, Prometheus, telegraph (gnmi), goFlow, openBMP

Responsibilities: Design, implementation, supportWorking with hardware/software: PaloAlto, Cisco, Aruba, Linux(bird,keepalive,StrongSwan,iprule/iptables) Experience with protocols/technologies: eBGP,iBGP, OSPF, IPSEC/GRE, M-LAG, ECMP, GlobalProtect Monitoring/Management/Automation: Zabbix, NetBox, GrayLog, AnsibleParticipation in the organization of compliance with information security requirements (PCI DSS). Interaction with antiddos (Qrator).

Administration of routing\security\telephony based on Cisco equipment: 2811, 2911, 3925,4411, 3560,3750, WLC 5508, MSE 3300, WCS). Campus tier-3 network, Ospf, HSRP/VRRP, VPC, QinQ, Cisco switch clusters, Cisco wireless controllers. Telephony and VCS administration based on Avaya\Radvision equipment (CM 5.2.1, Cluster, Barsum, AES, ACR, DECT r4, MCU 5110, Scopia Desktop, H323, SIP, E1)Checkpoint Firewalls (4400, smart, VPN, IPS, Antivirus) and Cisco ASAVmware administration (3 clusters for 5-8 servers, esx 5 - 5.5) Unix\Linux administration (Apache,mysql,cacti,nagios,squid,radius)Bluecoat proxyAsterisk VoIPVipnet Coordinator, AdministratorData storage network administration (Brocade, Qlogic, Hitachi)Development of technical specifications, design of work projects, preparation of commissioning worksStaff training

Corporate network support:-SCS design.-Deployment of a corporate network for 300+ users based on Cisco 2960 equipment, 3560 at the access level, 3750 at the aggregation and core level. Cisco 3950 routing.-VoIP implementation based on Avaya and Cisco (H323, E1, SIP)-Encryption based on "АПКШ Континент"-Administration of Vmware 4.x

Started as a technical support specialist, since 2008 he has been a network engineer and subsequently a leading network engineer.-planning the work of engineers, distribution of responsibilities among employees of the IT department, organization and control of tasks.-Support for unix systems (DNS, Apache, Mysql)-Interaction with RIPE as a LIR-Work with Cisco network equipment (line of L2 switches, Cisco 7200, Cisco 28xx, etc.), Zyxel, AT, dlink.-Work with VoIP based on cisco AS5350, nsgate, audiocodes, etc.-Work with E1 streams based on RAD and cronyx hardware.-Network design.-Maintaining connections on MMTS-9