Asfar Zaidi

P: +1-346-***-****

ac181v@r.postjobfree.com

Professional Summary

My professional experience and interests over the last 17 years are centred on designing, engineering, and supporting large global enterprise networks as well as security solutions for campuses and data centers. I utilize a detail-oriented approach for problem solving and collaborating on or leading challenging projects. I am well-versed in architecting Infrastructure, distributed datacenters, unified communications, global WANs, and core campus services such as load balancing & infrastructure security.

Areas of Expertise

Enterprise Network & Security Designing

Managing NOC/SOC

Multi-Site Operations

Negotiation, Persuasion, and Communication

Problem Solving & Decision Making

Vendor / Supplier Management

Project Management

Change Management

IT Policies & Procedures

Productivity and Efficiency Improvement

Disaster Recovery

Expert level understanding of the following technologies

Routing: RIP, EIGRP, OSPF, BGP, MP-BGP

Services and Management: NAT/PAT, HSRP/GLBP/VRRP, QOS, DNS, SNMP, NTP, Netflow

Security: ASA55XX, PIX, VPN, DMVPN, MPLS-VPN, IPSec, GRE, Source IDS/IPS, Radius, TACACS, Fortinet Firewall (3950B,3600C,3810A,300C,600C,800C,200B), Bluecoat Proxy SG(SG900/900, SG300/600), Palo Alto Firewall (PA5050,PA5020)

Cisco Routers: ASR- 1000, 7200, 7600, 3800, 3725, 3600, 2800, 2600, 1800

Cisco Switches: Nexus 7K/5K/2K, CAT 6500, 4500, 3750/3750-E, 3550, 3560/3560-E, 2960.

LAN: STP/RSTP/MSTP, VLAN, VTP, PVLAN, Trunking, Ether Channel, Multicasting, PPPoE.

Application Networking Services: Cisco Wide Area Application Services (WAAS).

Wireless: Cisco Catalyst 6500 Series Wireless Service Module, Cisco Wireless LAN controller 4404/4402, Cisco Wireless LAN Solution Engine, Cisco Aironet 1300, 1250, 1240, 1230, 1200, 1130 & 1000 Series Access Points & Bridges. Juniper wireless Solution, Ringmaster.

Load Balancing: Brocade, F5

Software and OS: Window, MS Office, Visio, Solarwinds

Certifications

CISM (Certified Information Security Manager)

CCNA (Cisco Certified Network Associate)

CCNP (Cisco Certified Network Professional)

CCSP (Cisco Certified Network Professional)

CFWS (Cisco Firewall Specialist)

CNACS (Cisco Network Admission Control Specialist)

CIPSS (Cisco IPS Specialist)

CIOSSS (Cisco IOS Security Specialist).

CISecS (Cisco Information Security Specialist)

NCR – Nortel Basic & Advanced IP Routing Training

Nortel Passport 6440 Switch Training

Nortel RAC – Contivity – RADIUS Server Training

Strategic Negotiations Skill Training

MCSE (Microsoft Certified Systems Engineer).

BCCPA (Blue Coat Certified Proxy Administrator).

BCCPP (Blue Coat Certified Proxy Professional).

Brocade Advance Techniques in Server Load Balancing.

SGFA (Stone Gate Certified Firewall Architect).

SGFE (Stone Gate Certified Firewall Engineer).

Network Optimization Assessment Training.

Top Layer Networks – Certificate of Completion (IPS 5500 Installation & Configuration).

COMPAQ – Accredited Platform Specialist Training (Servicing Desktop, Workstation & Servers).

Strategic Time Management Workshop.

Professional Experience

Evinsys, Houston

Evinsys provides information services for the digital automation of oil field resources with a focus on Data Automation.

March 2017 - Present

Principal Network & Security Consultant

I am responsible for technical consultancy, network & security architecture/design and ensuring smooth operations of EVINSYS applications & data delivery services to the O&G Customers.

Responsibilities:

Lead daily tasks, responsibilities and services provided by the team.

Configuration, management, and troubleshooting of, Routers, Switches, Firewalls, Source IDS/IPS, MPLS,

Load Balancers, BGP, OSPF, EIGRP and various LAN protocols.

Design and implementation of converged networking solutions for key datacenter technologies

Hands on experience with Cisco Nexus Switches (2K/5K/7K)

Implement, manage and monitor the perimeter (Internet), security with firewalls, IPS systems.

Design, develop, documentation and implementation of network and security policies and procedures.

Recommends architectural changes and design enhancements to the infrastructure.

Configure, troubleshoot and manage VTI, VPN, IPSec, and Cisco web based SSL solutions.

Responsible to maintain remote authentication access control using, RADIUS, ACS, TACACS.

Capacity planning and monitoring using multiple tools including Manage Engine, Cisco LMS, Cisco Prime etc.

Ownership of complex network and security issues and troubleshoot them through to resolution.

Huawei Technology, Dubai, UAE

Huawei Technology is a global networking and telecommunications equipment manufacturer. Huawei provides end-to-end services for designing and implementation of cloud data enters infrastructures.

Aug 2010 to Feb 2017

Consultant Enterprise Solutions

I joined Huawei as a Sr. Solution Manager to Huawei and while working on various assignments I progressed to the position of Director Enterprise Solutions.

Responsibilities:

Development of IoT Solutions based on Industry Security Requirements.

Development of Secure Cloud Solutions with Application Vendors.

Development of Digital Oil Field Solutions to provide Secure Real Time Operations & Collaboration.

Testing & Qualification of Huawei Switches for O&G Vendors DCS Solutions.

Designing of Telecom Security Solutions & proposals.

Building Solution Partners Eco-System for Joint Go-To-Market Solution Offerings.

Establishment of Joint Innovation Center for development of state-of-art Solutions.

Designing of Security Controls for LTE/eLTE Networks.

Designing of Security Solutions for ISP Core Networks.

Designing of Anti-DDoS Solution for Telecom & Enterprise Customers.

Designing of DPI Solution for Telecom Customers.

Designing of Caching Solution for Telecom & Enterprise Customers.

Designing of cyber security framework, information security technology roadmap, maturity assessments and policies.

Performed investigation for major breach and generated incident reports.

Developed Cyber security strategies for Customers to ensure that essential information is provided to Management to make decisions pertaining to cyber security strategy.

A led effort to analyze and address gaps in IS utilizing industry standards such as ISO 27001 and NIST.

Partnered with vendors to identify services and products and evaluate software solutions for Next Generation firewall, and Security Information Event Management.

Projects

LTE Security Solution for du, STC & Mobily - Designing of Security Controls LTE Network (Firewalls/IPSec Gateways/ PKI Infrastructure).

eLTE Solution for KOC – Enterprise LTE (eLTE - Wireless Broadband Solution) connectivity Solution for 1000 wells for securely transmission of real-time SCADA data and Video Surveillance for Digital Oil Field Collaboration Center.

Anti-DDoS Solution for du - Designing of Anti-DDoS Solution for du Enterprise Customers.

TAWAZUN DataCenter & Network Infrastructure – Trunkey project delivered for specialised federation education society and training academy includes Tier-3 DC, Cloud service, Public WIFI, Network Security, SOC, NOC and ITSM process.

ADMA Cloud Ready Data Center - Designing of Security Controls & Network Infrastructure for ADMA Cloud Ready Data Center.

Huawei Joint Innovation Center - Development and Initiation of Joint Innovation Center between Saudi Aramco and Huawei to build state-of-art solutions for Digital Oil Fields, IIoT, Advance Computing, Broad Band Wireless and Big Data Analytics.

Honeywell DCS Switch Qualification – Testing & Qualification of Huawei Switches for Honeywell Mission Critical DCS Solution against Competition. Qualification deliverable includes; selection of switches based on features, test scope and plan, allocation of engineering resources, test timelines, OEM agreement.

Schlumberger HPC & 2D/3D Cloud Qualification - Testing & Qualification of Huawei High End Servers and Cloud Solution for Schlumberger Eclipse & BlueCube Applications.

Dimension Data, Dubai, UAE

Dimension Data is a Cisco Global System Integrator

Jan 2006 to July 2010

Network & Security Consultant

I joined Dimension Data as a Network & Security Consultant, working on various projects from designing to delivery phase.

Responsibilities:

Configure and install various network devices and services (e.g., routers, switches, firewalls, load balancers, VPN, QoS)

Perform network maintenance and system upgrades including service packs, patches, hot fixes and security configurations

Upgrading data network equipment to the latest stable firmware releases;

Provide Level-2/3 support and troubleshooting to resolve issues

Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the network infrastructure

Select and implement security tools, policies, and procedures in conjunction with the company’s security team

Liaise with vendors and other IT personnel for problem resolution

Building High & Low Level design for the projects and Network Implementation and Migration plan

Planning client networks, managing concerned resources

Hands on experience on Cisco Routers (38xx, 28xx, 18xx),Cisco Switches (65xx,35xx, 29xx), Cisco Firewalls PIX500 Series /ASA5500 Series

Knowledge transfer for the client

Projects

Etisalat Distributed Proxy for Facebook/YouTube Server farm - Technical Lead to build Etisalat Distributed Proxy Servers using Brocade Load balancers(ADX 1000/4000/8000) and Bluecoat caches(Proxy SG 8100/9000).

Union National Bank - Pre-sales engagement, PoC, Solution designing and implementation of 100 + Branch Access Solution using Cisco ASA Firewalls and Cisco 1800 Routers.

DP World – Designing & Implementation of 8 x Tier-3 DataCenter Infrastructures around the world using Cisco NEXUS 7K, 5K & 2K.

Atlantis Hotel – Designing & implementation of Network & Security Infrastructure for Atlantis Hotel Dubai.

Oasis Hospital - Technical Lead for Network Integration Project and responsible for the deployment of Routing and Switching (ASR1002/Cisco 3900 Routers/ Cisco 6500 Switches/ Cisco 4500 Switches) for 500 users.

Implemented Packet Shaper (PS-12000, PS-7500, PS-3500, PS-1700, Intelligence Center, Policy centre) at Presidential Flights, ADNOC and Gulf News impacting close to 4000 users directly.

Abu Dhabi Media Company - WAN optimization and web-filtering project involving Brocade Load balancers (ADX 1000) and Bluecoat caches (Proxy SG 9000) impacting 2500 corporate users.

Academic Qualifications

Bachelors- B.E. Electronics Engineering from NED University of Engineering & Technology, Karachi, Pakistan. (2000)

Contact this candidate