Jeddah, Makkah, Saudi Arabia
Senior Network & Security Professional, Cisco certified, holding a Master Degree with a focus on Networks, Security and Wireless networks with more than 15+ years specialized experience in IP Networking, Security & Wireless communications. Technical Skills: •Firewalls/IPS - Access control lists, URL filtering, Content filtering, UTM, NAT/PAT/Overload. Tacacs+, Radius, AAA, ACLs. •Routing Protocols - BGP, OSPF, EIGRP, Static, Redistribution, GRE, LAN/WAN technology. •Switching technologies - VTP, VLAN, STP, Etherchannel, HSRP, VRRP, STACKING. •Nexus - VPC, OTV, VXLAN, FEX •Tunnelling DMVPNs, GRE Tunnelling, VPN (Site-to-Site, Remote Access, SSL VPN), •Monitoring Syslog/NMS/Netflow Server (Solarwinds NPM, NCM, VNQM, NTA, Ping Plotter) •Failovers Load Balancing, IPSLAs, BFDs, Multi-homing •Cloud: AWS/Azure public/private peering (AWS Direct connect, site-to-site VPNs, VPC/Virtual Private Gateways, Transit Gateways, NAT/Internet Gateways) Devices: •Firewalls/IPS/Security - Palo Alto (5050, 3050, 3020, 200, Panorama) and Fortigate (1000D, 800C, 200B, 100D), Cisco ASA (5510, 5515, 5525x, 5545x), Cisco Firepower (FTD 2110, FMC) Cisco VPN Concentrators. Cisco ACS 5.8 •Routers - Cisco ASR 1001-2/7200/4431-51/3945/3845/32800/2600 series routers. •Switches - Cisco Switches Nexus7k & 9k, 9300, 6500, 4948, 3750, 3500, 2960x, 3860x series. •Monitoring - Solarwinds NPM, NCM, VNQM, NTA, PTRG.
MEGAMIND IT Solutions is the part of Saudi German Hospital Groups (Subsdiary) providing IT Services. Installing configuring and monitoring Cisco Catalyst Core switches 9500 and 9300 Access Switches as per the requirement of Saudi German Hospitals Group. Installing configuring and monitoring Cisco access points 3800, 3700. Configuration and Troubleshooting Layer 2/3 fail-overs for Core Infrastructure and Client-End. Active coordination with vendors, to ensure prompt resolution of customer’s complaints related to services and any other related issue. Working on Cisco Umbrella DNS Security project to deploy Cisco Umbrella DNS Security in all Saudi German Hospital Group. Installation, configuration, tuning, and maintenance of Trend Micro endpoint components such as APEX One. Configuring and Monitoring Trend Micro XDR (Extended Detection & Response that collect and correlate deep activity data across multiple vectors email, endpoints, servers, cloud workloads, and networks. Planning, design, testing, and implementation of new Network. Troubleshoot and solve the network and wireless issues in Saudi German Hospitals. Supervise my colleagues to troubleshoot network and help their network and wireless related issues. Providing operational technical support for managing network infrastructure. Manage IT project with multiple phase plan, managing operation tasks as well as new phases implementation and testing. Successfully designs highly scalable secure and redundant network environments utilizing most current hardware and software revisions from leading vendors. Implementing and administering Cisco ISE software for implementing policies and central authentication for Network devices. Designed and Configured Cisco VSS (Virtual Switching System) clustering technology in our Head Office and branches. Created detailed systematic upgrade plan implementation documentation and comprehensive test plan.
Job Responsibilities: Install, configure, and manage Next-Generation Firewalls, Routers, Switches, Cisco Wireless Controller & Access Points across multiple sites. HA (High Availability) solution using Cisco 9800 Wireless Controllers. Used VLANs, RADIUS and LDAP protocols for AAA IP-based comm. System. Understanding of basic security concepts: Authentication, Authorization, Encryption, Single Sign-On, Containers Performed Wireless LAN and 802.11abgn,ac technologies to deliver voice, data video. Performed site surveys and RF propagation testing. Import maps and AP placement on Prime version 2.2 in production for monitoring the access points health status and troubleshooting. Configuration and Troubleshooting of Palo Alto Firewalls in IKEA-Saudi Arabia HQ and branches and IKEA-Bahrain site. Configuring security policies, Site to Site VPNs, configuring NGFW features (URL Filtering, Threat Prevention, Wildfire. Configuration and Troubleshooting of Cisco ASA Firewalls used as Data Center Firewall, controlling traffic to and from internal servers. Configuring & Troubleshooting IP Routing Protocols such as RIPv2, OSPF, BGP, MPLS etc. on L3 Network Devices. Technically lead on Network Backbone upgrade project. Advanced knowledge of Cisco wireless LAN controllers, Cisco access points, Cisco ISE, Cisco routers, DNS services, MPLS networks, Cisco firewalls and network and routing protocols (Ethernet, TCP/IP, SNMP, VLAN, VTP, BGP, OSPF, EIGRP, RIP). Designed and Configured Cisco VSS (Virtual Switching System) clustering technology in our Head Office and branches for the Catalyst 4500 series switches. Created detailed systematic upgrade plan implementation documentation and comprehensive test plan. Designed wired and wireless network, migration, updating, set up new networks. Identified, diagnosed, and resolved network & security problems. Handling LAN and WAN issues (Cisco switches & routers, VLANs, Wireless, internet, Palo Alto firewall)
Developing technical network design, solution, building systems, supporting deployments. Test and Turn-ups, First day of business activities and providing Tier II Technical support to operations, troubleshooting issues, identify the root cause and implement corrective actions. Worked directly with vendors, carriers, and internal departments to troubleshoot and resolve network-related problems in routing, switching and network security. Designed, tested, and expanded the Wind stream wire line data network. Engineered data services consisting of DSL, dial-up, frame relay/ATM, DIA, L2/L3 VPN, MPLS, VoIP. Troubleshooting CMTS, ADSL. Leased Lines Internet & MPLS links. Co-ordination with central NOC For MPLS Issues. Configuration of BGP & RIPV2 Routing. Acting as an escalation gate to resolve critical issues with clients. Configured primary backup scenarios through Leased Lines, CMTS, ADSL, 3G MPLS off net links as per customer requirements. Design of MPLS Circuits including Network Planning. Responsible for network evaluations, troubleshooting a variety of network problems Handle the tasks of promoting additional services to clients as required Provide second level technical support. Handle the tasks of promoting additional services to clients as required Activating WAN links using different media types such as: Cable modem wireless links (CMTS), ADSL links, and SHDSL Leased line links, Fiber Optic Leased line links. Configuring Site-to-site IPSec VPNs and Cisco Easy VPNs on Cisco devices. Providing second-level support to the customer’s problems regarding the provided services. Handle the tasks of promoting additional services to clients as required. Installation of MPLS Links over various DSP’s which includes ,Leased Lines,MPLS,P2P,PMP, Microwave implementation and configuration of the Data Circuits. Build and maintain Visio documentations for Clients Upgrade latest IOS with for Cisco Routers, Switches & Firewalls.
BTAM as a leading independent integrated solutions service provider for Operation and Maintenance. Its prime sustainable competitive position has always been its advanced high level technical solutions. Job Responsibilities: Upgrades, implementations and modifications in Network Device including Routers, switches and firewalls, WLAN, Access Points. Implementing and Configuring Cisco Remote Access VPN for the company's users to access the company's network from their home or remote locations. Support multi-site network operations and make sure the network will be up & running 24/7. Perform security hardening on the network to ensure network & security device configuration as per the latest security standards. Monitoring, troubleshooting and administration of WAN and LAN infrastructure. Proactive identification and reporting of security gaps and vulnerabilities to the network infrastructure. Investigate network security incidents and prepare security incident reports and documenting the findings. Monthly failover testing for all network devices and make sure failover setup is working perfectly as per emergency situation like hardware failure & damage.