Meysam Darabi

.: Leader of a five-person team with responsibility for task distribution and checking project progress. .: Migrating from Cisco ACS to Cisco ISE platform and developing and supporting remote access service and providing teleworking conditions for bank employees and 9% reduction in personnel costs. .: Established IPsec VPN tunnels between government DC and central bank using Cisco ASR 4400 series.

.: Responsible for debugging, troubleshooting and supporting DCs/Edge-Internet firewalls/NGFW administration, rule analysis and rule modification. .: Continuous interaction and cooperation with web developers and database administrators to configuration access lists for network access as per requirement and communicate web and database services and monitor the type of access and segregation of ports required to serve customers and other services and decrees 98.5% access with all port to customized port.

.: Migrated legacy Cisco firewalls ASA-5500 series to Cisco NGFW 4110, 2120 using migration tool and converted 95% rules from old Firewalls. .: I have redesigned, optimized and migrate from ACS platform, to network access based on modern security platforms such as Cisco ISE, which have increased the security of the bank infrastructure and made it easier to adapt information and access the service and devices, also decreased 100% internal user illegal access to infrastructures.

.: As team member of the migration project of converting Cisco Catalyst 3750, 2960 into Nexus 5672, 2232 as well as up server’s bandwidth from 1Gbps to 10Gbps that issued Increasing service availability in the Data Center network from 67% to 99% after infrastructure migration (with VXLAN). .: Configuration and troubleshooting of BGP routing protocol on Edge routers with Cisco ASR 1002 through two ISP with 4 separated up-link and more than 450Mbps Internet bandwidth with 4 public IP subnet (Assigned by RIP).

.: Created access list to filter traffic originating and destined to the internal, external and DMZ zones in the network, that in this project 98.4% servers migrated to DMZ zone. .: Implemented, managed, and supported a Privileged Access Management service using Wallix, which records the connection of IT admins and external providers and enables bank experts to control, verify, track, and monitor them. As well as technology supervisors enables information to control, audit and analyze all privileged access.

.: leader of implementing and troubleshooting connectivity issues within the server zones of the Data center (between application servers, database and web servers) as well as user requests and user connectivity issues from various branch locations, office locations and third party sites to data center. With configuring and deploying switches such as Cisco 6513, 3750, 3850 in the Core and Distribution Layers and Implemented zone based firewalling and security rules on the Cisco firewall ASA-SM 6513.

.: Implemented, configured and maintained wireless infrastructure with Cisco 2500 Series WLC and more than 150 Cisco Aironet 1800, 2700 APs series across multiple locations, as well as guest VLAN support that issued increased 95% of the quality of Internet service for users on central buildings .: Interacted with Developer teams to troubleshooting applications supported by F5 Big-IP LTM to maintain local traffic and increase 94% service availability.

.: Design, implementation and detailed change management of network security devices documentation including physical/logical topology using Visio and keep it up to date for any future reference and troubleshooting. .: Designed, configured, implemented and deployed F5 Big-IP LTM load balancer infrastructure per business needs and created Virtual IP Address, Pool Members and uploading SSL Certificates to ensure SSL Offloading in the NLB. .: Monitored 5 Internet bandwidth with NAM-SM in Cisco 6513 Catalyst.

.: Administering and Support web application firewall by BIG-IP F5 ASM for 2 months and migrated 76% public services from Fortiweb 1000D. .: Implementation remote access service for third-party company to administrate their servers, with two-factor authentication using RSA tokens and OTP generators and Cisco ACS platform. .: Deployed, configure and Troubleshoot SSL VPN using CISCO ASA 5500 Series for connect third party client and office staff with to internal network that filtered by country IP.

.: Configured NAT/Access-Lists Cisco firewalls that web services published in internet and Worked on the migration project of Converting old PIX firewalls into new ASA firewalls. .: Designed complex Cisco firewall architectures (32 FW devices), including configurations, policy implementation, upgrades, for internet users in all province in country. .: Adding rules to DC/Internet-Edge firewalls (6 devices) and completed rename of all firewall objects and rules and write clear description to troubleshoot.

.: Managed DCs VLANs and IP addressing and documented using Excel and NetBox (Internal App for managing IP Addresses to which services assigned). .: Support Fortiweb as web application firewall. .: Implementation, Administration and Support NTP Server with Hardware Symmetricom S300 and sync over 50.000 device all of the provinces and DCs. .: Monitored systems health, network analyze and capacity management for devices and bandwidth of the network security department with PRTG, ManageEngine, Zabbix.

.: A team member of Designing Fail-over link mechanisms by implemented the dynamic routing for large scale network with 4500 nodes which result in minimized the network leakage and increased availability up to 5%. .: A team member Successfully solve networking issues (Routing & Switching) in an enterprise banking scale including over 4000 branches, over 4200 ATMs and HQ’s official Buildings in all states of Iran. .: Monitoring of the route analytics management software (HP RAMS).

.: Troubleshooting of network devices of clients and configured and supported all access layer switch’s (catalyst 2960) in a round of the country. .: A team member of an automation banking technicians which accelerate the expansion of WAN links up to 5000 points and implement the Bank enterprise network. .: A team member of Configuring OSPF, EIGRP, RIP and route filtering on DMVPN solution in order to simplify the network installation and speed up the automation project that performed 2 months’ sooner.

.: In order to maintain high availability and understand network usage for future planning network performance, monitored all telecommunication, network and systems health, bandwidth and responding appropriately to alerts and events with OPMANAGER Netflow Analyzer, Cisco NAM, PRTG. .: Performed IOS upgrades on Cisco Catalyst switches series 2900, 3750 and Cisco routers series 800, 1800, 2800, 3600 with TFTP. .: A team member of ATMs migration project from x.25 connection to TCP/IP.

.: Migrated computers OS from XP to Windows 7 using ghost imaging. .: Install, Supported & troubleshoot all workstations (Windows, Antivirus, Microsoft office Software and Hardware) .: Install and Maintain network cables, outlet, and cabinet. .: Working with Microsoft Word, Excel, Power point, Visio in advance level. .: Installed and configured Cisco Catalyst 2960 Switch and Linksys Wireless Network.

Graduated with an average of 17.05 Thesis: Identification and ranking of effective factors in the dynamics of information security management at Bank SADERAT Iran on the basis of network analysis

Second place in the university with an average of 18.78 Thesis : Design and implementation of real-time systems Activities: Programming With VB.net - SQL Server 2008

The first rank of the university with an average of 18.10 Activities: Programming