• analyze network requirements coming from new Mobile Data Service Integration projects or from network maintenance demand (end-of-life replacement, design optimization, etc)
• Design network integration and extensively document it in "Product Network Design" and "System Network Design" Network Security Design and Implementation.
• All documentation is in English!
• Align the network design with the system architects, Security, Transport Network Planning, Testing and Operations
• Lead Technical Project Management in DTAG IP Network Including Roll-Out,IPv6 Network Migration  and Design and Implementation of Cisco Router, ASA Firwalls, Checkpoint Firewalls, Cisco WLAN Severs, Cisco ACE Loadbalacers.
• Plan WAN MPLS Network Integration & Migration. Prepare & Present Global Network Integration Plan [BluePrints].
• Implement SSL & VPN Tunnels, Configure Cisco ACE LB to support SSL termination / Policy-mps etc
• Rollout & Maintain a Global Corporate Network, Improving reliability, technologies & Services on the Global Network [WAN, MAN & LAN].
• Broadband definition, Design, Implementation and Management Vendor Coordination, Provider management, SLA
• Work out security concepts, switch, router, load balancer and firewall configurations document configuration in the relevant Configuration Management Database
• Support the evaluation of Security, Routing and Switching configurations in the T-Mobile test and LIVE facilities
• Work out migration concepts for the T-Mobile Live Network, Coordinate and Lead Network Migrations
• Place Change Requests to Operations (no change execution done by yourself, no write-access to any Live Network system) using a Work Order Management tool
• Coordinate and troubleshoot the execution of Change Requests
• Coordinate entire maintenance projects in the T-Mobile Mobile Data Services data centers, starting from project initiation until final delivery including project reporting
• Be the Planning Project Lead in Mobile Data Service Integration projects and Security Projects
• Be responsible for the IP network design of T-Mobile Mobile Data Service solutions hosted in Data Centers in various locations in Germany. Support Mobile Data Service product introduction as iP designer and project planner. Identify need for technical evolution of the existing network Solution, draft proposals for maintenance projects and co-ordinate their implementation

Project Description:

• Bayer AG is a Phmacetical company with over 800 site and Locations worldwide.
• A Cooperate IP network based on Cisco MPLS & VPN technologies has to be built, managed and secured.
• International IT security & WAN Security Rollout / WAN Acceleration Rollout [RiverBed Steelheads >> Exinda]
• Global WAN Migration Project with Verizon Business & ATT, each location will be built, managed, migrations planed and coordinated accordingly without Business Interruptions whatsoever.

Tasks

• Plan WAN MPLS Network Integration & Migration. Prepare & Present Global Network Integration Plan [BluePrints].
• Rollout & Maintain a Global Corporate Network, Improving reliability, technologies & Services on the Global Network [WAN, MAN & LAN].
• Support & train IT Team in Migration Processes & methods [ITILv3], support workshops for IT administrators.
• Plan & Implement a Change & Incident management system & Integrate into ITIL.
• Create Migration Project concept, Migration Project Plans, define Project aims, Objectives & scope.
• Global IT Network Engineering and Administration, using technologies as MPLS, BGP.
• Cisco Advanced Routing Protocols etc.
• Technical Project Management / Project Management focused on Prince2 / ITIL conception, Management of technical resources, Management of Third Party Partners, Service Level Agreements, OLA etc. Define & Analysis Technical Risk.
• Define & Implement Global Network Concepts, define security requirements & management of complex L3 Firewalls & Security equipment, manage endpoint security
• WAN Optimization rollout & Administration.

Rollen:

Senior Network Architect / Project Implementation & Coordinator / Migration Architect.

• Technical Project and Service Management / Project Management focused on Prince2 / ITIL conception, Management of technical resources, Management of Third Party Partners, Service Level Agreements, OLA etc. Define & Analysis Technical Risk.
• SOA Backplane Platform management and Platform security management.
• SOA backplane Incident management and support.
• OLA & SLA definition and International Natco support and Training.
• Support & train IT Team in Processes & methods [ITIL], support workshops for IT administrators.
• Problem management in a multi-cultural, international locations and groups.
• Definition of Service Level Agreements, [SLAs], SLAs management, IT service Process.
• Platform BG management and Accounting.

Clickandbuy International:  PCI DSS Compliance & Securement Project:

Role:                           

technical Project Lead / Senior Security specialist.

Duties:

• Define & Implement Global Network Concepts, define security requirements & management of complex L3 Firewalls & Security equipment, manage endpoint security to meet PCI DSS.
• PCI DSS compliance Project Planning and Documentation.
• Network Infrastructure Planning and deployment to meet PCI DSS requirement.
• Planning and Implementing definite  Jump Servers to meet PCI DSS Compliance.
• Cisco ASA Firewall ACLs & NAT definition.
• Auditors meeting and Compliance definition and status.
• Global IT Network Engineering and Administration.
• PCI DSS team management.
• Coordination and 3rd Party supplier management.
• Planning a global rollout of Cisco ASA firewall system to meet PCI DSS Compliance.
• Design and defined global security methods and policies for a PCI DSS environment.
• Migrating old Cisco PIX security appliances to new Cisco ASA security systems including defined ACLs, IPS & IDS etc.
• Defining, Implementing and configuring defined security policies on Cisco ASA security system. ASA5505, ASA5510 for PCI DSS Project.
• Best Practice configuration policies for Cisco ASA security appliances, laying down global configuration models on Cisco Security appliances.
• Implementing and Configuring Cisco ASA security system as an MPLS end-point CE routing device.
• Defining, configuring and implementing Access Lists on Cisco ASA security appliances with PCI DSS Compliance.

Particulars of project:

• The NORMA Group AG is a Global player in connector engineering, with more than 70 locations in different countries around the globe.
• These locations should be re-planned, rebuilt and integrated into a secure, flexible & multilayer global Cisco IP Network.
• Three DataCenter [ASIA; EU & AM] should be built to accommodate various sites in their regions.
• Integrate all locations & sites into one global MPLS & DMVPN WAN Cloud.
• Centralized Global Authentication Systems, Plan & Rollout WAN Optimizer, Cisco ASA, Routers, Cisco Iron-Port web appliance, One Global Voice system based on Cisco VoIP / Cisco IP Telephony / Centralized CUCM & Voice Gateway implemented.

Tasks

• Rollout & Maintain a Global Corporate Network, Improving reliability, technologies & Services on the Global Network [WAN, MAN & LAN].
• Technical Project Management / Project Management focused on Prince2 / ITIL conception, Management of technical resources, Management of Third Party Partners, Service Level Agreements, OLA etc.

Define & Analysis Technical Risk.

• Define & Implement Global Network Concepts, define security requirements & management of complex L3 Firewalls & Security equipment, manage endpoint security.
• Support & train IT Team in Processes & methods [ITIL], support workshops for IT administrators.
• Plan & Implement a Change & Incident management system & Integrate into ITIL.
• Create Project concept, Project Plans, define Project aims, Objectives & scope.
• Plan WAN MPLS Network Integration & Migration. Prepare & Present Global Network Integration Plan [BluePrints].
• Global IT Network Engineering and Administration.
• Plan concept, define, Implement & configure, coordinate 3rd Party external Company to implement the following:

International Project Management

• Define and maintain high-level Project Plan, Project Register, Project documentation as also Project Process Integration.
• Project Resource definition & management, Project Team Management, Project Risk Analysis & Management, define and Manage Project Budget up to 1m €.
• Problem management in a multi-cultural, international locations and groups.
• Definition of Service Level Agreements, [SLAs], SLAs management, IT service Process definition and
• management.
• Project Plan Presentation to senior management, Defining and Presenting Project Plan, Project Scope and Objectives to local & International Branch offices.
• ITSM, Service management, ITILv3 and Prince 2 Project management methodologies.

Global IP Network Migration

• Plan, coordinate and manage the implementation a global and centralized IP network spreading over three Data Centre in ASIA; Singapore; AMERICAS, Chicago; EU/EMEA FFM.
• Build a Centralized IP network using Technologies such as:
• VPN GRE; DMVPN Clouds; MPLS Routing; BGP; OSPF etc.
• Plan and Coordinate IP Network infrastructure migration from DMVPN to a globalized MPLS hub & spoke cloud.
• Global Implementation and coordination of various Cisco Routers such as cisco 2900, 1800, 3600 series Routers.
• Planning and coordinating rollout of HP Switch layer 2 & 3 switches, setting and defining Best practice configuration.
• Coordination and migration of New site into company*s Global IP Network and MPLS Cloud.

Cisco ASA 55xx series Firewall

• Planning a global rollout of Cisco ASA firewall system.
• Design and defined global security methods and policies.
• Global VPN Any Connect using Cisco ASA security & VPN appliances.
• Migrating old Cisco PIX security appliances to new Cisco ASA security systems including defined ACLs etc.
• Defining, Implementing and configuring defined security policies on Cisco ASA security system.
• ASA5505, ASA5510 etc.
• Best Practice configuration policies for Cisco ASA security appliances, laying down global configuration models on Cisco Security appliances.
• Implementing and Configuring Cisco ASA security system as an MPLS end-point CE routing device.
• Defining, configuring and implementing Access Lists on Cisco ASA security appliances.

Cisco 5500 Wireless Access Controller and Server

• Planning and Implementing a Cisco Wireless Controller 55100 series, Global distribution of AP clients and centralizing wireless access security for guest users etc.
• Defining binding methodology for Access Points & security appliance security.
• Implement a global Wireless [Public user] integrated wireless security implementation etc.
• Planning and Implementing a global Wireless WAN and LAN spreading over 180 sites.
• Wireless access to WAN / LAN routing on Cisco Security Appliances ASA and Layer 3 routers and Firewalls.
• Centralizing Wireless access and authentication using Cisco 5500 series access controllers.
• Planning and deployment of advanced wireless points for public usage.
• Wireless VLAN tunneling to the outside internet.
• Wireless Access Controllers on Cisco NX OS / IOS routing switches.

Cisco Voice Bundle 29xx Routers & Cisco Routers

• Planning and configuring Cisco 2921 voice bundle series routers as Voice gateway, MPLS routing CE with OSPF, BGP, EGIRP, etc.
• Planning and deploying Cisco 2921 series as voice gateway at different locations.
• Configuring VoIP on Cisco 2921 series as Voice Routers and Gateways, Voice and Phone management on Cisco voice Bundle routers.

Cisco Iron Port  s370 Internet Security & Mail Appliances

• Designing and defining Internet web security and Email security access using Cisco IronPort s370 security appliances.
• Synchronizing three DataCenter web & mail security access and defining local internet break-out based on defined global security policy.
• Creating authentication, security groups and access groups in IronPort s370 series, configuring AD synchronization with groups.
• Creating web allow, white-list, block and https encryption policies to further secure internet and mail access.

WAN Optimizers Citrix Branch Repeaters & ReverBed WAN & Mobile Clients

• Project scope definition on global rollout of WAN optimizers from Citrix WAN Optimizers, Riverbed mobile Clients / Steelheads as also EXPAND WAN Optimizers.
• Defining standard configurations and policies to be roll-out. Implementation of rollout policies and standards.
• Configuration and administration of Citrix and Reverbed WAN optimizers to meet defined global standards and policies.
• Project  plan definition and rollout strategies, security policies enforcement, project coordination, third party vendors coordination, project documentation and project team leadership, project register etc.

Cisco Voice over IP Telephony Rollout

• Technical Project Management of an International Cisco VoIP rollouts spreading over 15 countries.
• Definition and Implementation of VoIP standards on a centralized platform to accommodate cisco voice gateway / voice proxy routers.
• Building and administration of a Cisco voice gateway / voice proxy.
• Planning, installation and implementation of the following Cisco VoIP infrastructures:
• Cisco Bare Metal UCS C210M2 Platform [Cisco UC servers].
• Cisco 2921 routers as Voice gateway / proxy.
• CIMC (Cisco Integrated Management Controller).
• CUCM Cisco Unified Communication manager Publisher, TFTP MoH.
• Cisco Unified Presentation Server and communication manager.
• Cisco VoIP Telephones, CP-79****; CP-69***.
• Cisco VoIP Telephone rollout and administration.

Cisco Communication Manager 8.xx & Voice Mail System

• Planning and Migration of old Cisco UC server 6.*** to CUCM 8.6.2 version and also therein policies, location policies, device configs etc.
• Installation and administration of Cisco Voice mail communication system version 8.5.
• Migration of old voice mailboxes to new voice mailboxes, CTI installation etc.
• Administrate and Provide Cisco Unified Communication solutions.
• UC / CUCMN administration and expansion to accommodate global VOIP centralization.
• Cisco VoIP Global Administration.

ITSM Documentation Tool [FnT Command Doku Tool

• ITSM Process integrations with Serview.
• Implementing a documentation Platform with FnT Command tool set.
• General Technical Documentation of implemented Platforms.
• Incident / Change / Process management with reference ITIL Process, using various Change / Incident / Problem Management platforms.
• 24/7 3rd >Level Support.

• Project Client 2015 oversees the migration of existing Network Infrastructure as also national rollout of Windows 7 64bit through a virtualized Cisco Network Infrastructures.
• Coordinate third party firms on general Project scope and objectives.
• Technical Project and Resource management, Project Coordination etc.
• Define & Implement Global Network Concepts, define security requirements & management of complex L3 Firewalls & Security equipment, manage endpoint security.
• Plan and configure a Virtual Cisco IP Network Platform to accommodate a national Virtual software App-v Rollout.
• Definition of Migration Processes based on defined Company policies & implementing these policies to enhance Project Plan, Scope & objectives.
• Configuration of complex LAN / WAN routing protocols such as VRF, BGP, OSPF, EIGRP, ISDN, DSL FrameRelay, DMVPN etc.
• All Cisco Hardware IOS Upgrade to accommodate new standards [ASA, PIX Firewalls, Cisco Switches, HP Layer3 Switches etc.].
• Planning & Implementing ACLs on Cisco Border-ends firewalls & Routers, Cisco Firewall Management & Virtualization.
• Migration of existing sites & Locations in a Global MPLS cloud using protocols such as BGP, OSPG, EIRGP, VRF etc.
• Incident / Change / Process management with reference ITIL. Process, using various Change / Incident / Problem Management platforms.
• 24/7 Third Level Support and Technical documentation.

• Developing & Designing Network Migration Concept; Migrating existing DSL / DMVPN =>>> MPLS Cloud & also administration & troubleshooting complex Cisco IP network.
• Analyzing existing WAN / LAN / MAN Networks AS-IS & designing a location TO-BE Concept.
• Definition of Migration Processes based on defined Company policies & implementing these policies to enhance Project Plan, Scope & objectives.
• Configuration of complex LAN / WAN routing protocols such as VRF, BGP, OSPF, EIGRP, ISDN, DSL FrameRelay, DMVPN etc.
• Administrating, Monitoring & supporting Cisco Hardware models: Routers 25xx, 36xx, 76xx, Cisco catalyst L3 Switch etc.
• Cisco VPN GRE Tunnel / Planning /Administration und Configuration.
• Preparing Cisco Routers & L3 37xx switches to accommodate migration.
• Implementing Migration on Night Shifts.
• Implementing Check Lists to meet ITIL recommendations
• Troubleshooting & Correction after migration using standard company correction tools such as CQC
• Switch Port access mode & VLAN Definition / Definition from Port Security.
• Optimizing complex Cisco IP Network & securing these Nets with Cisco ASA Firewalls, Juniper F5 devices.
• Cisco Hardware & Endpoint devices - Integration & Quality Control.
• Configuration of CE / PE DSLAM, Core - & - Edged Cisco Routing & Switching devices.
• Implementing VoIP based on designed Policy, Migration of CUCM / Cisco Call Manager to version 7xx, Configuration Cisco Voice Gateway Cisco Router 29xx Voice Bundle.
• Implementing & configuring Cisco TACCAs Server, RADIUS, IP Helper, VLAN over IP VRF routing domains.
• Incident / Change / Process management with reference ITIL Process, using various Change / Incident / Problem Management platforms such as:
• HP OpenView Change Management System.
• FNT Command Documentation Platform.
• Remedy Incident & Change Request & Management Platform.
• NOAH Database.
• TSINet, FUNDAT, Texas, Vauemation, eBest, etts-web-ticket, etc.
• ARS [Action Request System] & Process Management.
• Project Technical Documentation.
• Change und Incident Management, ITIL, Problem & IT Process management, etc.
• 2nd & 3rd Level Support 24/7.

• Technical Project management / Change management / Project Coordination / General Project management / Resource Management BG Regulation & Reporting to CIO & Vice President IT.
• Analyzing, Design, Configuration & Documentation of existing VRF Domains.
• Building an advanced & Converged Cisco Network with placed Layer 2 & 3 Routing Firewalls & required SSL Certificates.
• All Cisco Hardware IOS Upgrade to accommodate new standards [ASA, PIX Firewalls, Cisco Switches, HP Layer3 Switches etc.].
• Planning & Implementing ACLs on Cisco Border-ends firewalls & Routers, Cisco Firewall Management & Virtualization.
• Configuration & Implementation of security PKIs, Certificates on Cisco CSM / SCA & Juniper / Redline Load balancers.
• Implementing & Administering Clustered Cisco & Juniper / Redline Load Balance.
• Migration of existing sites & Locations in a Global MPLS cloud using protocols such as BGP, OSPG, EIRGP, VRF etc.
• Network Security enhancement with Cisco L3 Firewalls [PIX & ASA & Checkpoints Firewall].
• Building & Configuring Cisco TACCAs Server, Radius Server, IP Helper, VLANs, VPN via IP-VRF routing Domains.
• WAN Optimization using Citrix WAN Optimizers, RiverBed Steelhead & Expand. [Planning, Configuration & Administration].
• Planning a Backup system on ISDN BRI / PRI, configuration & Implementation.
• Migration existing VoIP system; Voice CUCM / Call manager / Cisco Voice Proxy using Cisco Voice Bundle 2900 Routers. Migration of Cisco CCM from version 5 to 6.XXX.
• Building & Administration of VoIP systems between Germany & other EU Locations.
• Technical Documentation of Procedures, Global WAN / LAN, MAN, MPLS etc. on Wiki MS SharePoint.
• 2nd & 3rd 24/7 Global Support.