Senior network Security Engineer
Resume:
MIKE TAYEH
Mobile: 416-***-****
*********@*****.***
LinkedIn: https://www.linkedin.com/in/Mike-Tayeh
SUMMARY OF QUALIFICATIONS
Over 7 years in Telecommunications (Vsat, Fiber, VOIP, Compression)
Over 7 years in Networks (Core, Edge, Firewalls, VPN, WAN, LAN, WLAN) and Network Security (Cisco, Juniper, Trendmicro, Websense, F5 ASM<M, Netscaler, RSA)
Professional communications skills and trilingual (English, French and Arabic)
Expert in Cisco ISE
EXPERIENCE
September 2014 – October 2019 Beirut Downtown - Lebanon
Bank Audi
Network and Network Security Delivery Engineer – Senior Engineer
Projects:
Implementation of Cisco ISE/NAC (PM and technical lead)
oApplied on LAN and WLAN corporate network users and peripherals
oSupporting guest network (for secure internet use only) with portal self-registration
oImplemented anyconnect VPN setup through cisco ISE and RSA authentication.
oRoll-out Guest internet portal on VIP branches for guest wireless network
oMigrate TACACS+ From ACS to ISE
oUpgrade ise from 2.0 > 2.1 > 2.4 (latest)
Move to Cloud
oEstablishing a secure site to site VPN between the bank’s premises and Azure
oConfiguring Azure PaaS for migration
oMigrating Dev environment for a hybrid setup.
RSA MFA cloud service
Forcepoint Data Loss Prevention (Web, Mail & Data security)
PRTG Implementation
oUsed for network equipment health, bandwidth, file size, link latency & error monitoring
Core Network revamp and upgrade
oEdge and VPN Firewalls upgrade replacement (Main site and DR redundancy)
oNetwork re-design with link optimizations
oCreated scripts for network equipment configuration backups
oCleanup and optimization of core network components (Firewalls, core & edge switches, load balancers).
Yearly budgeting and revamp for Network and network security hardware/Software and licensing
oManaging a budget between 5M and 15M USD yearly.
oReplace, upgrade/patch to keep up with the newest and most secure technologies according to the bank’s needs.
Tasks and Responsibilities:
Design and Maintain network equipment configurations and apply changes according to project requirements.
Train NOC and SOC on new technologies and best practice techniques.
Troubleshoot and establish network connectivity and access (LAN, WAN, WLAN&VPN).
Identify/detect intrusions and attacks while laying proactive and reactive actions on the security products.
Technical knowledge:
Cisco Products: ISE, firewalls, routers, switches, Wireless lan controllers, Access points……
Load Balancers, Access GW & WAF: Netscaler, F5
Virtual environment: Vcenter, VCAC (VMware HCI)
Trendmicro products: IWSVA, IMSVA, Officescan, TMCM
Forcepoint DLP, ESG & Websense.
Microsoft Azure
Windows servers management
August 2014 – Current Beirut - Lebanon
Side business
Automation projects Developer
Delivered several home automation projects using Arduino boards
Developed several small projects: ventilation system, irrigation system……
February 2012 – October 2014 Beirut - Lebanon
Bcom OS
Technical Solutions engineer – Team leader
Team leadership responsibilities:
Train team members and new engineers on VSAT and IP equipment.
Coordinate deployment activities and projects and create incidents and assign respective tasks to team members and ensure that work is carried out and is well documented.
Provide technical leadership on deployment tasks by reviewing upcoming deployment packages/releases and mentoring the team before any such deployments occur.
Develop and improve the work procedures of the Deployment Group with the goal of improving the quality of service delivered while minimizing customer down time.
Implement quality controls to ensure that the procedures are strictly followed by the employees.
Provide status of projects and deployments to the Global Customer Service and Project Management Office groups as necessary.
Coordinate the team’s efforts to ensure good communication with other departments involved in deployment projects.
In the event of new, un-documented work situations, ensure that the team is informed by the 3rd line support or product development departments of the correct approach before executing the task. If applicable, document this new process.
Monitor the team’s needs (training, tools, etc.) and provide the necessary to insure team’s efficiency.
Create and make sure documentation related to networks under support are maintained and updated following changes and equipment replacement. These documentations include and not limited to: Visio diagrams, Network description etc...
Assign and follow-up team member tasks.
Creating and submitting support intervention reports to customers.
VSAT technical responsibilities:
Installation/Upgrades and provisioning of VSAT remote sites (over 15 countries and over 80 sites)
Troubleshoot on failed and errored links.
Implementation and integration of new network monitoring and utility tools (PRTG, SNMPc, WUG, OTRS…)
Maintain the PRTG installation, make sure all components and configurations are properly done, MIBs of equipment used by Bcom are loaded.
Audit and maintain configuration of notifications within PRTG monitoring system.
Implement and Configure DCME equipment (L3, Memotec)
Train experienced field engineers when not on remote mission to assume technical support shift responsibilities.
Support in equipment failure/repair RMA issuance by filling failure causes and confirming faulty status of equipment.
Implementation of remote monitoring systems.
Support Field engineers in remote sites during installations.
Designing, and implementing disaster recovery procedures
IT technical responsibilities
Migrating most of the company’s services and/or servers to the cloud.
Maintaining and configuring office servers (SBS, Active directory, DNS. DHCP, WSUS, FTP server etc...)
Configure Juniper firewall (rules, policies, routes, NAT, etc….)
Maintaining and configuring office PCs network equipment and peripherals.
Suggesting and providing IT solutions to business and management problems
Designing, and implementing disaster recovery procedures
Maintain and configure TrendMicro advanced Business security solution.
Implement office security solution: Access control and IP CCTV
April 2011 – January 2012 Mansourieh - Lebanon
Azure GCS
Switching and interconnections – Senior Engineer
Handling all switching related issues.
Enhancement of network efficiency and redundancy
Provisioning of all telecom services related to international voice transmission
Preparation, set-up, and execution of a risk-free plan for equipment migration to new datacenter, and testing of all services involved in the migration plan
Network enhancement, deep investigation of network problems, then troubleshooting and reconfiguration of underperforming nodes for voice traffic optimization
Security enhancement, identification of security threats and point of failures in the network in order to mitigate their effect
Setting up interconnections with operators/carriers (IP & TDM).
Implement and Configure DCME equipment (L3, Memotec)
Planning and configuring new and existing IPLs (Satellite & Fiber).
Acting as highest level in switching and transmission issues.
May 2009 – April 2011 Jdeideh - Lebanon
Mada Communications (formerly known as Worldpoint)
Network Management Center - Analyst/Transmission
Troubleshoot on all satellite and fiber link problems with onsite support and providers to identify and resolve the root cause of the problem.
Act as first point of escalation for IP, switching and transmission related problems.
Handle all cisco and other IP equipment (configuration and control)
Handle and troubleshoot on VoIP switches (Teles, Nextpoint, Sonus clarent….)
Maintain and Configure DCME equipment (Mitsubishi, L3)
Handle the configuration, testing and development of any project related to new monitoring tools.
Maintain the development of all coming/existing Network Management Systems.
Implementation and integration of new network monitoring and utility tools (PRTG, SNMPc, WUG, OTRS…)
Advise Network monitoring and customer service team on the actions to be taken on any critical trap sent by any monitoring tool.
Prepare periodical presentations and trainings for NMC members.
Maintain software upgrade for all network elements outside working hours.
Handle SNMP configuration and enhancement by communicating with other technical departments and make sure that correct MIBs are provided accordingly.
Ensure that network elements having MIBs are being well monitored by through various monitoring tools
Responsible for writing customer’s SLAs
Make sure that SLAs are being well technically maintained after applying them to the existing monitoring systems.
April 2007 – May 2009 Jdeideh - Lebanon
Mada Communications (formerly known as Worldpoint)
NOC
Network and Voice quality monitoring of Mada’s international network.
Troubleshooting on satellite and fiber connections.
Handling customers’ fault reporting tickets.
Assisting in remote site implantation/maintenance.
Configuring and handling various Network monitoring tools.
Optimized customer care service.
EDUCATION
2003–2009 American University of Science and Technology Achrafieh
Bachelor in Computer and Communication Engineering.
2000–2003 Institut Technique des Frères Mont La Salle Ain Saadeh
Technical Bac (BT3) in Electronics.
1990–2000 Collège des frères Mont La Salle Ain Saadeh
Elementary&middle school.
SKILLS & CERTIFICATES
Cisco SIMOS, Cisco SENSS, Cisco CCNA, GVF (VSAT installer certification), Computer maintenance, C++, JAVA, Networking, Mechanics.
LAGUAGES
English, French, and Arabic: Spoken and Written fluently.
Contact this candidate