Security Cisco

…Continued…

Raed Musaab

Mississauga, ON • +1-647-***-**** • addzbh@r.postjobfree.com

Expert IP Network Engineer

(CCIE Security - CCIE Routing & Switching # 60498) Goal-orientated, technologically sophisticated professional with 15+ years' success driving high- performance teams to deliver the design, planning, and implementation of highly complex networking projects in Security Solutions and Routing-Switching Domains to achieve customer SLA.

• Dynamic, highly skilled leader, adept to coaching and coordinating multi-faceted groups of professionals to schedule and complete multiple conflicting priorities within a pressurized, deadline-driven environment

• Advanced technology skills with experience in Telecom LTE/3G Core/RAN Networks Cutover in Iraq/Turkey/Jordan/Kurdistan.

• Analytical thinker, adept at troubleshooting and pioneering innovative resolutions to complicated technical problems with the aim of eliminating disruptions and optimizing efficiency. CORE COMPETENCIES

Network Security Architect Cisco – PaoloAlto - CheckPoint – FortiGate – Juniper SRX • L2-L3 Service Provider • MPLS L2-L3 • Core-Backhaul 2G/3G/LTE Network Elements • IP Core/RAN-MPLS Troubleshooting • Data Center Nexus SWs • Quality of Service in Core/RAN Domains • Cisco/Juniper/Huawei Routers and Switches • Core - Radio Access Network 3GPP Standards TECHNICAL PROFICIENCIES

• Security Expertise

o Identify/mitigate Network Threats and Vulnerabilities using Cisco/PaoloAlto/Fortigate/CheckPoint Security Platforms. o Security Traffic analysis and Mitigation of DDOS/DNS/TCP-Sync/SSL-TLS attacks using Radware, DefensePro, Peakflow, Cisco Umbrella solutions. o Security Information and Event management SIEM Using, Splunk, SolarWid for security threat Investigation.

o Security Risk assessment and Traffic analysis with Failover and Contingency Solutions. o Design/Planning/Implementation of Cisco ASA FireWalls 5500-X Series o Implementation of Active-Active and Clustering Cisco ASA FireWalls for high availability Traffic Failover.

o Installation of Cisco Next Generation Intrusion Prevention Systems NGIPS with FMCs o Planning/Installation of Cisco Web Security Appliance WSA with WCCP Routing Redirect. Raed Musaab

Page 2

…Continued…

o Planning/Implementation of Cisco Identity Service Engine ISE with Active Directories. o Planning/Implementation of Authentication/Authorization using Dot1x-Mab with Radius Servers.

o Planning/Implementation of VPN Tunnels (Anyconnect/SSL/FlexVPN/GetVPN/SSH and Legacy Site-2-Site DMVPN)

o Implementation of Security Group Tagging using Cisco TrustSec SXP with ISE. o Implementation of Nating/Access-Control Traffic Filtering. o Planning/Implementation of PaoloAlto Next Generation Firewalls Intrusion Detection/Prevention requirements, including Nating, User.ID, URL-Filtering, Security Policy Management.

o Installation/Administration of PaoloAlto NG Firewalls PA-220, PA-850, PA-3260 for Campus Networks and Internet Service Providers

o Planning/Implementation of Cisco Email Security Appliance Anti-Spam Anti-Virus Blocker o Planning/Implementation of CheckPoint 730 Firewall, Application-URL filtering, IPS, AntiVirus, Anti-Bot, Anti-Smap, Remote Access, VPN security features. o Planning/Implementation of FortiGate FTG 60D Firewall including SSL Inspection, Traffic Shaping, Anti-Virus, Security Policies, Client/Sites VPNs, Two Factor Authentication using Tokens.

o Planning/Implementation of Juniper SRX240 NGFW including AppSecure, UTM (Anti-virus, Anti-Spam, WebFiltering, Content Filtering), IDP, SSL Forward Proxy.

• Service Provider Expertise

o Core L3-MPLS Using Cisco 7200/6500/3600 / ASRs Series, Catalyst 3850, 3750, 3600 o Successful implementation of L2 MPLS, Q-in-Q Network design o Installing/Configuration of Cisco SD-WAN Viptela using Vedge1K, ISR4300, VManage, VBond, VSmart, Control & Data Policies, Traffic Engineering, Topology Design. o Meet Customer satisfaction by checking the L2/L3 services using RF2544 Testing. o Implementation of Quality of Service: MPLS-L3-L2 domains: DSCP Tagging and Filtering o Implementation of BGB/OSPF/EIGRP/RIP/IPv4-v6 Multicast Routing Protocols. o IP Network Management: SNMP/Syslog/ AAA/Radius/TACACs/SolarWind o SDN/Segment Routing and Network Function Virtualization o Configuring Cisco Nexus 7K,6K,5K,2K Data Center SWs for OTV, FabricPath, vPC, SAN and classical Ethernet Features

o Configuration of F5 load balancing Local Traffic Management LTM Using Big-IP 2000 series

Raed Musaab

Page 3

o UNIX/Linux Environments and Kshell/Bash/Python Script Development, o Installing/Configuration of Vmware ESXi Vsphere 5.0 for Network Virtualization using VSwitch and Nexus 1K V.

o Network Virtualization and Private Could Solutions using OpenStack o Drawing IP Network Designs using Visio

o Contingency Solutions for IP Networks and Traffic Failover

• Telecom Expertise

o IP Design and Cutover of Ericsson Virtual Evolved Packet Core vEPC and Core Network Elements for LTE/3G domains (MME/SSH/S-PGW/PCRF/SGSN/PGSN) o IP Traffic Engineering of Core Network Elements MSS /MGW/ SGSN/ GGSN/ PCRF/ EPC

/HLR

o Design and Implementation of IP-MPLS Core-Backhaul for LTE/3G Domains Using Juniper MX80/MX240/MX480 Series and Cisco Routers 7200/6500/3600 ASR 4000/1000, Catalyst 3850, 3750, 2600.

o IP Solutions of Core/RAN Dimensioning: IUPS/IUCS/IUB/AoIP/AbisoIP/Gb/S1/X2/MUL Logical Interfaces

o Implementation of Quality of Service for MPLS-Core/RAN domains Using DSCP Tagging and Filtering

o Growth and Dimensioning studies for Marketing Projection Traffic that secures Hardware and Licenses provisions.

o Planning/Design/Cutover of 25 Nokia mcRNC, and Ericsson Evo8200 RNCs PROFESSIONAL EXPERIENCE

WireIE Service Provider.

Expert IP Network Planning Engineer ( JAN 2018 – Present ) Leading the Security Infrastructure Solutions and IP Network design for MPLS L2/L3 and Internet service provider in Canada WireIE Network Coast-2-Coast. Key Achievements:

Design/Implementation of complete security infrastructure for a Campus Network of +700 Users using Cisco ASA Firewalls 55xx Series along with User Authentication/Authorization using ISE

Implementing Intrusion Detection/Prevention Traffic flow for WireIE Internet Service Provider using Cisco Next Generation Firewall NGIPS for Ontario Networks.

Implementing Security Tag solution using Cisco TruSec for a Network of +100 devices in Calgary. Raed Musaab

Page 4

…Continued…

Installation of PaoloAlto Next Generation FireWall PA-220, PA-850 for Campus Networks that serves +300 Users controlling security traffic flow of Campus Networks in Ontario/British Colombia.

Installation of PaoloAlto Next Generation FireWall PA-3260 for WireIE Internet Service Provider in Bramptom/Ontario that controls L7 Application Traffic.

Build/maintain multiple VPNs (Site-2-Site, FlexVPN, GetVPN) with other Service Providers.

Successfully implement MPLS L2/L3, Q-in-Q, Cisco SD-WAN Network design.

Meet Customer satisfaction by checking the L3/L2 services using RF2544 Test suit.

Best achievement of Cisco FireWall ASA/ FTD security solutions implementation.

Accomplishment of VPN tunnels DMVPN, Flex-VPN, Get-VPN using ikev1 ikev2 Zone Base Firewalls

Drove the IP designs and track the implementation from Planning till Service Cutover Lifecycle.

Configuration Troubleshooting Cisco SWs 3700/3500/3600X, Routers ASR1000/901/920, ISR4300/2800 series.

Managing all aspects of the IP Network Design for Ericsson, Nokia, and Huawei domains for LTE/3G Core-MPLS and RAN-Cloud for Iraq/Turkey/Jordan/Kurdistan Telecom Networks. Key Achievements:

Leading the IP design Cutover of Ericsson Evolved Packet Core for Zain Telecom Network in Iraq.

Awarded as Ericsson Best Employee 2017 for outstanding dedication to improving network design and increasing efficiency for Zain Telecom in Kuwait.

Spearheaded the full-cycle design and implementation of RAN-Cloud to aid the successful IP- Backhaul Modernization Project, employing Juniper Routers MX40/MX80/MX240/MX480 in Zain Iraq Telecom Network

Championed the SWAP project with high quality outcomes, overseeing the IP planning and cutover of Ericsson and Nokia MME, EPGW, HSS, as well as 6 Ericsson RNCs, 5 Huawei RNCs, and 6 Nokia RNCs.

Achieved Ericsson Letter of Achievement as an instrumental member of the Planning Board to lead the cutover of 3G network in Iraq.

Accomplished Best Planning Achievement through the execution of Quality of Service in Core- MPLS and RAN-Cloud, effectively preserving Voice Traffic as an integral Customer Key Service.

Drove the design and cutover of IP-MPLS Backhaul Networks, utilizing Cisco Routers 7200/6500/3600 ASR 4000/1000, Catalyst 3850, 3750, 2600, Nexus 9k 5k and leveraging advanced technological expertise to guarantee success as part of Network Modernization project. Led a high-performance IP Planning team to achieve customer expectations and optimize performance, coaching staff members to enhance productivity and skills levels for Dubai Etisalat LTE/3G Networks. Key Achievements:

Ericsson – Middle East Region

Expert IP Planning Manager (Jan 2012 –DEC 2018)

Nokia, Dubai - UAE

IP Network Planning Team Leader ( JAN 2009 – DEC 2012) Raed Musaab

Page 5

Spearheaded the Network Swap project to convert 3K sites from Motorola to Nokia within planned timeline and scope to accomplish agreed SLA and stakeholder satisfaction.

Pioneered all aspects of IP planning and implementation of 50 Nokia Network elements to successfully manage customer traffic growth.

Delivered high traffic reliability and zero cut-off service through the full-cycle implementation of a robust contingency plan across customer network.

Drove the IP design of 16 Nokia Flexi mcRNCs / BSCs to ensure the end-to-end fulfillment of customer SLAs.

EDUCATION & CREDENTIALS

Degree in Computer Engineering

College of Computer Engineering - University of Technology - Baghdad Technical Certifications

• Cisco Certified Internetwork Expert CCIE Security – CCIE Routing and Switching -#60498

• Cisco Certified Network Professional (CCNP)

• Cisco Certified Design Professional (CCDP)

• Cisco Certified Design Associate (CCDA)

• Cisco Certified Network Associate (CCNA)

Motorola, Dubai - UAE

BSS Back Office support Engineer ( JAN 2005 – DEC 2009) Played an integral role, managing the operation of 40 BSCs in Etisalat UAE Network using Unix/Linux OSS as a part of Motorola BSS Support team, consistently paying attention-to-detail to optimize technical excellence.

Successfully achieved a high level of customer satisfaction by consistently monitoring network operations and resolving queries with maximized efficiency.

Achieved all aspects of agreed Service Level Agreement (SLA) in the delivery of maintenance, troubleshooting, and oversight of operations for the Motorola Network.

Instrumental in the Network Upgrade Project, deploying new key Telecom Technologies to ensure an effective outcome.

Contact this candidate