Consultant at " Technology and Infrastructure " department "Cargille Project " Design and Implementation : -Data Center and Remote Office Project : - V-Stack, M-LAG, Eth-trunk(Port-channel) - VxLAN, OSPF, iBGP,eBGP, BGP/evpn - SD-WAN - Checkpoint SMS - WLAN Infrastructure - Site2Site VPN, RAVPN -Organization of communication channels between Data Centers (dark fiber) " Deutsche Bank Project" - VxLAN, OSPF, iBGP,eBGP, BGP/evpn - VRF - Checkpoint SMS - WLAN Infrastructure - M-LAG, macsec Security Equipment: - Switches : Huawei S6730, S5735 - Firewall /SD-WAN : Checkpoint GAIA 6400,6900,1590 - WLAN : Huawei AirEngine 9700 M

- Responsible of Network Infrastructure - Network Architecture - Internal Support - Configuration, maintainance and upgrade of corporate customer’s networks, Routers,switches,Firewall - Optimization of LAN/WAN Network Performance - Technical Documentation - Interaction with other Providers : Beeline,Mastertel Equipment : - Switches : Cisco Catalyst 6509-E, Cisco 9300, Cisco 3850, Qtech 4700, Qtech 3310, - Routers : Cisco 3800 Series , Huawei - Firewall : Usergate,Huawei,Paloalto - WLAN : Cisco WLC, Cisco Aironet, Qtech Controller - AAA : Windows NPS, DECH AUTH,EFROS

Main tasks : - Complete rebuilding of the ISP infrastructure according to the regulations of the Russian federation - Planning, operation and development of the ISP network infrastructure - Responsible of Network Infrastructure - Internal Support - Configuration, maintainance and upgrade of corporate customer’s networks, in-house servers, Routers and switches - Optimization of LAN/WAN Network Performance - WAN - BGP Failover - multipoint BGP - Network Security - Cisco ASA, Linux iptables - VPN : IPsec Site2Site(Ikev1,Ikev2) L2TPv3oIPsec L2 dot1-tunnel VPN (qinq) OpenVPN (Linux,Mikrotik) Anyconnect (Cisco) - Network Monitoring - Subscriber Management - High Avalaibility (HSRP,VRRP,GLBP,IPSLA) - AAA ( RADIUS, Tacacs+ ) - Provide Documentation ( Network detailed diagrams ) - Troubleshooting and Incidents - Interaction with other Providers : MTS, Avantel, Beeline - Mikrotik : - bridge , vlan, port bonding - firewall (iptables) - routing - Site to Site OpenVPN - Site to Site L2 VPN (EoIP) - Remote Access VPN L2TP (ppp) - Remote Access VPN Ikev2 rsa,eap.802.1X - Dynamic DNS - WLAN (8021.X), radius, CAPsMAN Equipment : - Switches : Cisco 3524-XL, 3508,3560,WS-6503,5500,2924,2960,2950,2970G,4948,3750,Eltex - Routers : Cisco 3800 Series, ASR1001,BRAS/ISG, Mikrotik Routerboard - Linux : Centos 7, Debian, Ubuntu - WLAN : ,Cisco,Unifi,Ubiquiti, Mikrotik - Monitoring : ZabbiX, Observium, Netflow,SPAN - Billing : Tixen, Carbon 5 - Virtualization : Vmware Esxi

Main Tasks: - Planning, operation and development of the network Infrastructure of a large company(10,000 employees) - Internal Network Support - Network Infrastructure and Data Center maintenance and design - Configuration, maintainance and upgrade of corporate customer’s networks, in-house servers,Routers and switches - Optimization of LAN/WAN Network Performance ( HA and Redundancy, Migration to most recent tecnologies as SD-WAN ) - Layer 2 and Layer 3 Network Support (Etherchannels, Poe,VLAN, VTP,STP,OSPF,EIGRP,eBGP,VRF,PBR) - Stack and Cisco IOS Configuration - Designing of IP addressing scheme - Troubleshooting and Alarms Management - Network Security ( Firewalling, IDS, Threat Detection, Security Contexts ) - Provide Documentation - Configuration and Monitoring of WLAN Infrastructure - WLAN Security ( 802.1X,EAP-TLS,PEAP ) - VPNS : - IPsec Site2Site (IKEv1,IKEv2v2,GRE Routed Based, Policy Based, Hub&Spoke ,DMVPN) - L2TPv3 - MPLS/BGP L3 VPN - MPLS L2 VPN : VPLS LDP Signaling (Martini) VPLS BGP Signaling (Kompella) - Remote Access VPN : Anyconnect (Cisco) - OpenVPN - L2TP - PPTP - Proxy and Access List Management - Quality of Service - Network Virtualization ( VMWare ESX Servers, VirtualBox ) Equipment: - Design : Microsoft Visio - Emulation : GNS3,Cisco Packet Tracer,EVE-NG - Switches : Cisco Catalyst 3750, 3850, 2960,4500, Nexus 5K,FEX - Routers : Cisco 4300 Series, 1900 Series - Firewall : Cisco ASA 5505,5510,5515,5516,5520,5525,5545, - Linux iptables,pfSense, Dansguardian, Daloradius,HAPROXY - WLAN : Cisco WLC 3504,5508, Laps, Cisco Aironet 1130ag, 2600 - Network analysis and monitoring ( - Wireshark,MRTG,PRTG,SNMP ) - KRON,crontab ( Scheduled Tasks ) - Proxy ( McAfee WebGateway, Squid) - DNS : bind9, Windows - Programming : Fundamentals of Python, PHP/MySQL - Software: Microsoft Windows, Linux ( Ubuntu,Centos,Debian,Redhat, ), Microsoft Office ( Outlook,Exchange, Excel,Word, Powerpoint )

- Network Configuration - ADSL Modems configuration ( Dlink. US Robotics, TP-Link, Netgear, Huawei,Sitecom ) - Access Point Configuration - HUB/Switches configuration and mantainence - Network infrastructure cabling - Troubleshooting