Senior Network Engineer

dzcrd Network Ltd

Biography

I am a conference hopper, repeat offender, FreeBSD developer(ports), FreeBSD Core Team Secretary, FreeBSD advocate and for my bread and butter I work as a network engineer on large scale infrastructures. Sometimes I also work on interesting gigs related to a mixture of network, routing and systems or automation.

Besides that I also work as a Community Trainer for APNIC delivering training on different topics specifically but not limited to Routing on IPv4/IPv6, Network & System Administration, DNS, Security, MPLS. I have also conducted training in different NOGs like bdNOG, SANOG, APRICOT, ISOC on same subject matter. Also contributed as Programme Committe and Executive Committee member of bdNOG, SANOG, APRICOT.

Interests
  • Secure Network Infrastructure
  • Cloud Infrastructure
  • DevOPS/NetOPS/SecOPS
Education
  • BSc in Computer Science, 2006

    American International University - Bangladesh

Skills

Cloud Infrastructure

90%

FreeBSD Administration and Development

90%

Linux System Administration

80%

IPv4 and IPv6 Routing

90%

AWS

90%

Database Administration

90%

git

10%

Python

10%

php

10%

Experience

 
 
 
 
 
Senior Network Engineer
Feb 2016 – Present Dhaka, Bangladesh/Dubai, UAE

Responsibilities include:

  • Provide design, deployment and support service to clients for large scale critical network and cloud infrastructure
  • Migration assistance towards cloud based infrastructure like AWS or Rackspace
  • Design and Deployment of large scale Government Infrastructure
 
 
 
 
 
Head of Core Network
Nov 2012 – Jan 2016 Dhaka, Bangladesh
  • Managing and maintaining the core IP network(Consisting of high end Cisco 12000 and ASR-9000 Routers running both Cisco IOS and IOS XR) and server systems of an ITC(International Terrestrial Cable) serving around 120 GBPS of Internet Traffic from around the world(PoPs in Singapore, London and NewYork) to the clients
  • MPLS with VRF-LITE, PE-CE Routing with OSPF, Career Supporting Career using MP-BGP, MPLS AToM, MPLS TE for optimizing Backbone Traffic;
  • QOS in Network using Policing, Shaping, CBWFQ, NBAR;
  • Monitor overall Network Equipments and Server Farm for load capacity and plan for further expansion.
  • Monitor the AAA system and its policy to maintain devices currently running in the network for connecting the clients.
  • Plan and ensure proper usage of IP addressing following APNIC Guideline. Distribute IP address scheme for using in International Environment making the proper usage of IPv4 and IPv6 addressing without any wastage.
  • Ensure that each and every change in the network is made according to the Corporate Change Management Policy.
  • Maintain strict liaison with the Documentation officer so that each and every change in the network is well documented. The Documentation Team is also responsible for managing all the training materials developed by me and my team.
  • Plan, coordinate and deploy connectivity with top tier service provider for provisioning IP Transit, IPLC, Global MPLS for the clients.
  • Working experience and expertise in
  • Hardware: Cisco 7600, 12000 series routers in both IOS and IOS-XR environment; Metroethernet 4900 series switches.
  • Software: Netflow, Cacti, Centreon, for monitoring network and server health; RANCID for configuration change management; TACACS for AAA; Scripting using PERL and Expect; FreeBSD and CentOS as the Core Operating System for the Services; irrtoolset for auto provisioning of clients BGP configuration.
  • Infrastructure: Complex Routing Architecture for peering clients; Manage the MPLS based network.
 
 
 
 
 
Senior Engineer - Network & Systems/Engineer - Network & Systems
Nov 2007 – Oct 2012 Dhaka, Bangladesh
  • Design new templates for the configuration part of the devices for both CPE and PE devices according to the specified requirements from the client and reflecting current network architecture of the company. This includes, but not limited to, the following technology:
  • Loop Avoidance and Load Balancing using RSTP, MSTP; Backbone Capacity increment and Load Balancing using Etherchannel or LACP or PAGP, Private/Public VLAN, QinQ, Layer 2 Tunneling Protocol for use in Service Provider Scenario.
  • RIP, EIGRP, OSPF, BGP for routing in both Service Provider Scenario and Client End Scenario;
  • MPLS with VRF-LITE, PE-CE Routing with RIP/OSPF, Career Supporting Career using MP-BGP VPNv4, MPLS AToM, MPLS TE for optimizing Backbone Traffic;
  • QOS in both L2 Network and L3 Network using Policing/Shaping at L2 level while using Policing, Shaping, CBWFQ, NBAR in Layer3;
  • Design and modify NMS to meet the new requirements of clients.
  • Monitor the AAA system and its policy to maintain almost 150 devices currently running in the network for connecting the clients.
  • Ensure that each and every change in the network is made according to the Corporate Change Management Policy.
  • Regularly monitor, analyze and mitigate network based attacks using various open source tools.
  • Working experience and expertise in
  • Hardware: Cisco 7200, 7500, 12000 series routers; Metroethernet 2400 and 3400 series switches.
  • Software: Netflow, Nagios, Cacti, Centreon, for monitoring network and server health; Xen and Vmware for virtualization and Server Consolidation; RANCID for configuration change management; TACACS, FreeRADIUS for AAA; MySQL for Database and Database Clustering; Scripting using PERL and Expect; FreeBSD, NETBSD and Debian as the Core Operating System for the Services.
  • Infrastructure: Complex Routing Architecture for peering clients; Manage the MPLS based network
 
 
 
 
 
Engineer - Network & Systems
Sep 2006 – Oct 2007 Dhaka, Bangladesh
  • Maintaining a functional network throughout the head office, other branch offices and other sister organizations.
  • Maintaining the network devices specially the Cisco Routers, Cisco Switches, PIX firewalls, ASA devices, VPN termination points, access points and terminals connecting the branch offices.
  • Ensuring proper access control and admission control throughout the office.
  • Performing regular maintenance of the UNIX and Windows servers through out the network which are providing different services to different parts of the network, including but not limited to mail service, DNS service, gateway service, CVS service, file and print sharing etc.
  • Providing the client-base with consultation on result based software deployment.
  • Assisting the client base on setting up and managing the network and servers for the smooth functionality of the software that we developed along with their other tasks.
  • Assess IT requirements and make necessary recommendation for future expansion of both in house and other client-base.
  • Visualize probable growth in terms of IT and recommend appropriate steps for effectively addressing the same.
 
 
 
 
 
Intern - ICT
May 2006 – Aug 2006 Dhaka, Bangladesh
  • Primary task is to do an analysis of Information Security at UNFPA Bangladesh Office.
  • Based on the analysis, will have to produce a report detailing analysis of existing network and practices, analysis of any flaw in information security if found and suggestions for improving the present situation and practices.
  • Assist the NPA – IT in providing ICT support to the UNFPA Bangladesh Office Staff Members.
  • Assist the NPA – IT in performing regular maintenance of the UNIX systems at UNFPA Bangladesh Office.
  • Develop a web based User Information Management System for the UNFPA Bangladesh Office.
  • Deployed the Advanced Security in the Field exam in a web based environment for ease of use. see less

Workshops Conducted

IXP Deployment
Network Security
Network Security
Network Security
Network Security
DevOps 101 for Network Engineers
FreeBSD PortsCamp 2
This workshop was conducted with Martin Wilke
IPv4/IPv6 Routing
MPLS Deployment
Linux Admin & Network Management

Accomplishments

APNIC IPv6 Hackathon 2019
We tried to create n application to find out unused IP resources. More details are available in the blog post
APNIC IPv6 Hackathon 2018
We tried to create a game based on IPv6 similar to Pokemon but with the title Poke Prefix. More details are available in the blog post