MUHAMMAD JAHANGIR
Senior Manager Devops
Lahore
Summary
- Implement DevOps tools and life cycle on responsible services
- Develop and maintain a DevOps roadmap that defines and communicates the strategic direction for DevOp in support of business strategies
- Ensure the DevOps teams are adequately managing of high and critical priority incidents in production
- Improve DevOps environment / team with technical initiatives
- Leads the design, build, and operational management of highly secure and scalable sites/software for the business and works tirelessly to guarantee the reduction or removal of bottlenecks and inefficiencies in the DevOps department and engineering department as a whole
- Collaborate with application development and infrastructure teams in order to help bridge the functional gap and determine the DevOps feature/function set in order to optimize the technical environment
- Develop and execute against the continuous build and deploy toolset roadmap
- Maintain and administer the tools and environments supporting continuous build and automated deployment processes
Overview
19
19
years of professional experience
4
4
years of post-secondary education
Work History
Senior Manager Devops
Connectdotnet Private Limited
04.2019 - Current
- Planning the mechanism and outlining the necessary steps to achieve and retain PCI-DSS v3.2
- Currently, our organization is PCI-DSS certified
- Planning the mechanism and outlining the necessary steps to achieve and retain ISO 27001 compliance
- Designing the Infrastructure to be Highly Available, Secure, Fault Tolerant, Scalable, and Cost-Effective for a complex application
- Designing, Configuring and maintaining complex Routed LAN/WAN (Cisco 2950, ASA5525, TP load balancer, Servers & Dell storage, Wireless Access point Management through WLC
- Planning and implementing Centralized logging for monitoring services including AWS, Servers, Fortinet Firewall with the help of AWS cloud watch & Event log Analyzer
- Design & Implement Security solution for complex application with Next Generation Fortinet Firewall including Network Segregation with DMZ, Traffic Policies, Web filtering, Application Filtering, IPS/IDS as well as the constituent components to prevent and mitigate Cybersecurity threats
- Managing PFsense firewall & Untangle Firewall in the Production Environment
- Managing PTCL & Nayatel Cloud
- Provision, installation and configuration of windows 2016/2019 servers, Linux/Red Hat Enterprise Linux
- Design MFA (Multifactor authentication) and FIM (File integrity monitoring) solutions for infrastructure
- Identifying possible vulnerabilities in the design of Infrastructure and take necessary steps to mitigate them
- Optimizing end-user experience based on the metrics gathered from the monitoring mechanisms
- Overseeing and observing any Cybersecurity incident occurred and draft the plan on successful mitigation and relevant follow-up with sources to mitigate future identical incidents
- Overseeing and finalizing Risk Assessment process, Planning Risk Mitigation policies/controls and finalizing Risk Acceptance
- Responsible to keep & track Infrastructure Documents including Network Diagrams.
Principal Network Engineer
Digital commerce & Payment Limited
05.2016 - Current
- Designing & implementing of Networks /systems solution according to application requirement including IP addressing scheme, Routing, Switching, and Security
- Configure routing, switching and security according to design & requirement
- Design & implement security through Cisco Firewall ASA 5525 including DMZ creation according to system application requirement, Inter VLAN routing, IPSEC VPN, IPS Sourcefire, VLAN, and ACLS
- Maintain disaster recovery procedures and contingency plans during system failures
- Respond promptly during outages and recommend solutions for performance issues
- Perform root cause analysis of network issues and recommend corrective actions
- Design & Implement Remote Access VPN (Cisco any connect) on Cisco ASA 5525 to access different servers by different users
- Design & Implement IPS (Sourcefire) on cisco next generation firewall including rules to redirect traffic of Web server towards IPS for intrusion detection & prevention
- Design & implement L2/L3 links & IPSEC VPN for clients with service provider according to application requirement
- Monitor traffic through Cacti, Kiwi syslog server, Net flow, scrutinizer for analyses
- Coordinate with different clients, vender and service provider
- Installation and configuration of Red Hat and ESXi on several Cisco/HP Blades as required for DEV/TST/UAT/PROD environment
- Actively work to ensure smooth and timely software builds, release management and software deployments on development, QA, staging and production systems keep the Tracking Records of the SVN Revisions at QA, Staging and Production Levels for Every Deployment
- Troubleshoot and fixes configuration and deployment issues using appropriate tools
- Acting as liaison with Developers, QA Engineers and NOC/IT Teams to resolve live production issues
- Also worked with system implementation team including different kind of servers
- JBOSS, Apache Web server, Kannel, USSD, SVN server
- Deploy and configure ESX hosts in vCenter including setting up vSwicth, DRS rules, Storage etc
- Integration of PHP, Apache and Mysql on Linux/Unix based System
- Automated Backups of the Applications, Configurations, and Logs on Running Production Servers
- Monitors configurations and production systems with real time monitoring and alert systems to proactively predict, figure out and address impending problems with software system
- Projects:
- Fonepay, Paymax (Askari & Zong), Soneri Bank Falcon,BOP Branchless Banking, JS bank Branchless banking, IDT
Senior Network /System Engineer
Wateen
03.2013 - 04.2016
- Provision, installation and configuration of windows 2008/2008 R2/2012 servers, SUSE Linux/Red Hat Enterprise Linux, upgrading windows 2003 on both physical and virtual machine
- Performance monitoring and tuning of ESX servers, vCenter Server and Virtual machines
- Installation of ESXi 4.1/5 hosts, vCenter Server, vCenter Update manager and administration of VMs
- Creating virtual switch and configuring virtual switch setting and policies
- Build configure and deploy Linux based VMs and Templates and cloning virtual machines
- Involved in provisioning, configuring and deploying new windows server 2008 R2/ server 2012 and joining Domain
- Monitoring through Cacti and troubleshooting of file batches and providing incident resolution in defined SLA
- Administration, Designing, Configuration and Maintaining Complex Routed LAN/WAN/VPN/IPS Networks
- Managing routing & switching
- Working on security devices Including Cisco PIX, Cisco ASA, and IPS IDS
- Configuring IPSEC tunnel with different clients.
Senior Network Engineer
Inov8 Limited
04.2007 - 03.2013
- Provision, installation and configuration of windows 2008/2008 R2/2012 servers, SUSE Linux/Red Hat Enterprise Linux, upgrading windows 2003 on both physical and virtual machine
- Performance monitoring and tuning of ESX servers, vCenter Server and Virtual machines
- Installation of ESXi 4.1/5 hosts, vCenter Server, vCenter Update manager and administration of VMs
- Creating virtual switch and configuring virtual switch setting and policies
- Build configure and deploy Linux based VMs and Templates and cloning virtual machines
- Involved in provisioning, configuring and deploying new windows server 2008 R2/ server 2012 and joining Domain
- Monitoring through Cacti and troubleshooting of file batches and providing incident resolution in defined SLA
- Administration, Designing, Configuration and Maintaining Complex Routed LAN/WAN/VPN/IPS Networks
- Managing routing & switching
- Working on security devices Including Cisco PIX, Cisco ASA 5525, and IPS IDS.
Education
BS(IT) - IT
AIOU
06.2001 - 06.2005
Skills
Technical Trainings
AWS, RHCE, DevOps (Jenkins, GitHub, SVN) CCNA/CCNP R&S, CCNP Security, MCSEQualification: BS (IT) AIOUTimeline
Senior Manager Devops
Connectdotnet Private Limited
04.2019 - Current
Principal Network Engineer
Digital commerce & Payment Limited
05.2016 - Current
Senior Network /System Engineer
Wateen
03.2013 - 04.2016
Senior Network Engineer
Inov8 Limited
04.2007 - 03.2013
BS(IT) - IT
AIOU
06.2001 - 06.2005