IP/Cloud Solution Architect & Network Security
Resume:
Mustafa Sharif
PERSONAL SUMMARY
Over ** years of professional experience in IP/Network/Cloud/IT Design, Security, Planning, Implementation and Maintenance Support in ISPs, Telecom Sector and Financial Institutions with strong aptitude to adapt & groom in an every-changing Communications era. Hands-on experience building/migrating public cloud environment using cloud native/3rd party solutions. Hands-on experience managing Openstack (NFVI, CICD, Flavor, HAG, Networks, Router, Floating IP, Ports etc) environment.
Have been part of Design and Core Backbone teams engaged from Pre-Sales, Consulting towards Delivery of large-scale projects in Telecommunications IP Network, Tier 4 Data Center and Cisco Gold Partners.
Project experience in individual capacity, and as a team member. Highly effective time management, task delegation. Strong motivation towards solving complex network engineering problems.
These projects involved in multi-Technology/Vendor platforms (Cisco, Palo Alto
(5410, 3420, VM Series 100, 300, 500, 700), Panorama, Juniper, Fortinet, Checkpoint, Microsoft, F5) focused on Network Security, Routing & Switching, Service Provider, Cloud & Data Center projects, inclusive of IBN (Intent Based networking). Have faced competitive as well as time bound business continuity KPI’s and project deliveries for multi-domain services leased to corporate entities as well as Key Government accounts.
WORK EXPERIENCE
1. Bell Canada (Mar 2020 – To Date)
Solution Architect IP/Cloud Computing
§ Design and implement Azure hybrid network architectures integrating on-premises datacenters with Azure using ExpressRoute, VPN Gateways, and Virtual WAN.
§ Architected hub-and-spoke and mesh VNet topologies ensuring high availability, scalability, and security across multi-region environments.
§ Developed Azure landing zones following Microsoft Cloud Adoption Framework (CAF) for enterprise-scale network deployments.
§ Design, Migrate and Support for Azure Cloud Solutions for clients (Azure VNETs, ExpressRoute, IPsec VPNs, Cloud security)
§ Implement Azure Firewall, Network Security Groups (NSGs), Application Gateway, and WAF for multi-layered network protection.
§ Analyze, design, and implement the appropriate Network and Cloud solutions to support different project requirements with the focus on Network and Security.
§ Continuously improve the network and product architecture, strategy and delivery processes using standard methods
§ Completed Checkpoint to PaloAlto migration of around 40 firewall clusters including both virtual and physical firewalls.
§ Tenant and VNF (Mobile Packet/IMS core) driven solutions implementation in Openstack
§ Securing the tenant environment at Perimeter and Data Center level using Cisco, Checkpoint, Fortinet, Palo-Alto for North/South and East/West traffic flows
§ Multi Data Center redundancy using F5Load balancers AREAS OF EXPERTISE
Public Cloud: MS Azure
Private Cloud: Openstack
Network Security
Routing & Switching
Service Provider
Data Center
Cisco ACI
Education
Ms Computer Science (MsCS)
CERTIFICATIONS
MS Azure Solutions
Architect
MS Azure Security Engineer
CCIE SP
CCIE R & S
CCIE Data Center
CCNA R & S
CCNP R & S
Palo Alto Certified Network
Security Engineer
JNCIA
JNCIS
CORP. TRAININGS
- Red Hat OpenStack
Administration (CL110)
- RHCSA
- Cisco Viptella SDWAN
- Configuring Nexus 9K
- Cisco ASR9K, CRS,
NCS
PERSONAL DETAILS
E:*******.******@*****.**
m
Driving License: Ontario
§ Managing/Implementing Leaf/Spine (Cisco NCS, Nexus, Juniper MX) Underlay (ISIS, BGP, L2/L3 MPLS VXLAN) to support VNF overlay setup.
§ Simplify and standardize the network topology to improve the integration of new services
§ Participate in the development of the Network & Security infrastructure architecture
§ Support, develop and operate the products and ensure they evolve with new requirements coming from different LOBs
§ Configuration, Design and troubleshoot firewalls (internet facing and internal), IPSEC VPNs, Remote Access VPNs
§ Develop new technical solutions and programs to improve customer experience, reduce time to market or improve cost structure.
§ working on Data center related (Cisco ACI, SDA etc.)Network and security services for a large number of clients and tenants.
2. AirGate Technologies (August 2017 - Mar 2020)
Sr. Cloud Network Architect
AirGate enables Enterprises to Securely and Privately connect to the Microsoft Cloud using ExpressRoute(dedicated) connection.
Worked with AirGate Technologies Inc. as “Sr. Cloud Network Architect”, managing all the Network and Microsoft Cloud related tasks for the customers. Key Deliverables
§ Architecture and deployment of secure, dedicated Azure ExpressRoute (private/Microsoft peering) As A Service for clients
§ Cloud posture assessment from security/infrastructure
§ Leading Design Sessions with Internal and external team members for client solutions
§ Design, Migrate and Support for Azure Cloud Solutions for clients (Azure VNETs)
§ Optimization and Security Assessments for clients
§ Providing Multi-Cloud, Multi-Service Solutions
§ Building customer datacentres on cloud platform including virtual networks, virtual network gateways, network security groups, Firewalls (Azure firewall, Checkpoint, Fortinet, Palo Alto) in Azure and other cloud native tools to support the client requirements
§ Large Scale Project Design and Implementation for Data Centers, Government entities and Enterprises.
§ Implementing F5 LTM, GTM for government entity to load balance application traffic across DC's
§ Managing Cloud Connect platform to onboard customers looking direct connectivity with cloud providers (Azure, AWS, IBM)
3. Cisco Systems (Nov 2010 - May 2017)
Network Consulting Engineer
Worked with Cisco Systems as “Network Consulting Engineer” for Advanced Services team working in various advance Technology projects, Post deployment Support for its high-profile customers in Middle East region. E.g. DU telecom, Etisalat Telecom
Key Deliverables
§ Low Level Design & Documentation, Network Implementation Plan, Network Migration Plan, Coordination and timely provisioning of systems and subsystems.
§ Liaisons with team members to ensure latest technologies/techniques are incorporated into the design and implementation.
§ Implementation, Design review and Optimizations involved key understanding of LAN/WAN, Routing protocols (OSPF/EIGRP, BGP), MPLS VPN’s(L2/L3/VPLS), PBRs, Ethernet switching functionality and protocols: STP/RSTP/MSTP, VLAN, bridging and QoS.
§ Providing Consultancy / Advisory Services to Clients (majorly Service providers)
§ Managing Maintenance, Activity Planning and reporting progress against Project Plan.
§ Acceptance Test Procedures/Plan handling (ATP) & documentation.
§ NOS (Network Optimization Support) Network Optimization Support helps customers take full competitive advantage of their network infrastructure by building on device-level support received through Cisco Technical Support Services. Network Optimization Support helps bridge technology and expertise gaps, allowing the highest possible return on investment throughout the network infrastructure lifecycle.
§ Support network ATP as well as NRFU process to ensure, network is built resilient as well locked-in for avoiding any security breaches.
§ Extensive usage of basic networking utilities and protocols such as : ACL, ARP, DHCP, DNS, SSL, Flow Control, ICMP, LACP, LLDP, NAT, Open Flow, SNMP, TACACs, Radius, TCP/IP and performed packet flow analyses using Wireshark. 4. Getronics Pakistan (Jan 2010 - Oct 2010)
Senior Network Engineer
Worked with Getronics Pvt Ltd in the capacity of Sr. Network Engineer, My responsibilities include Presales/Post Sales activities, Design & Implementation of network solutions for customers.
Key Deliverables
§ 24x7 point-of-escalation for high-severity, high-impact customer issues
§ Vetting of proposed solution & high-level design (HLD), bill of materials (BOM)
§ Planning and execution of major network change or deployment activities.
§ Projects execution, Routing (BGP, IS-IS, EIGRP, OSPF), Switching (Spanning tree, VTP, VLANS, Trunking) and Data Center technologies Nexus 7k,5k,2k
§ Post project deployment support for clients
§ Supervision of design research, test bed environments and network stress-testing
§ Technical assistance to pre-sales team in preparing response to customer RFP/RFQ
§ Preparing MOP & Implementation Plan for projects and change requests.
§ Change Request execution, reviews and discussion with all stakeholders to finalize the MOPs/SOPs.
§ LLD/HLD (High / Low Level Design) Review and Optimization. 5. Warid Telecom (May 2005 to Dec 2010)
Network Engineer (NOC)
Warid is one of the largest Telecom operator and Internet Services Provider offering diverse solutions in the area of Networks, WAN implementation & Telecommunication infrastructure.
Key Deliverables
§ Handled enterprise trouble tickets at Level 2 for Medium to Large Sized customers for their Fixed services and liaison with Level 3 to resolve 95% of issues in NOC.
§ Working on Cisco 7600, 7200,3800,3600,2900 and Juniper J/M Series Routers, Cisco 6500, 3750, 2960 switches to manage core OSPF, BGP, IP/MPLS infrastructure.
§ Managing Routing environment with OSPF, BGP and Policy Based Routing for more than 21 POP including Data Centers.
§ BGP configurations for multi-homing with upstream providers (ITI, Flag), and influencing path selection using different BGP attributes like AS Path, Local Preference & MED.
§ Managing Switching environment using VLANs, VTP and Ether channels.
§ Configuring clients to provide IP. BGP and L2/L3 MPLS VPN and ISPEC VPN connectivity.
§ Working on ATM and Frame relay switches, Access Servers, Cisco and Juniper routers and DSLAMs to provide services to the clients.
§ Liaising with carriers and telecom personnel to rectify media faults, proactive monitoring/Configuring of the network.
§ Configuration & implementation of QoS.
§ Configuration & maintenance of E1, Fiber Optic, Multilink, ATM, DSL (IPoA & PPPoE),
§ Integration of Cisco Routers, Switches with Cisco secure ACS using TACACS.
§ Standard Operation Procedures (SOPs), Work Plans and change control forms.
§ To ensure active team participation and performance by taking part in team meetings, discussions and participating in Network Projects and Network infrastructure change/upgrade activities.
§ Liaising with multiple Inter-dependent teams ranging from Call Centers, Technical Service Desk, Field Ops and Platinum Desk to ensure effective and seamless communication.
Contact this candidate