Network Engineer Amazon

SAJIN THOMAS (NDE-Amazon)

Profile:

Seasoned and dedicated Network Development Engineer who is thorough and motivated with 10+ years’ experience managing large scale design, deployment and operational architecture projects. Self-starter who is very adaptive to a constantly changing environment that always keep their focus on end state of the project and delivery. Values the importance of documented procedures and following guidelines to reduce the impact of network changes. Area of Interest:

Data Networks, Network Design, LAN/WAN Technologies, IPv4 and IPv6 Routing

Network Security, Platform Design and Career Certifications Professional Certifications:

Academic Qualifications:

PG Certificate (Distributed Systems and Networks) : From University of Kent (http://www.kent.ac.uk/), Canterbury, UK with 67 % in year 2006

B.E (Information Technology) : From Karunya Institute of Technology (http://www.karunya.edu/), Coimbatore, India with 75% in year 2004

XIIth (AISSCE-CBSE) : From SDV English Medium School, Alleppey with 82.4% in year 2000 Xth (AISSCE-CBSE) : From SDV English Medium School, Alleppey with 76% in year 1998 CISCO (id) : CSCO11483636 VUE id : 212471411

CCIE R&S (LAB):CCIE™ No. 37231 ; Valid till 26th October 2020 CCIP {642-691 (BGP + MPLS), 642-642 (QOS)} : Valid till 30th October 2020 CCNP {642-902(ROUTE),642-813(SWITCH),642-832(TSHOOT)}: Certified in the latest version (CCNP v4) and valid till 30th October 2020

CCNA {642-802} : Valid till 30th October 2020

CCNA (CSCO10835567), Certified in July 2004.

MCSE – Messaging with Exchange Server (ID: 3227286) Sajin Thomas

17923 27th Ave SE

Bothell, WA, 98012

Ph No: +1-206-***-****

E-mail: *****.******@*****.***

Professional Experience:

More than 13 years’ experience in design, installation, maintenance and also troubleshooting of complex networks

Knowledge and experience with the following hardware: o Cisco Catalyst 3k/4k/6k/9k ISR ASR1k Nexus9k/7k/5k/2k, Aruba 77XX WLC & Commodity switching

Master in Layer 3 technologies especially routing protocols like RIP, EIGRP, OSPF and BGP as well as OER / PFR, VRF WAN technologies

Knowledge and experience with the following technologies: o LAN/WAN •802.3 Fiber/Copper •WiFi(802.11) •STP •VLAN •LACP •RETH •TCP/IP •EIGRP •OSPF o MP-BGP •IPv4/IPv6 •NAT •Multicast •VPN •SNMP •DNS •DHCP •HA •IOS(XE) •NXOS •AWS Cloud o JunOS •Python •Linux/Bash •Docker•Jinja(2) •YAML

knowledge of NAC-Cisco ISE, IPv6, RIP-ng, OSPFv3 and IPv6 Multicasting and network security with ZBF and switchport security

Developing end-to-end network design plans to meet the specific network objectives and constraints including Quality of Service.

Implementing VPN, IPSEC gateways for client to various markets and trading. Managing firewall access with Palo Alto(PanOS), Checkpoint-R75.20 and Provider1 Blade. Accomplishment and Numbers:

Responsible for the operation of the global Amazon Enterprise network and all engineering/administration team efforts

Highest level of technical escalation for engineering team

Designed and implemented Commodity Whitebox switching architecture and saving Capex cost of 20M USD, Opex cost of 3M USD for LCRs.

Design and implemented new Twitch HQ in San Francisco to ensure secure Wireless SSID and RADIUS over secure tunnel and hosted in AWS public VPC

Create and deliver team and cross team training sessions for Administrators and Engineers

Provide training, deep-dive, and roadmaps for Automation and Orchestration strategy.

Collaborated with Architects of multiple disciplines and represent capabilities of the network

Work with project management to determine the level of effort and scope of work details

Worked closely with InfoSec team to ensure compliance and adherence of security policies

Collaborated with 3rd parties for ISP, network, applications, and power/cooling infrastructure

Participated in 24x7x365 on-call rotation

Developed Configuration templates using Jinja, automated workflow for mass changes using Ansible to thousands of switches (ACL, NTP, syslog changes).

Numbers:

o Offices managed: ~500

o Network devices: 30,000 (Switches, Routers, Firewalls) o Network Drops: 1.5M

Work Experience:

1. Presently working as Network Development Engineer for Amazon Enterprise Network AWS team (Seattle) leading LAN, subsidiary Network design and Automation

Dates of Employment: June/04/2017 – Present, 40 hours/week Job Duties :

Deploying WAN (C-POP) & LAN (Commodity Switching) connectivity for multiple corporate, customer service, development, and subsidiary sites.

Designing and implementing Whitebox Commodity switching, studying various chipsets (Trident, Maverick) with PHY support (MACsec) for Campus LAN switching as a large-scale access layer rollout.

Implementing, supporting and managing iVPN (AnyConnect) and managing wireless for Amazon employees.

Handling network operational issues via auto-cut / user-cut tickets for corporate networking. Setting threshold for latency and packet loss for auto cut tickets in NAE and Fluxo alerts, both being Amazon proprietary tools.

Espresso WAN Monitoring deployment and carrying out on call duties for high severity events for corporate networking as a form of SD-WAN.

Customizing and prioritizing critical traffic with Quality of Support (“QOS”) policies and delivering QoS standardization projects.

Running internal network projects such as OS Life-cycle Management, hardware life-cycle management, configuration audits, Q4 readiness preparations, design changes, and mass configuration changes.

Reviewing and implementing day-to-day network changes.

Working with Internet Service Providers (“ISPs”) to diagnose problems between the Amazon network and the ISP network to decide on WAN hand-off (EPL EVPL DWDM or DIA)

Guiding local IT on game-days, circuit activation and upgrades, and site decommissioning.

Collaborating with Corporate Infrastructure Build (“CIB”) teams on Amazon site expansions. 2. Worked as Network Engineer-II in Amazon (Seattle) for Fulfillment Centers handling designing and implementation of one of the largest network infrastructures. Dates of Employment: June/06/2016 – June/03/2017, 40 hours/week Job Duties :

-Design IPSEC VPN over Direct Internet Access links and MPLS solution for FC sites across the Globe for an efficient Network architecture. This will provide the WAN access layer for the WAN expansion project.

-LAN Network design for FC new build-outs and migration projects. This includes both the wired and wireless networks.

-Fine Tuning Automatic Fail-over of WAN link using tools for seamless cutover of production traffic over degraded circuit.

-NAC deployment and design development for Commodity hardware.

-Delivered and Maintained Network Standards, Procedures and Documentation

-Worked with hardware and software vendors to identify and troubleshoot recurring platform issues.

-Participated in Interviewing of other Network Engineer candidates 3. Worked as Network Engineer managing operations of Amazon Asia Pacific Resources Pte Ltd.(Singapore) Dates of Employment: December/01/2014 – June/05/2016, 40 hours/week Job Duties :

Build & Support MPLS Connectivity & Wireless Solutions for Amazon Locations

Performed Troubleshooting of networking, routing and interconnectivity issues

Collaborated with Internal Teams to fix issues during large-scale network events

Anyconnect VPN implementation, support and management for employees.

Carrying out Oncall Duties for High Severity Events for Corporate Networking

Running Internal Network Projects such as OS Life-cycle Management, Hardware Life-cycle Management, Configuration Audits, Q4 Readiness Preparations, Design Changes, Mass Configuration Changes

Closely Working with Vendors such as Cisco/Aruba to identify and troubleshoot recurring & chronic platform issues

4. Worked as a Network Engineer Exchange Feeds in Bloomberg LP ( Singapore) Dates of Employment:August/01/2014- November/30/2014 Job Duties :

Exchange Feeds and Security team member

Network operation support handling Cisco, Juniper MX series and Nortel routers and switches.

Bluecoat proxy management, Juniper IPSEC VPN connectivity,

Planned, implemented and coordinated upgrade from legacy networks to MPLS networks. Routing experience in OSPF, BGP/MPLS.

5. Worked as Network Engineer at Newedge Financials (SociétéGénérale, Singapore ) Job involves managing APAC & Global WAN including implementing IPSEC VPN for clients’ trading on global markets. Dates of Employment: July 2012- August 2014

Job Profile

o Designing & Implementing optimal routing architecture with BGP, EIGRP. o L2 switching and L2 VPN, Private VLANS & HSRP.

o Responsible for Network Management - IPPlan, Ciscoworks, Intermapper, WUGusing JIRA and Change Request Management.

o Implementing IPSEC VPN,DMVPN and GRE Tunnel over IPSEC VPN for Multicasting& Routing. o Administered Firewalls{Checkpoint-R75.20 (Provider-1) &Cisco ASA 55xx} o Managing Bluecoat proxy SG 300 for internet and WAN optimization, Firepass for employee VPN, also RSA servers.

o Working with C6509, C4948, ASA 5520, C3560, C3750 o AnyConnect SSL VPN design, implementation and documentation 6. Worked as Network Consultant at NCSPte Ltd (Singapore), a Singtel Group Member firm from December2011 to July 2012, mainly taking care of Customer Edge devices and LAN connected over Singtel MPLS Megap0p/ C+ IP VPN Networks. Also worked as team lead for CPE which comprised 3 network engineers and handling L3 escalations.

Job Profile

o Working mainly on BGP on WAN side, EIGRP and OSPF on LAN. o QOS manipulation using either DSCP, IP PREC, CoS. o Working with technologies such as :PPPoE, MLPPP, Framed/Unframed E1, NTP, SNMP o Team leader of CPE project which included installation of ISP facing WAN routers for BGP peering and connecting to the Megp0p MPLS.

o Working on high availability technologies including HSRP,VRRP,GLBP for load balancing, fail over and clustering.

o Working with C7206 VXR, ASR 1001, 2nd generation ISR- C39xx, C29xx including installation of patch panels. 7. Worked for Excel Network Technologies (Mumbai, India) as network engineer handling L2 and L3 technologies as well as WAN technologies from 5th March 2008 to 30th September 2011 for a period of 3 years and 7 months.

Job Profile

o Planning, Designing and Implementing L3 technologies on demand as per the requirement. o Working on OSPF,BGP and L2 technologies

o Worked under Mr.Abid Khan in implementing technologies such as MPLS, MP-BGP and Router Redundancy with HSRP, GLBP

8. Worked for Poornam info vision (Cochin, India) as a network and system administrator from September 2006 to February 2008 for a period of 1 year 5 months.

Job Profile

o Managing web servers based on Linux and Windows. o Hardening them for security and installing LAMP (Linux, Apache,MySQL,and PHP) and managing CPanel, WHM.

I hereby state that the above-mentioned details are true to my knowledge Sajin Thomas

Contact this candidate