Network Engineer Enterprise
Resume:
BASHIR MACHARIA
******@*****.***
Peabody, MA
Designing and Implementing Robust Network Architectures
PROFESSIONAL SUMMARY
Dedicated Enterprise Network Engineer with extensive experience in designing, implementing, and optimizing complex network infrastructures. Proven expertise in managing large-scale projects and leading cross-functional teams to deliver cutting-edge solutions. Specialized skills include network architecture design, security implementation, and troubleshooting in dynamic and high-demand environments. Proven ability to manage all phases of projects including design, development, implementation, standardization, documentation, and training. An effective communicator and collaborator with a passion in network architecture and learning new skills.
TECH STACKS
Networking Technologies: Multiprotocol BGP, OSPF, Enterprise MPLS, VXLAN, DMVPN, Site to Site VPNs, DNS, AnyConnect VPN
Wireless Technologies: LWAP/CAPWAP, 802.1x authentications: PEAP, EAP-TLS, PSK
Application Delivery Services: F5 Global and Local Traffic Management
Vendors: Cisco, Arista, F5, ASA Firewall, FortiManager, Cisco Centralized Wireless Controllers, Infoblox, NetBrain, SolarWinds, Smarts, HPNA, Nagios, Cisco Prime, ServiceNow, Jira, CrowdStrike, Proofpoint Enterprise,
Hardwires:
Cisco : 4500, 6500, 3600/3850, Nexus, 6880, 9000 Series switches
Arista 7300, 7504R3, 7304X.
HPE Aruba 7030, AP-514, AP-345
CERTIFCATIONS
CCNP (Cisco Certified Network Professional) Enterprise
CCNA (Cisco Certified Network Associate) Voice
CCNA (Cisco Certified Network Associate) Wireless
CWNA (Certified Wireless Network Administrator)
CWDP (Certified Wireless Design Professional)
CompTIA A+
AWS Certified Cloud Practitioner CLF-C02
PROFESSIONAL EXPERIENCE
CHRISTIANBOOK May 2024 – Present
Network Engineer/Systems Admin
Assisted in the design, configuration, and deployment of Cisco networking solutions for clients
Supported daily network operations, including monitoring, troubleshooting, and maintaining network device
Conducted network assessments and diagnostics to ensure optimal performance and assisted in configuring VPN solutions, managing VLANs, and implementing network access control lists (ACLs).
Provided support for network hardware and software troubleshooting, including layer 2 and layer 3 issues. security.
Terminated Cat5e, Cat6, and cables using punch-down tools, keystone jacks, patch panels, and connectors.
Diagnosed and resolved cable faults and connectivity issues, ensuring compliance with TIA/EIA standards.
Implementation, installation, configuration, and maintenance of network hardware including switches, network appliances, cables, patch panels and rack equipment.
Perform system and application upgrades and patching during after-hours upgrades and maintenance, troubleshooting, and/or on-call availability as needed
Assisted in the configuration of Aruba wireless products, including Access Points, Mobility Controllers, and the AirWave management system with Aruba VisualRF
Conducted troubleshooting of wireless performance issues and provided solutions related to RF interference and device compatibility.
PBX Phone Systems -Meridian:
oManages Meridian PBX phone systems, handling configurations, troubleshooting, and system updates.
oPerformed user account management tasks, including setup, moves, and changes for end-users.
oLed the migration of legacy PBX phone systems to Microsoft Teams Phone, streamlining communication infrastructure, reducing operational costs, and improving remote collaboration capabilities
Systems:
Microsoft Windows Server Administration
Microsoft 365 administration, including Azure Active Directory
Created and managed Active Directory user accounts, including provisioning, de-provisioning, and modifications for new hires, terminations, and role changes.
Automated user account creation using PowerShell scripts, improving onboarding efficiency by 40%
Coordinated with HR and department heads to ensure timely and accurate account setups.
Conducts threat analysis and monitoring using CrowdStrike Falcon, detecting and mitigating advanced persistent threats (APTs) and malware incidents.
Administered and optimized Proofpoint Enterprise Protection to safeguard over users from phishing, malware, and advanced email threats, reducing malicious email delivery by 90%.
Implemented Proofpoint targeted attack protection (TAP) and threat intelligence features, enhancing early threat detection and response times.
Implemented and managed Cisco Duo multi-factor authentication (MFA) to enhance organizational security across VPN, cloud, and on-premises applications.
Network:
BOSTON CHILDREN’S HOSPITAL Nov. 2021 – March. 2024
Network Engineer II Enterprise Infrastructure
●Played a crucial role in delivering extensive support for Local Area Network (LAN) and Wide Area Network (WAN) operations, ensuring smooth connectivity and optimal performance throughout the hospital's network infrastructure.
●Implemented security measures to safeguard sensitive data within the hospital's network on FortiGate and SRX next-generation firewalls.
●Conducted the configuration of Cisco and Arista routers and switches, undertaking day-to-day maintenance activities to ensure the ongoing reliability and efficiency of the network infrastructure. Collaborated closely with vendors to facilitate seamless installations, fostering a strategic partnership that contributed to the successful integration of advanced networking solutions.
●Engaged in the troubleshooting process and executed the implementation of BIG-IP F5 Global and Local Traffic Manager, demonstrating a proactive approach to identifying and resolving issues with Virtual IP addresses, Certificate imports and renewals among others.
Regularly reviewed and updated configurations for Global and Local Traffic Manager to align with changing business needs. Implemented changes to optimize traffic flow and ensure efficient load balancing.
Addressed and resolved issues related to load balancing, ensuring minimal impact on services. Conducted root cause analysis for any disruptions and implement corrective measures.
Maintained comprehensive documentation for configurations, policies, and procedures. Kept documentation up to date to facilitate efficient troubleshooting and knowledge transfer.
●Managed Fortinet manager and firewalls firmware updates to ensure our security infrastructure remained current, fortified, and equipped with the latest features, enhancing overall security posture and performance.
●Conducted comprehensive troubleshooting and provided dedicated support for site-to-site Virtual Private Network (VPN) connections, proactively identified, and resolved issues to ensure the continuous and secure communication between multiple remote sites.
●Led the data center transition of servers from legacy Cisco 6500 series switches to state-of-the-art Arista switches, employing cutting-edge VxLAN (Virtual Extensible LAN) technology. Oversaw the entire migration lifecycle, encompassing planning, execution, and post-migration validation, ensuring minimal disruption and downtime.
●Provided robust ongoing support for Web VPN services utilizing Pulse Secure technology. Proactively addressed and resolved issues, ensuring the continuous and secure accessibility of web-based virtual private network connections.
MASS GENERAL BRIGHAM May 2013 – Nov. 2021
Wireless Network Engineer II Enterprise Infrastructure
●Designed and implemented resilient, secure, and highly available network infrastructures in a multi-campus environment leveraging Cisco network devices such as routers, switches, and centralized wireless controllers along with access points.
●Successfully orchestrated the seamless integration and deployment of cutting-edge networking technologies, specifically in BGP and OSPF, along with services such as MPLS. This contributed significantly to the enhancement of network capabilities and overall infrastructure efficiency.
●Developed and meticulously maintained comprehensive documentation encompassing network configurations, diagrams, and standard operating procedures. This effort ensured clarity and accessibility for team members, facilitating effective troubleshooting, and supporting future planning initiatives.
●Collaborated with the Information Security team to detect and address potential network security breaches, ensuring timely identification and mitigation measures are implemented.
●Implemented and managed multiple Wide Area Network (WAN) Site-to-Site Dynamic Multipoint Virtual Private Network (DMVPN) tunnels ensuring high availability using Hot Standby Router Protocol (HSRP), Bidirectional Forwarding Detection (BFD), and Multiprotocol Label Switching Virtual Private Network (MPLS VPN) technologies.
●Supported the robustness and effectiveness of the DNS and DHCP infrastructure, thereby enhancing the overall stability and functionality of the organization's network environment.
Enterprise Wireless Infrastructure
●Successfully implemented multiple wireless networks, employing diverse security methods encompassing encryption and authentication protocols. Demonstrated expertise in designing and configuring secure wireless environments to safeguard sensitive data and ensure the integrity of network communications.
●Performed thorough pre and post wireless surveys, integrating precise channel and power planning. Executed adjustments to enhance wireless network performance, guaranteeing seamless connectivity and superior coverage for an improved user experience.
Evaluated wireless challenges related to 802.1x authentication methods such as PEAP, EAP-TLS, PSK, DHCP, and DNS.
Performed Wireless Packet Capture utilizing a diverse range of measuring and diagnostic tools, including Insider, Ekahau, and NetScout System. Leveraged these tools to analyze and interpret network data, identify potential issues, and implement strategic solutions to optimize wireless performance and ensuring the delivery of a resilient and high-performing wireless infrastructure.
EDUCATION
Bachelor of Science in Computer Science- California InterContinental University
Contact this candidate