Asad Hanif

I am a certified network professional with extensive experience in network design, administration, and support. I have a strong track record of managing and maintaining complex enterprise networks across multiple platforms, ensuring reliable performance and security. Skilled in delivering technical support and performing detailed root cause analysis, I am adept at resolving network issues efficiently while minimizing downtime. With strong analytical, troubleshooting, and management abilities, I am highly motivated to deliver high-quality solutions that enhance network reliability and optimize overall IT operations.

Systems Limited

Jan 23 – Present

Senior Consultant-Enterprise Data Network

Contributing as a key member of the project delivery team, working with cross-functional teams to design, implement, and deliver network solutions that meet customer requirements. Manage project timelines, ensure successful execution, and maintain ongoing communication with clients to ensure on-time delivery

Projects:

National Bank of Pakistan

• Conducted firewall policy optimization for Internet, Data Center (DC), and B2B segments to improve security posture and streamline access control.
• Implemented firewall security best practices across Internet, DC, and B2B segments, enhancing threat prevention and compliance.
• Designed network segmentation for the to-be architecture, establishing tailored access controls and traffic isolation to meet segment-specific security needs.
• Recreated firewall policies based on the new segmentation model, aligning them with updated architecture requirements for improved security and operational efficiency.

Telenor Pakistan

Contributed to the Asian Billing Systems solution for Telenor Pakistan, providing network infrastructure for the Oracle Billing Application at Site-A and Site-B

• Expansion and upgradation of existing Cisco ACI infrastructure for network connectivity.  
• Integration of Open stack with Cisco ACI
• Deployment of Nexus Dashboard and Nexus Dashboard Orchestrator
• Integration of Cisco ACI with NDO.
• VRF Stretching between Site-A and Site-B using NDO.
• Deployment and Upgradation of SRX-4100 and SRX-4600(with Logical Systems).
• Integration of SRX4100 & SRX 4600 with Junos Space and SKY-ATP
• Migration of EOL hardware WAF to WAF VM.
• Optimizing WAF applications by removing wildcard from URLs and parameters

Systems Limited

Dec 21 – Dec 22

Consultant-Enterprise Data Network

• Responsible for managing the Enterprise Network operations of Telenor.
• Responsible for any change in the network on all devices Including Cisco ACI, FMC, FTD, ASA, ISE, ASR, WAF and LTM
• Responsible for daily operation of WAF, including application onboarding, whitelisting of URLs and parameters.
• Responsible for daily operational duties like enterprise network routing, switching and VPN configurations, modifications, troubleshooting and installations.
• 24/7 level 2/3 support for troubleshooting Data Center Network related issues and support for nationwide.
•  Implementation of IOS Version Upgrade of all Core Devices nationwide.
•  Preparation & Presentation of performance & fault analysis reports along with proactive maintenance suggestions.
•  Coordination with planning team & vendors for smooth execution of O&M activities
•  Traffic trend analysis and subsequent re-routing based on throughput analysis
•  Coordination with Teams and 3rd parties for the deployment of new data circuits (P2P, VPN, Internet) and troubleshooting/up-gradation of existing links
• Documentation of IP network for existing and new implementations

Wateen Solutions Jul 20 – Nov 21

Technical Lead

Lead a team of 6 network engineers for designing, Implementing and troubleshooting network solutions as per         customer requirement.

    Projects

    MOL PakistanSD WAN Deployment

• Deployment and migration of MOL Pakistan from legacy Cisco routers to SD WAN

routers to implement application based load sharing

• Integration of SD WAN routers(ISR-4331 & ISR-C1111) with Cloud controllers 

vBond, vSmart and vManage

• Implementation of QoS to ensure service availability

Mobilink Microfinance Bank PR Site Deployment

• Deployment and migration of Mobilink Microfinance Bank PR site from legacy Ciscofirewalls to Cisco Next Generation Firewall.
• Deployment of Cisco FMC,FTD,Cisco ASR(1001-HX),Cisco Nexus9K and Cisco Catalyst (3850)

PNRA

• Deployment of Cisco 9500 as core switch at headquarter
• Deployment of Fortigate firewalls at branch offices for VPN connectivity with HQ.

MOL HQ & Field Deployment

• Migration of existing core switch to Cisco 9407
• Deployment of Cisco FTDs at field site and registering them on FMC.
• Deployment of Managed switches at field site

First MicroFinance Bank Ltd Jan19 – Jun 20

Senior Network Administrator

Responsible for core network of bank comprises of SRX- 1500, Juniper EX-4600, WAF, Fortigate 501E, Cisco 3850, Cisco 2960,Fortigate100E, Fortigate 80E, Fortigate 30E and FortiAP.

• To design, implement and maintain bank’s network infrastructure at PR and DR Site.
• Install and configure security and network devices including firewalls and switches and access points for HO.
• Monitoring the events on WAF against every web application.
• Establishing and maintaining third Party VPN connectivity (1-link, Nadra ,Punjab Land, Aksa, Tasdeeq etc) on SRX-1500.
• Designing and upgrading Network infrastructure Diagram as per network change of PR and DR (Low Level/High Level).
• Backup of configuration of all core network devices.
• Installing and maintaining application and database of Solarwind NPM 12.4 for network monitoring.
• Planning and proposing network replacements and upgrades.
• Preparing memo for procurement of any network device, network support and connectivity.
• Planning and budgeting the network infrastructure including costing of each network element.
• Managing 6 different connectivity vendors ensuring their support falls within the SLA agreement.
• Negotiating with the vendor to make sure of the provided quotation is within the planned budget.

Projects

• Deployment of F5 WAF to protect Bank publically exposed services from Layer7 threats and attacks by defining the application URLs,Parameters and geo location
• Implement network security advisories and OS upgradation to fix the vulnerabilities as per recommendation of Information Security team at PR and DR Site.
• Integrating Network devices with IBM QRadar for logs.
• Upgrading the existing infrastructure to Fortinet Layer7 Firewall(501-E) and Juniper Switches (EX-4600 & EX-4300) in virtual chassis.
• Design and deploy L3 distribution switches(Catalyst C3850) in stacking at PR Site
• Design and deploy Wireless Access Points (FAP-221E) at Head Office. 

Khushhali Microfinance Bank Limited June 17 – Dec 18

Network Officer

Responsible for access layer network of corporate office and overall networking and connectivity of branches all overPakistan.

• Deployments of network equipment at corporate office and branches and establishing VPN connectivity for branches.
• Deployment Palo Alto 5020 in HA and configuring IPSec VPN of Branches with  Head Office
• Implement category based URL filtering on Palo Alto for Internet Users.
• VPN configuration and monitoring on Juniper SRX 3400, SRX100, SRX 110, SRX 210, 220, SSG-5 and SSG-20.
• Configuring and managing access and distribution layer switches including Cisco 2960 and Cisco 3750.
• Network support to corporate users, branches, sub offices.
• Hand on experience on CISCO WLC 2504 and LAP 1700 series
• Configuration and troubleshooting of LAN/WAN/ WLAN.
• Configuration of NMS for 150 devices using Cacti.
• Maintaining technical documentation of the network changes and ensuring they are compliant with organization policy.
• Coordination with procurement department and initiating RFP’s.

     Projects

• Migration of existing Core Firewall (SRX-3400) to Next Generation firewall (Palo Alto- 5020) for Layer 7 Protection.
• Implementing WAF for publicly exposed application.
• Upgrading core switches from Nexus 5K to Nexus 7K.
• Deployment of Cisco WLC(2506) and APs(1702) at Head Office.

Wateen SolutionsDec 13 – May 17

Resident Engineer for BOR (Boardof Revenue)

Deployment of Cisco and Huawei Routers on a project of Board of Revenue to provide connectivity between remote locations (North Region) and Head Office and also responsible for the O&Mof these sites.

     Projects

Board of Revenue

• Connectivity of BOR remote sites with the core network in Headquarter over point to point connectivity.
• The architecture includes Huawei AR2220 and CISCO 2911 routers.
• Configurations of IP cameras for monitoring of remote sites from headquarter.
• Connectivity of remote sites on optical fiber and Radio Links.
• Regular operations and monitoring of network.

Islamabad CapitalTerritory Police

• Islamabad Traffic Police stations connectivity with headquarter.
• Configuring L3VPN from the police stations to headquarter core network.
• Ensure reachability of Internet, email servers and application servers from the LAN of police stations.
• Connectivity of police stations on Optical Fiber, ISM and Wimax.

PESCO (Peshawar ElectricSupply Company)

• Deployed PESCO’s LAN and WAN network connectivity along with CISCO’s cloud web security (CWS) feature for web traffic filtering.
• The architecture included catalyst 4506-E as core switch and CISCO ISR 3945 routers as gateway routers which also were configured for CWS after licensing.
• The LAN network constituted of catalyst 2960, Access Point AIR-CAP1602I-C-K9 and WLC 250.

BS Electrical (Telecommunication Engineering)