• Working on worldwide project as design and implementation architect
• Cisco ENCS 541X, zScaler, ISRv router configuration on several production, and business branch sites
• Developing template for primary and secondary ENCS and attaching them Cisco Vmanage, SDWAN, SD-Lan, Zscaler
• Expert knowledge in the SDWAN technogy

• My duty as as network architect to make sdwan design with network segmentation which will be configured as DTLS /TLS for the sites and IPSec tunnel for transport at the branch site
• Cisco vEdge router configurations in the cloud
• Office 365 running in the cloud is configured as well and vManage configuration with vSmart on the central site.

• I am working in the (on request)  over the Technidata as consultant for Telecom Frankfurt. Working field is to produce design HLD, LLD, IP concept and configuration of the ACI Fabric with 2 POD?s in Frankfurt over the APIC.
• Import of Legacy Data center network in the ACI Fabric. ACI automation, script language ansible used.

• Since August I am working as Network architect on (on request) for the T-System in Leverkusen. My position, I am working on the migration concept for 18 thousand server from the legacy network into the ACI fabric
• HLD and LLD design to change and improve due to TCAM problems
• Later changed by T-System to carve-out project for Lanxess - Arlanxio locations around the world
• Tasks here are developing concepts for implementation in design HLD, LLD configuration. In the concept, I develop the hardware requirements for new sites with core and access layer, as well as design and in accordance with ITIL implementation use
• Cisco SD-WAN Viptela with Umbrella security features introduced in NAFTA and configured, install cloud SD-WAN Fabric at central site and remote site

• Network Design HLD, LLD. Cisco 9000 series equipment
• Implementing Cisco ACI (Software defined network) technology on three data center in Frankfurt
• The design called Leaf and Spine technology with firewall from Palo Alto
• I am installing Cisco VXLAN overlay technology in the data center with IPN router to connect data center to each other, the three data center
• Documentation of the data center project is documented in Confluence. Remote connection from three data center to different customer sites
• Project is stopped by government. Integration of Kubernetes, VMware, containers configured in the ACI infrastructure
• Reintegration of configured server under VMware running in Nexus data center into ACI infrastructure

• Working on enterprise project for Commerzbank to update the Enterprise infrastructure with 3850 SE layer 3 and 3850 TE switches throughout Germany
• For all the branches and in Frankfurt the central site will be updated
• For each branch I have produce the network design, IP planning, configuration of access switch connection with Layer 3 switch and L3 connection to WAN router where MPLS-VPN tunnel configured for many branches
• The protocol used on L3 is OSPF point to point
• Also working with HP SM9, HP IMC and ISE. Citrix server configuration and remote connection from branch offices to central site in Cologne

• Working for the Helaba Bank in Offenbach
• Consultancy service to improve the present infrastructure with new equipment and policies
• Main duties data center concept development update of core, distribution and access layer
• Cisco security equipment ASA 5580

• Main duties LAN/WAN, ASA firewall 5520, WLAN, Radius server, site to site VPN configuration, DMVPN and MPLS router configuration.

At present I am working on cloud solution MS Azure, new design or improving the old design considering different aspect to simplify the design for central and remote locations.

At present I am working on a project and designing two data center in Düsseldorf and Frankfurt according to the laid down standard BSI 27002 instructions. In the data center on both locations Cisco Nexus equipment with FEX 2248 is planned. The data center concept is PU, RU, TU and LU (Production, Release, Test and Labor surrounding) in total 8 times to install in two different location i.e. Düsseldorf and Frankfurt and configured. For the security concept I configured the data center with OOB (out of Band) and IB (In band management) for separation reason. Router 1002 HX as CE router and perimeter switch for the separation of traffic. For the security IDS sensor and Firewall is configured to achieve the security requirements according to ISO 27002 and the Gematik concern situated in Berlin which gives the specification to fulfill the security needs. 

LAN / WAN, MPLS, Cisco Nexus 7010, Nexus 5596, FEX 2248 administration, VPN site2site configuration, MPLS, ASA Firewall and many more. The main job for the customer is to update the present data center for the next generation data center requirements. Indicator of compromise (IOC) identified in a process of incident response using intrusion detection system and antivirus software. Monitoring tools HP security manager. For network monitoring Spectrum. Security policies planned with the management and implemented on the ASA cisco appliances

Working with SAP Data Center main job Network architect, is to update the old data center with Cisco 6500 series equipment with ASA 5585, Router ASR9000, Nexus 7706, with FEX 2248 using Fabric path to overcome with spanning tree protocol limitations. This is a worldwide project. Configuration of VDC, VPC, Port-Channels are configured on Nexus 7706. MPLS solutions are also provided at different sites. All this is carried out with no downtime. My job here is HLD, LLD and the cabling plan for the new equipment and configuration of the equipment in the data center. Static routes and OSPF, AAA, DHCP, MSTP, RSTP+, protocol is used on Cisco 6500, 3750 Switches in the design work. Also monitoring tools like spectrum, ADAM, GMP and so on I am acquainted with. Also worldwide project with Arista switches and Solace for messaging server configured, installed, LLD planned by me. Spectrum, GMP (Global Management Portal) used for IP management, IPAM IP address management and other are used. Cisco IPS and IDS monitoring for security. Network Monitoring over the spectrum and Splunk

Work on the design extended LLD, cabling design for the new Nexus Switch, planned to replace the old running manufacturer switch. Here I came across to configure Enterasys switch. Mostly the Cisco nexus 7009, Cisco Nexus 5000 were configured by me. VDC, VPC, Fabricpath, OTV (Overlay transport Virtualization) protocol layer 2 data center configuration was done by me

My working fields are  F5 Load balancer, Cisco Router and Switch, UMTS router, LTE router, WLAN, Cisco ASA Firewalls, Cisco ASR 1000 series with BNGv6 cluster, Cisco 6509, Cisco 4503 Xseries,VoIP, IPv6, DHCPv6, Cisco IOS/XR configurations with QoS on Cisco Router and Switch as well. Also practical experience in Monitoring the network using tool WhatsUpGold, Spectrum and Nagios software, Cisco ACS server, TACACS and Radius server, for user authentication, authorization and accounting. Network trouble shooting are the fields, where I have use my knowledge. Packet tracer Wireshark is extensively used by me for this project. The protocols used in 5 LAN’s configurations are EIGRP, OSPF and BGP Version 4. Hands on experience in the field of configuration of MPLS VPN PE – CE Router

New installations on Cisco 4503 layer 3 switch, Cisco ASR 1000 series with BNG cluster, with configuration for the network in branch office Düsseldorf along with 8 Cisco 2960 S switch. Remote access configuration for user is also realized. Update of IOS 12-2(55), on Router, switches 2960 G and S type of switch for GFKL concern in Essen. SNMP configuration is done on Core 6509, ACE (Application control Engine), Cisco IOS/XR, IPv6, DHCPv6, BNGv6 and 2960 switch for logging sending to server with address having installation of HP SIM. So that Email can be generated in case of critical messages. Also Nagios for the Monitoring, to find the status of the network is done. Cisco Ironport proxy and checkpoint Firewall is also supported by me. Complete documentation of network with its architect design by me. Protocols used for configuration are EIGRP, OSPF and static routing.

Working currently on 2 Data Centre for German railways in Berlin with HLD, LLD design, installation configuration of 7010 with VDC, 5598 Nexus, 2248 FX Nexus, ACE, ASA 5585 firewalls, Cisco ASR 1000 Series with BNGv6 Clusters configuration with IPv6, DHCPv6, BGP, OSPF, EIGRP, Router 3925 and Switch 3725X, Cisco IOS/XR using for DC Interconnection. Implementation of IPV6 on the Datacenter addresses, protocols. HLD design created along with Cisco and consultations demonstration with Deutsche Bahn before purchasing and implementing it. Static and dynamic Routing is configured on Routers

Work with client. As a Technical advisor in the field of Security for achievement with Cisco equipment by implement different Firewall rules. User secure remote access using any- connect, also installation of certificate, secure data connection in the LAN – WAN. VPN secure connection in WAN area.

This is done by me for the Interroute ISP company situated in Berlin. For the company Interroute, I was working the last 10 Months last year till December as planner project assistance to update the Switching network. Cisco VoIP with Router 3725,7600 series, 7200 series Cisco Voice project, Cisco IOS/XR, IPv6, DHCPv6, Cisco Unified Call Manager installation, CME card and Cisco communication express on PC for VoIP Telephony to carry out.

Project works for various companies in Routing & Switching. Cisco Catalyst 3750 switch, 4500 and Catalyst 6500 with GBIC. Cisco Nexus 5000 and Nexus 7000 switch with 4 copper and 4 Glass fiber ports. Design for LAN / WAN, MPLS High level and low level. Configuration and installation of Cisco equipments like ASA 5500 series equipments with IPS. Configuration of VPN, Implementation of encryption algorithms, use on ASA 5500 series etc. Vlan’s configurations on Cisco Catalyst 3750, 4500, Router 7200, Router 7600 series, Cisco IOS/XR and Cisco Catalyst 6509 and 6513 with Supervisor Engine720. Implementations of F5 on IP base load balancing. Load Balancer on IP basis using F5 Load balancer product. For the F5 project, VLAN, and Switch configuration projects and several others work belonging to the networks

Administrative support, design and implementation in the Cisco environment (project duration in each case <2 months). Mostly for the concern Witte Automotive in Velbert almost 4 months from April till July 2009 and Easynet GmbH almost 3 months from Sept. till Oct. 2009 in Hamburg.  Deep experience in configuration and installation with Cisco ASA, IPS, Switch, router 7600 series, router 7200 series Cisco IOS/XR, IPv6, DHCPv6 equipment implementation

Design architect, File transfer for First Data the biggest concern in the world for the Transaction of VISA file over the Verizon and T-System in Bad Vilbel near Frankfurt making high level design to low level design with detail Documentation information of merchant Dial in router over Verizon to First data network Router, crossbeams firewall, over the OSPF, BGP network to FTP server with lease line connection to AIB (Allied Irish Bank) in Ireland. The low level design and its implementation with appliances like Router 3850, Crossbeam, and ACS server, Cisco 6509, Cisco IOS/XR at the Core layer and at edge layer in the Data Centre at two different locations connected with Glass fibre cable in Frankfurt. This design is for primary and secondary networks of same design at two different locations in Frankfurt using Glass fibre cable to connect the core layer equipments

Network Architect for Tarkett holding GmbH, making a high level design and low level design architect for Europe and the US and later its implementation with internet router, redundant Cisco firewall (ASA 5540), Microsoft proxy server, LAN router and switches, configuring VPN with Hub and Spoke Technology, LAN-to-LAN connections, (L2TP) etc. Also I did configuration and installations of Routers and Switch with Huawei equipments. Also deal with Juniper switch and Router in the available infrastructure in the company

My job in the company, going to Customer with Pre Sales people finding out their exact needs, working out the appropriate solutions. The next step is usually the demonstration of my solution for them. My key fields are, where I am intensively working is the design of network especially for Data Centre, implemented equipment 6509, Cisco IOS/XR, IPv6, DHCPv6, FWSM, ASA 5500 series, IPS, NAC (NAD),

F5 load balancer, used for VLANs load balancing and whole of network to function effectively. Also in the field of security, the Single point of entry of Data traffic is very important i.e. the Firewall. To find out if the network is vulnerable the use of tools like NESSUS, CACTI will be installed which help to improve the network design. Configuration, installation, and fault management is my business day in day out. Audit project for the Stadt Hilden was carried out by me for network security and vulnerability using Wireshark packet scanner.

Configuration, installation of Terminal server, Network access Server, PIX Firewall, ASA 5500 series, all types of Router, Switch, IPS series 4200, Cisco NAC, Catalyst 6500, VPN for remote access, DMVPN (Hub and Spoke Technology), MPLS, Encryption algorithm technologies like, 3DES, DiffeHellman, Digital Certificate, Routing protocols BGP, OSPF, ISIS, Routed protocols TCP/IP. Implementation of RSA Technology (Two factors Authentication) for the AAA (Authentication, Authorisation, and Accounting) Radius Server, TACACS, and Kerberos will be configured.

Mirage NAC appliance for controlling authorised and Unauthorised access, here unauthorised access to put into quarantine and at the same time Administrator is informed about the event. Mirage Appliance will be configured in the network and it has Linux Kernel running on it. McAfee Virus und Spam software implementations are on the Email Gateway server