Senior Network Architect Data Center, SDN,SDWAN,Cloud Security,DevOps

Dhruba Jyoti Ganguly LinkedIn: https://www.linkedin.com/in/dhruba-jyoti-ganguly-9081222a/

**** ****** *** ***, ****** Chapel, FL 335**-***-*** 3213 ***************@*****.***

Certifications: CCIE DC (written), CCIE RS (written), CCNA Dev-Net (0JHDXH8MQLEEQPG7), CCNP (426034177015DRXH), AM-214, F5, Aviatrix - MultiCloud Network Cloud Backbone (2022-17666), Network Associate, Network Professional (2023-19010); NSE 4, PCNSE 7

Experienced Senior Network Architect–Data Center, SDN, SDWAN, Cloud Security, DevOps, Virtualization

SDWAN, Openstack (neutron), IoTS; SDN Protocols: OVN,OVSDB, PCEP, OpenFlow; WAN Optimization - Riverbed, WAAS.

Cisco Routers, Switches, ASA Firewalls; Juniper Routers, Juniper Apstra, Switches, SRX, SSG Firewalls; Cisco ISE(personas)/ACE/ACS/SDA,

Cisco Secure Worload (CSW), (ASA to FTD/FMC and Meraki migrations Cisco CX)

RDMA, RoCE, InfiniBand, Ultra Ethernet (UEC) – ROCm, RCCL; Ethernet, QoS, PFC, ECN, DCQCN,, NCCL, AI, Agentic AI, Generative AI, Run:ai, LLM (Large Language Model) Guardrails, GPUDirect GPU Telemetry, RDMA, NUMA, PCIe affinity; NVDIA GB200 GPU - HGX /DGX-class systems, NVLink partitioning, XID troubleshooting, NVSwitch

Network Design – Fat-Tree, Dragonfly; Cisco DFA (Dynamic Fabric Automation) – Fabric Management, Workload/DCI

SolarWinds, Nagios, Dell Open Manage, HYPERFLEX, TETRATION, FLASHSTACK, VERSTACK, Cisco Prime, Cisco MDS

IPTv, ABR, Digital Simulcast Deployment, VOD design; Microsoft AD – Red Forest, Blue Forest, Greenfield, Blue team; SAAS

NSM Tools: PRTG, SNMPc, FCAPS, Splunk, Firemon, Greylog, WireShark (Round Trip Time), Skybox, AlgoSec, Gigastore

CDN (Content Delivery Network) – Akamai, AWS – EC2, IAM, Route 53, AWS VPC Reachability Analyzer, Cloud-Native Tools, AWS CloudWatch/Heroku/GCP design - Cloud Routers, Google Access for IPv6, Cloud NAT64, Interconnect, VPC Flow Logs, connectivity (GKE) – Cloudcraft, NetBox, Terraform,Helm; Veeam, Azure Databricks/Apache Spark, Azure Microsoft Sentinel (EDR), REST API, Sprint planning / estimation; Azure OpenAI troubleshooting, Azure Private Link, Private Endpoints, Azure Private DNS Zones, private endpoint DNS resolution, Azure OpenAI VNet integration, deployment connectivity and access troubleshooting.

Git-CI/CD DevOps Tools – Chef, Jenkins, Puppet, Salt, GitHub; Amazon EKS, Dockers, Insovalent Cilium Kubernetes – eBPF, Tetragon,Hubble; PostgreSQL, MySQL, RDBMS, DPDK

Python, Bash, Ansible, YAML, Juniper PyEZ Go (crypto/tls, gRPC Go, Gorilla WebSocket, Gin / Echo), Linux (RedHat, CentOS), OVN, OVS, SRIOV, Perl/C/C Java, TCL, Shell/ PowerShell Scripting

Citrix NetScaler 10, 10.5, 11.0; GSLB; Xen App 4, 4.5, 6.0; PCI compliance; Service Restoration/Sustainability, breakfix

Kemp/F5/Barracuda Load Balancer, CASB, Layer 7 (ALB) Load Balancer, LTM-SSL Offloading/SSL Bridging/SSL Passthrough, GTM, Wide IP, Irules, iApps /Application Services 3 Extension (AS3); TLS, WAF-Forward/Reverse Proxy; FortiGate/Fortinet 1500D/600C; FortiAnalyzer; ADVPN; SonicWall; Netscout nGeniusONE, Gigamon, ACD, Cisco IronPort, HAProxy, Extrahop; SSL Inspection

Palo Alto Firewalls (sp3) [Management Strategy – Panorama; Registration; OT Network Segmentation/Traffic filtering; Wildfire Forwarding], Prisma Access ADEM, Strata Cloud Manager, Global Protect, URL Filtering, App-ID / User-ID, Threat Prevention,

Palo Alto DLP

Zero Trust Architecture (ZTA/ZTNA), Cisco UZTNA, Cisco Secure Access (SSE/SASE), Umbrella, NGFW (FTD/FMC), NAC

QA: MacAuth, Outh, Device/User Registration, MFA (Multi Factor Authentication); DRA (Diameter Routing Agent); Airwatch

Nexus 1K/3K/ 5K/6K/7K/9K, Cisco ACI/DCNM, APIC, VxLAN, Multi-Chassis Trunking (MCT), vPC, OTV, LISP, VDC, vPC+, FCoE, Fabricpath, TRILL

Checkpoint Firewalls VSX, R80.20, R75.40 R77.30 Gaia, R75.40 SPLAT, R75 SPLAT and R70 SPLAT; zscalar; MSS SCOPE

IP Multicasting: PIM-SM/DM, PIM bi-dir, PIM SSM, MSDP/MBGP, anycast RP, auto RP, IGMP, IGMP Snooping; DLP; HLS

BGP, EIGRP, OSPF, RIP, HSRP, MPLS, VPLS, FHRP, VRRP, VLAN, VTP, ISIS, PTP, CDP, RSTP, LACP, STP-Portfast, 802.1[q,s,w], 802.ae, ISL, MPBGP, IPv4, IPv6, TCP/IP, SSH, HTTP, PIM, IGMP, Auto-RP, MRIB/MFIB; EVPN; L2VPN, L3VPN, DMVPN, ARP, GARP, GLBP, NAT, VPN (site-to-site, remote access)

WAN-SONET, Broadband, T1, OTDR, PON-OLT/ONT, GPON/XGS-PON, Optical-ONS, 100/400GbE DWDM, Dark Fiber, WAVE, DS3; Okta Azure AD, Azure Blob Storage, GETVPN; HIPAA/HITRUST; WiFi6E/7, Healthcare interoperability, FHIR, TOGAF, LDAP

DAS - Air Magnet, Site Surveys; Cisco Controllers, DOCSIS 3.0, CMTS, eWLC, OTT, Wi-Fi; 5G, Hamina, SAE/EPC Edge Computing; DNA Center; DNA Spaces

Server/Switch Virtualization (VMWare, OVS/OVN, KVM, NSX, Xen), UCS C125/S3260 M5 node, Flexpod, Nexus 1000v, VSG; CBT, SONiC NOS, FaceBook Open Switching System (FBOSS); Bare-metal provisioning: PXE/iPXE, DHCP, DHCPv6, BMC, IPMI, Redfish, iDRAC/iLO

Aruba Clearpass NAC (CPPM, Profiling, Role-based Access), OSS/BSS, customer-premises equipment (CPE), Aruba WLAN, Aruba CX 10000 with Pensando DPUs, Aruba CX 9300/8400, Aruba Fabric Composer, Aruba Central, BER, RSL, SNR, Brocade, Aero hive Access Points; Cisco Meraki; shape security; MDM/UEM, m-DNA/bonjour

VOIP, SIP, H.323, Genesys, Avaya, CUCM, UCCE, UCCH, PCCE, ICM, IPIVR, CVP, CUBE, ACME, CAD, CTIOS, Finesse, VXML, Webview, CUIC, Outbound Option, CCMP, AST/TTS, CIM/WIM, SONUS SBCs, SONUS PSX, ACME/Oracle SBCs

Employed Experience

Network Engineer II, Moffitt Cancer Center, Tampa, FL Full Time

Nov 2020 – Present

Lead Projects Build/Design- HLD/LLD/Deploy include Moffitt Wesley Chapel Campus (MWC) Build, Internet Routers Upgrade TPA3 (Tampa3 Flexential Datacenter), Clinical Service (CSB) Building 5th Floor Network Buildout, MCC Infrastructure Lab Deployment, NSX-V to NSX-T Migration- Openshift VMM, VMWare UAT (User Assurance Testing) System, Mosaic, Raystation IDRAC Network Design, Epic Systems – EMR/EHR; Meraki Replacement MX450_MX75, Moffitt South Shore (MSS) Network Build, Moffitt Speros: Visioning Center (VC), MAC (Moffitt Ambulatory Center), PROTON therapy Network Build, Infoblox design/DDI/IPAM, Enterprise Load Balancer migration to F5, AWS Direct Connect Implementation using Megaport Virtual Edge (MVE) using Hosted/Hosted VIFs – Private/Public/Transit VIFs, Megaport Cloud Router (MCR) on Megaport SDN and Virtual Cross Connect (VXC), Gene Engineering, Mobile Lung Bus Integration; Cradlepoint, Moffitt McKinley Hospital (MMH) – Plan, design, Build; Troubleshooting Patient room TV using Mobile Device Management (MDM) Bonjour mDNS AI parallel filesystems (WEKA, Lustre, GPFS, VAST, DDN), GPUDirect Storage, NVMe-oF and NFS-over-RDMA, and sizing for data loader read, checkpoint burst write, and artifact serving – NVIDIA XID, NVIDIA AI infrastructure, NVIDIA Base Command Manager, NVDIA MGX BlueField DPU, DGX & Spectrum-X using Claude code via Ollama/vLLM / GPU Compute Cluster, SLAs/SLIs/SLOs, NIC Tuning, High Computing (HPC) - functional modeling of the Telemetry/Profiler subsystem for NVIDIA's next-generation GPUs – SONiC (Infiband Mellanox Platform - NDR/XDR and high-performance Ethernet fabrics — subnet management and UFM, adaptive routing, congestion control, SHARP offload), Architecture Review Board (ARB), Managing and upgrading Opengear Console server, Moffitt Leaf-Spine/ACI Deployment- Cisco Nexus Dashboard import of leaf/spine/OOB switches Deployment of Nexus Dashboard, Build, configuring and validating BGP Route Leaking, VRF, route-maps, prefix-lists, peer-groups on SONiC (Software for Open Networking in the Cloud) based switches architecture including CONFIG_DB, STATE_DB, APPL_DB, Redis, FRR using CLI, sonic-db-cli, FRR, gNMI clients (gnmic, gnmi-gateway); SONiC ((new features implementation, porting and integration with proprietary SAI/SDK) development on data center Key Performance Indicators (KPIs) for switches across Broadcom and Marvell- building reusable automation frameworks. Root Cause Analysis (RCA) and developed Method of Procedure (MOP) documentation for Ciena Layer 2 and Layer 3 Ethernet/MPLS networks, enhancing operational efficiency including MCP, 6500, 8700, and 39xx/51xx platforms running SAOS 6.x, 8.x, and 10.x. Ciena Blue Planet MDSO/NFVO, Blue Planet Inventory BPI.

Breast Imaging Replacement/Visage support, Suki Digital Scribe 3.0 support, ID Badge Software Replacement Support, OT Network Segmentation – Prima Access ADEM/Palo PA3410, PA5550, Perimeter PA DR5450/PA3220; Global Protect; SonicWall TZ670 set up and deployment. Creating Service Now Changes and updating DNS in CMDB; ISR 1000/4000; Catalyst Edge 8300/8500 - SDWAN (Viptela/Meraki/Versa/Velocloud/Juniper MIST/Contrail WAN) Implementation, Asset Discovery, cooling, validate KPIs and update using Sunbird DCIM software 9.3.x. Facilitated Zscaler(ZIA/ZTB/ZPA/ZDS/SIPA)-to-Cisco Secure Access (SIA) migration and mapping 80,000 users, designing and onboarding applications behind the ZTNA framework (Zero Trust Architectture); Ekahau Site Survey/Design, ISE-TrustSec(CTS)/ Secure Workload (CSW)Security Group Tags (SGTs)/Cisco Prime/DNA Spaces/DNA Center Upgrade/Design. Tier 3 escalation support for Day-2 operations. Migration from Aruba AirWave to Aruba Central cloud architecture.

wireless fabric deployment and support in SD-Access supporting Over-The-Top(OTT) Centralized Wireless and Fully Integrated Fabric Enabled Wireless

Cisco Thousand Eyes for Endpoint Management) including alerting, integrations, and dashboards, approach to alert fatigue, integrations that need to work reliably under pressure, and dashboards that support real-time decision-making, shipped ML-driven alerting to 900+ production organizations, reducing alert noise by 77% while supporting customer retention. Also lead our dashboards platform strategy and build LLM-assisted tooling for alert analysis, with the goal of helping teams spend less time fighting the UI and more time reducing MTTR. Supported ThousandEyes deployment and adoption projects within Professional Services, from rollout planning through operational handover and value realization. Translated requirements into implementation plans for agent deployment, test strategy, dashboards, alert policies, success criteria, validation, and knowledge transfer. Measured network, internet, cloud, and application performance using synthetic monitoring, path visualization, alerting, and operational best practices. Troubleshooted deployment blockers and performance issues involving latency, packet loss, routing changes, DNS Security/HTTP failures, and application degradation; document findings and recommendations.

Develop CLI and other NBIs (REST, SNMP, GNMI, Netconf) on the Ciena Waveserver 5 platform. Enhance existing software, create new features, and support new hardware introduction for rapid time to market. Participate in all stages of software development following an Agile process and CI/CD environment. Field support, help investigate and collect information to resolve performance or design issues in designs.

Provide Tier 3, L1/L2 escalation support Security Patching, Large-Scale Production Network Upgrades, complex network and data center challenges, using packet capture analysis (Wireshark) for root-cause isolation, and proactively monitor performance to mitigate bottlenecks.

Senior Network Architect – Data Center Migration M&A, Presidio/Earthlink, Atlanta, GA

Apr 2019 – Nov 2020

Managed Network Services (MNS/MSP) include Facilitating migration from the existing legacy Earthlink location in downtown 1439 Atlanta to a new colocation space in the ATL Midtown QTS location that will support connectivity to Earthlink’s SaaS/provider services, new subnets and VLANs assigned from 10.0.0.0/8 subnetting overlay. This is the second phase of the project, which consists of the actual migration of up to 500 hosts from the legacy DC location to the new colocation DC location (DC1). PCON's for VI collection 10gig, 1gig SPANs was set up; Virtual Wisdom Database collection, upload to Virtual Instrument’s FTP and Final validation of VDS port settings was completed. Used Azure Object Storage Backup for Virtualized workloads VM migration (Change Block Tracking)/Disaster Recovery planning for the audio and web platforms including several geographic co-location facilities.

Key Accomplishments include installing 10G link QTS metro service providers with Zayo via Storage Compute Hosts; SOP/MOP-setting up Hammond tunnel for connectivity between 1439 data center, Paymentech and Hammond Office; Outworx VPN – setting up pair of dedicated Virtual Routing/Forwarding instance (VRF) for controlling access between Earthlink’s SITEL call center including Bogota – VPN GRE/IPsec and B2B service providers; stack the HQ-9200. Equipment to be used will be Cisco NEXUS 93240YC-FX2 – vPC/VDC/MCT and ASR involves both eBGP and iBGP (QTS-ASR1001X) OT segmenting existing ARIN 24.49.64.0/19 along with Strata Cloud Manager(SCM), Palo Alto DLP, Prisma Access ADEM/PAN-OS (GUI & CLI) Palo Alto PA5250/820 HA pair deployment [Best Practice for secure Administrative Access, HA deployment; Enabling User Identification, SSL Decryption, URL Filtering; Threat Prevention]; interconnecting QTS via IPsec VPN. Completing Security Efficacy Rating (SER) for datacenter connection failover. Installed Cisco 3504 WLC, 3802 WAP

Responsible for High Level Network Design (Physical/Logical), Signed Testing Documentation, following NIST/CIS/ ISO 27001 guidelines Final Rack Layout/elevation diagram, AS-Built Documentation including Technical escalation, security risk assessments/Risk Dependencies, Project Oversight, ownership of final deliverables of Phase 1 HQ deployment. Implementing migration from Cisco Nexus 7K/5K to Cisco ACI (Network /ACI mode) Fabric (Aka Cisco SDN solution for Datacenter) HCI (Hyperconverged infrastructure) NERC for new colocation data center networks with Cisco Nexus 9K and APIC controllers. The related equipment includes NetApp, Cisco UCS, Netscaler, Gigamon, ACD Peripheral such as Nortel Symposium ACD Systems and Nortel PBX, BlueCoat, Palo Alto and ForeScout Counter ACT 2k/10k appliances.

Conceptualized planning for future mapping/migration of data center from on prem to cloud AWS/Azure/GCP; Azure via IPv6 express route, NSG’s, Azure Load Balancer, Azure Monitor, Network Watcher, connections, gateways, vnets, subnets, UDR, Resource Groups. GCP- Cloud Routers, Google Access for IPv6, Cloud NAT64, Interconnect, VPC Flow Logs. AWS: VPC IPv6 addressing, Internet/multi-AZTransit Gateway(TGW), VGW, NGW, Direct Connect, Route 53

Setting strategic direction for Cisco IT for Tetration Analytics and end-host enforcement within ACI. Lead POC for process and procedures for operationtionalization of Tetration Analytics for Earthlink IT. Used NSM Tools: PRTG, SNMPc, Splunk, Firemon, AlgoSec

Installations of Inventories: SNTC-24X7X4 Catalyst 9200 48-port PoE + Network Esse, C9200 Cisco DNA Essentials 48-Port 5 Year Term License. Creating Application profile, APIC installation via UCS console access, Fabric initialization and maintenance. Designing ACI logical model which includes Tenant, VRF, Bridge Domain(BD), End Point Group (EPG), L3Out installing EVPN-VXLAN Tunnel Endpoint (VTEPs), Fabric Forwarding. ACI hypervisor integration VMware VDS, OpenStack OpFlex, Application Virtual Switch.

Installing Pair of F5 BIGIP i7800 20Gig Management replicating A10 load balancers at 1439; Cisco Identity Service Engine (Catalyst and SDA wired/ISE) with TACACS with Access Control List (ACL) securing access to network devices and integrating with Lightweight Directory Access Protocol (LDAP) Microsoft AD Red Forest using RADIUS/Infoblox/Cloudflare/ Cloud DNS – DHCP/DNS/IPAM to provide IP Address Management (IPAM), LiveNX (Live Action) for NetFlow monitoring and reporting, Solarwinds Orion Group v3 auth read OrionView for syslog/SNMP-server working in parallel with Earthlink’s Zabbix monitoring solution; Global Protect PA820 replacing Pulse VPN associated call center routers – CTR01.

Nutanix Hardware cluster PHX-POC179, PHX-POC183 IPMI, CVM (3 tier backup), AHV Hypervisor is installed in 10Gig TOR switches having Prism Element/ Prism Central applications supporting DIR Network Resiliency, DNS, User Management, Data Encryption. Resolving cyber security issues like SQL injection, Cross-site Scripting (XSS), Buffer Overflow Attack, cookie poisoning, web scraping, jumbo packets, Public Key Infrastructure (PKI) and Certificate Management.

Resolved tickets using Earthlink’s Service Disk Desk Plus/Windstream Jira-IPM/BMC Remedy ITSM.

Diagnosed network and application issues using ThousandEyes telemetry, path visualization, protocol data, Wireshark, Linux, and customer-provided evidence. Investigated BGP, OSPF, TCP/IP, DNS, HTTP, packet loss, latency, routing anomalies, connectivity, and availability issues across internet, cloud, and enterprise networks. Helped with RCA for ServiceNow incidents P1/P2 and escalations; participated in 24/7 on-call rotations under tight SLAs and improved resolution time by 30%. Turned support cases into proactive recommendations for monitoring coverage, dashboards, alerts, and operational visibility; maintained CSAT above 95%. Delivered post-sales technical support for Cisco ThousandEyes across global enterprise customer environments. ThousandEyes monitoring and Cyber Vision integration and DNA Spaces analytics

Global Network Architect & Engineering -Frito Lay Data Center, Tech Mahindra/PepsiCo, Plano, TX

Aug 2018- Apr 2019

Managed Network Services (MNS/MSP) for PepsiCo Network (WAN/LAN/WLAN/DC/NSN) Install, Planning and Design. Working closely with suppliers such as Cisco, BT (British Telecom) and HCL Technologies to develop network standards for the business needs, Blueprints-SOP/MOP, POC, etc. Also with PM's and Service Delivery team as the Technical lead to deploy new projects and consultation. Enable new technologies: ISR 1000/4000; Catalyst Edge 8300/8500 SDWAN (Viptela/Meraki/ Juniper MIST/Contrail WAN), DMVPN, Equinix Cloud Exchange, Internet Exchange, MAN circuits and Data Center (DC) refresh.Problem Management Process with British Telecom (BT) Global Services for Network and HCL Technologies for Data Center in US&C (USA, Canada) and LATAM (Mexico, Central America, Colombia, Ecuador, Peru, Venezuela, Brazil, Argentina, Uruguay, Chile).

Responsible for all aspects of cloud architecture project management, security and strategy for evolving and mobilizing Openstack and public cloud platforms. Responsible for planning phases of SDWAN implementation for major carrier and defining detailed tests for security, routing, WAN Optimization, SDWAN, etc. virtual network function validation and service chain orchestration for commercial offer to key market segments Responsible/led Openstack Implementations and AWS migrations using VPN/transit gateways and organized daily operations performance dashboards SLAs/SLIs/SLOs, NIC Tuning, Openstack Service Developments e.g. Orchestration, and Cyber-Analytics. Planning and modernizing devops Git-CI/CD workflow automation using puppet, Chef, Jenkins Pipeline, GitHub; re application software, micro-architectures and infrastructure as code (IAC) process automation projects

Validation of root cause analysis (RCA). Elaboration of network improvement engineering documents. Network change implementation supervision. Working on F5 refresh – LTM/GTM cutover for global data centers in London, Frankfurt, Singapore.

Configuration, troubleshooting & Validation of Arista 7050SX2 WAN edge [Cloud Vision Configuration, Data Center Interconnection with EVPN-VXLAN and maintained Arista Validated Designs (AVD) writing the Python data schemas and Jinja2 templates used by enterprise team, Deploying BGP in UCN L3 designs, Zero Touch Provisioning (ZTP), Collapsed Core capability (combining the edge routing & distribution roles into a single platform in mixed gold/bronze and bronze+ metallic), Link Aggegation Control Protocol (LACP), STP validation, 802.1[q,s,w], 802.ae, ISL, MAC Authentication Bypass (MAB), MLAG Functionality, Failover of routers in two-provider design], ; ACI in Plano Data Center. Managing the inventories of global data centers.

10+ Cisco-to-Arista DC Migration/Mapping: Solo developer of a Python migration engine using TTP; normalized syntax across 10+ Cisco platforms, validated data across paired MLAG switches, MAC Authentication Bypass (MAB), and auto-generated AVD models so the customer migrated remaining DCs independently.

AVD Core Developer: Spent 1+ year writing Python data schemas, Jinja2 template engines, and Ansible-CVP modules for open-source Arista Validated Designs (AVD).

Design, configuration of Mojo Access Point, Aruba Clear Pass, Airwave; Aruba Central; Cisco Policy Suite PCRF in Parkwood Office, Waco, TX. Managing device inventories of global data centers. Approving BT Low Level, Designs (LLD), High Level Designs (HLD), Bill of Materials (BOM).

Using Solar Winds for troubleshooting Meraki MR74, MX 64, MS250, Maws50.

Network Architect - VIPER (Video over IP Engineering & Research) Ops, Comcast, Philadelphia PA Aug 2017 – Aug 2018

Managed Network Services (MNS/MSP) including Operational support of Data Center and CRAN (Converged Regional Area Network) [comprising of Cisco7609, and CRS routers] services nationwide that interconnects with the IP video software stacks. The VIPER (Video over IP Engineering & Research) Ops is focused on REDI (Rapidly Deployed Elastic Infrastructure) based deployments for a resilient and scalable infrastructure. It is based on Linux Containers for virtualization OVS/OVN, KVM, NSX, Xen with VMware [Standard ESX/ESXi host and distributed vDS/vSS]; Citrix or Microsoft of linear TV applications such as MPEG2 to MPEG4 transcoders, linear packagers for fragmentation of linear stream and conversion from .mpd to .m3u8 format for HLS based delivery format via IPCDN (Content Delivery Network), CDS-IS and EDU design.

Implement Helion Openstack solutions that integrated with their SDN/Network Function Virtualization roadmaps and implementations. Work with internal architecture and engineering teams, interacting with the Openstack community to deliver and evolve innovative customer solutions

Day-to-day duties include capacity management for infrastructure KPI and All Digital Simulcast Deployment for Insight merger in MSO environment which, is based on both VMware (OVS/OVN, KVM, NSX, Xen) Amazon EKS and Kubernetes/Docker architecture which entails L3 network, CDN, application layer while implementing dev-ops model for superior team performance and delivering the product meeting sales and financial requirements of the company. Day to day roles also include attending SCRUM meetings twice a day to go over outstanding issues with deployments and working with PMO and engineering teams to resolve them in a timely manner and collaborating with different engineering teams and vendors such as RGB Networks, Cisco, Motorola and Envivio and Resolving tickets using SNOW (Service Now)/IOP.

Preparing Splunk Dashboard for National Data Centers (Ashburn, Northlake, Hillsboro), SOP/MOP to trace BGP flap/Link ISIS, Link Shutdown. Designing Visio/NET Atlas for Regional/National Cloud TV Network Infrastructure/ Linear-RIO/ I-Bone – Water Mark Network Peering Points / CRAN backbone Infrastructure (C-Bone), Dynamic Ad Insertion (DAI) for Comcast using Weather Map, Spectrum – CDVR Global Collections; as well for customers like Rogers, Vidéotron, Shaw, Cox.

Troubleshooting E2E issues in broadband devices in various RDK broadband components like WiFi/Mesh, DOCSIS, Fiber, LTE and VBN (Video Beta Network) multicast join issues having Cisco/Arris recorder used for video streaming, Switch Digital Video (SDV), ASM, TLS,WAF, SSM multicast design, VOD architecture used for propagating assets/content and content delivery.

Preparing dashboard of interfaces of Regional/National Cloud TV/SDWAN(versa/ Juniper MIST WAN) Network Infrastructure using excel, NSG (Network Static Grapher) using Python Script, Ansible playbook, Shell/ PowerShell. Implement multiple technologies including MPLS, VPLS, L3VPN, BGP, OSPF, ISIS, TCP/IP, IPv4, IPv6, Multicast, SSH, HTTP, QOS, and L2VPN. Upgrade CRS-1 router with new releases using upgrade process. Maintain and own Juniper, Cisco 7600, CRS-1 8, CRS-1 16, NCS6000/5500, ASR 9000/1000 routers along with the inventory of its ports. Creating Irules/ Configuring High-Availability/ Big-IP failover, VIPs on F5 loadbalancers, Sonus SBC 1000, Sonus Tenor Gateway, Polycom Phone (CX, VVX, ...), SONUS ASX, PSX, Genband.

Worked as a senior technical incident manager P1/P2 implementing ITIL management practices in Production Support to improve quality assurance and implementing best practices for Comcast cloud TV including cDVR, cVOD, and cloud based linear video. Day to day roles include working with different Operations teams including Applications and Systems on regional service outages and new deployments. Other roles include updating knowledge base as the product becomes mature and stable within different regions.

Updating wiki with technical specs and troubleshooting methodologies for NOC and customer support. Also providing support to legacy CDN network while providing support to field operations in migrating the services to cloud based centralized design. Design and deployed infrastructure for DOCSIS 3.0, which estimated a budget of $6.5 million in Chicago and Indiana market that entails redesign of CRAN and augmentation of additional routers and bandwidth capacity calculation with the help of Cariden Network Modeling tool based on higher tier of internet access packages. Worked on Salt Lake City Fixed Wireless / MetroE (Metro Ethernet) network deployment based on Comcast and MEF standards (MEF 9, MEF 14 & MEF 19).

Took active role in testing using MEF certification standards on Next Generation CRAN for commercial customers which is based on Cisco CRS-8 platform. Worked with the field and commercial engineering group in initial design, deployment and testing of EDIA (Ethernet Dedicated Internet Access) service and launch of friendly customer.

Also took active part in Denver Next Gen CRAN deployment based on Juniper MX960s. This design was based on Juniper’s implementation of RSVP-TE Label Distribution. In addition, worked with Comcast Commercial engineering team to tie up Sprint High-Cap network with Comcast CRAN in Chicago and Indiana for Sprint’s Cell Backhaul transit traffic. This project was part of Sprint’s Videocast for cell network. Project also involved MPLS/ PWE3 traffic engineering to meet the customer SLAs.

Work hands on splicing, terminating, testing, and troubleshooting fiber optic cabling. Daily responsibilities include: administrative tasks and paperwork such as production sheets, reports, pictures, weekly splicer checks, vehicle and miscellaneous equipment checks and reports.

Network Architect – Operational Certification & Advanced Technical Support, IP/MPLS Network Edge AT&T Middletown, NJ Aug 2016 – Aug 2017

Working with AT&T Global network services/ Managed Network Services (MNS) (AVPN, SDWAN (Viptela/Meraki/Versa/Velocloud/ Juniper MIST WAN) - ISR 1000/4000; Catalyst Edge 8300/8500 /iWAN, DMVPN, ETSI-NFV, ANIRA, MSS, Managed Firewalls, Hosting). Working with ECOMP (Enhanced Control, Orchestration, Management & Policy)/Automation for network security ACL Network Security Audits.

Job Responsibility include: System Protocol and Performance Testing SLAs/SLIs/SLOs, NIC Tuning, Network Perimeter Security, Router Platform Security, DDOS Defense, Lawful Intercept, NG-MVPN, Tier 4 Support, Scripting (Perl, C, TCL, Python, Ansible Playbook, Shell/ PowerShell Scripting). Built Esinet network that provide redundant network path using MPLS for the PSAP sites which has great volume of E911 call/ALI (Automatic Location Identification) services using juniper device.

Hardware/Software certification and Regression Testing providing Network Security Change for large scale LAN/WAN Edge, Core [AGN (At&t Global Client), CBB (Common Backbone Network), SBC (Southwestern Bell Corp.); Cloud Virtualization OVS/OVN - Docker, Mobility, BellSouth), Cisco / Juniper Networks Rollout, deployment, implementation.

Security changes projects involving Domain 2.0 Initiatives within AT&T's GMIS (Gateway Managed Internet Service)/ ADIG (AT&T Dedicated Internet Global) service 3.0.2/ AT&T Dedicated Internet on Demand (ADIoD) 2.5 vPE (Virtual Provider Edge) with Global Network on AT&T Integrated Cloud (AIC) supporting 10Gb, 40Gb, 100Gb, Nx100Gb service.

Worked with Juniper (M320, T640)routers, QFX 5120/5130 switches, PTX/ACX for DCI, Cisco (12000 series router, 3650, 4500, 6500 catalyst switch, 7200 vxr series router), Arista [7000/7060/7280SE-64 switch, 7060 series 1RU (Gen3), 7260 2RU FRU], ASR 1000/9000/5000 NCS6000/NCS5500/CRS, Ciena 5150, 5160, 6500 – DWDM,OTN using Cisco NCS 500/1000, Ciena Blue Planet MDSO/NFVO, Blue Planet Inventory BPI which involves troubleshooting and verifying test cases for OSPF, E/I BGP, TCP/IP, LDP, ISIS, vPE/VLAN, security cases, QOS, L2VPN features with IXIA/Spirent tool, NIC Tuning.

Lead network automation and software engineering across open-source AVD development and enterprise customer data centers

Network Architect, Scarlet Wireless, Atlanta, GA Mar 2016 – July 2016

Configuring Cisco ASA, Palo Alto 7050 chassis, Cisco 7600, 7200, 3800, 3600, 2900, 2800, 2600, ASR 1000/9000/5000 NCS6000/NCS5500/CRS, 12K routers, Arista 7060/7260R/7280X, Nexus 1K/3K/ 5K/6K/7K/9K, 2950, 3500, 5000, 6500, 4500 switches, Juniper M120, 320, MX480, 960 routers, EX4550, 4300, 4200-VCT, 3300 series switches. Configured EVPN-VXLAN, vPC, OTV, VDC, vPC+, FCoE, Fabricpath, TRILL, ACI, DNA, ENCS, MSX – 9300 TOR leaf, 9504/8/16 modular spine switches, APIC controller support for virtualized and cloud deployments with Docker, VMware [Standard ESX/ESXi host and distributed vDS/vSS], Citrix or

Contact this candidate