AHMAD FARAZ

Developed and managed comprehensive security policies and firewall rules on FortiGate platforms, strengthening network perimeter defense and compliance.

Engineered and deployed SSL VPN and IPsec VPN tunnels, establishing secure remote access and site-to-site connectivity for critical business operations.

Implemented SD-WAN solutions, optimizing WAN performance and application availability across the enterprise network.

Configured High Availability (HA) clusters, achieving seamless business continuity and failover support for critical network services.

Deployed DDoS mitigation strategies, effectively defending against ICMP, UDP flood, and other anomalous attacks to maintain service uptime.

Leveraged FortiAnalyzer and SIEM tools for continuous network traffic and security event monitoring, proactively identifying and mitigating threats.

Executed critical firmware upgrades, patch management, and firewall hardening procedures, reducing vulnerabilities and enhancing system resilience.

Analyzed FortiAnalyzer logs and performed packet captures to diagnose and resolve complex traffic drop issues, restoring critical network services.

Diagnosed and resolved complex network incidents across multiple ISP WAN environments, troubleshooting OSPF, BGP, MPLS, and enterprise routing infrastructure to ensure high network availability and service continuity.

Strengthened network security by continuously monitoring logs, identifying anomalous network behavior, investigating security events, and implementing proactive measures.

Collaborated with cross-functional teams, including Network Operations, Security, and Service Providers, to design, implement, and optimize secure, scalable, and highly available network solutions.

Developed and maintained detailed Method of Procedure (MOP) and Standard Operating Procedure (SOP) documentation, ensuring standardized execution of network maintenance activities with minimal risk.

Provided L2/L3 troubleshooting and ensured network uptime in production environments, resolving critical issues to minimize downtime.

Implemented site-to-site and remote access VPNs using IPSec and SSL VPN, securing sensitive data transmission.

Troubleshot and maintained routing protocols, including OSPFv3 and IS-IS, optimizing network performance by adjusting metrics for traffic normalization.

Configured and supported MPLS technologies, such as VRF on Cisco and Nokia routers, enhancing network segmentation and traffic management.

Troubleshot and resolved network issues on LnT, Tejas, UTL multilayer network devices, ensuring seamless end-user connectivity.

Generated SLA reports and monitored incident and fault management using C.DOT BharetNet NMS tool, improving operational efficiency.

Configured Cisco Catalyst 9300 12 switches and ports in VLANs, implementing port security to manage unauthorized network access.

Upgraded software for G PON OLTs from vendors like Tejas ITI using LCT, enhancing device performance and stability.

Implemented VLAN and tagging on SNI ports, optimizing network segmentation and traffic isolation for end-user connectivity.

Provided L1 support for internet issues, including MAC flapping and CRC errors, ensuring prompt resolution and service restoration.

Monitored core Huawei routers running MPLS for link flaps, high traffic, and optical power levels, proactively identifying and mitigating potential outages.

Engaged with customers and stakeholders to explain patching and upgrade requirements, ensuring smooth implementation with minimal disruption.

Configured static IP addresses for customers from IPACCT and HR8 servers, facilitating reliable network access.

Conducted port forwarding for FTP servers, enabling secure and efficient data transfer.

Utilized Observium tools for node monitoring, maintaining continuous oversight of network health and performance.