06/03/2024 updated
IM
100 % available
Cloud-native / Kubernetes platform engineer
United Kingdom
Only remote
IEEE 802.1XLink Aggregation (Ethernet)Active Directory Federation ServicesApplication Programming Interfaces (APIs)Agile MethodologyApache AirflowLisp (Programming Language)Amazon Web ServicesAmazon CloudfrontAmazon Elastic Compute CloudAmazon S3Proxy ServersApache HTTP ServerApple IOSPenetration Testing
AWS EKS, Fargate, ADFS, agile project, Apache Airflow, CloudFront, DynamoDB, ElastiCache, EC2, RedShift, RDS, S3, SNS, SQS, VPC, AWS VPC, AWS, AWS DevOps, AWS services, Ansible, HBase, Apache, Hadoop, Hive, Spark, YARN, Zookeeper, API Gateway, IOS, API, APIs, Atlassian tools, AWS CLI, backup management, backups, backing up, Bash, bash scripting, Big Data, BitBucket, BGP, Cacti, Cassandra, Catalyst, CentOS, CircleCI, Cisco, Cisco technologies, Cisco IOS, Nexus, Cisco ASA, Cloud, Cloud Solutions, cloud-based, cloud infrastructure, Cloud Services, Cloudera, Impala, CloudFormation, CloudHub, CloudWatch, collaborative tools, complex network, network operations, security architecture, Concourse, configuration management, Confluence, CI/CD, CICD pipeline, continuous integration, DoS, Data Centers, Data Center, data pipelines, databases, database, DataDog, Debian, DevOps, DevSecOps, disaster recovery, Docker, docker compose, DNS, DHCP, DMVPN, ElasticSearch, EIGRP, etherchannel, ETL, Fedora, firewalls, Flask, Fortinet, FreeBSD, frontend, GitHub, GitLab, Gitlab CI, GoLang, Go language, GCP, Grafana, HDFS, Hashicorp, HSRP, HTTP, 802.1x, IPv6, IAM, integration tests, IIS, IMAP, IP Network, IPsec, IDS, Istio, Jira, Jenkins, Jinja2, Juniper, KVM, Kibana, Kubernetes, LACP, Linux, GNU/Linux, LISP, load balancers, MapReduce, MariaDB, backend services, microservices, Azure, Office, powerpoint presentations, SQL Server, MongoDB, Monitoring Systems, MPLS, Multicast, MySQL, Nagios, network access control, Network Architect, network infrastructure, network configuration, network intrusion detection system, Layer 3, network optimization, network design, routers, Network Security, Secure network, servers, network services, interconnect, NTP, network virtualization, NGINX, NoSQL, Node.JS, OSPF, OSPFv3, open source, open-source, OpenShift, OpenStack, OTV, PRTG, POP3, Postfix, PostgreSQL, Postgres, Prometheus, proxies, digital certificates, PKI, PySpark, Python, RabbitMQ, Rancher, Red Hat, RedHat, RHEL, Redis, Rest APIs, Rest API, Route53, routing, SQL, Suse, Scripting, security support, serverless, Service development, SMTP, Slack, SNORT, application delivery, penetration tests, SolarWinds, Solaris, PVST, Splunk, Sqoop, Squid, StoneGate, symphony, SYSLOG, high availability, TCP/IP stack, TACACS+, Terraform, SSL/TLS, SSL, tripwire, trunking, Ubuntu, unit tests, Unix, VTP, VMware ESXi, VLANs, VPLS, VPN, VPNs, VRRP, Virtual Switching, Virtualization, VMware, VoIP, Vue, vulnerability scanners, web security, SD-WAN, Powershell scripting
Experience
Professional experience10+ years
Freelancer since2015
Languages
EnglishFluentItalianBasic knowledgeJapaneseBasic knowledgeSpanishNative speaker
Project history
Responsible for pre-deployment, testing and integration based on Cisco and Alcatel-Lucent technologies:
* Working closely with the Designer and Development team to perform functional, non-functional and design validation
testing
* Creating design, test and handover documentation
* Deployment to production and validate the technologies.
* Working on two different projects:
o Voice interconnection project with another ISP based on Cisco 7600, CRS-1 and NCS 6000 devices using QoS
rate policing and IP to MPLS and MPLS to IP mapping, local preference and as-path prepending to control
outbound/inbound BGP traffic, unicast reverse path forwarding for BGP sessions, VRFs and MPLS.
o Validating QoS and MPLS features in order to downgrade hundreds of Alcatel-Lucent 7210 SASM/X and7750
SR12
* Working closely with the Designer and Development team to perform functional, non-functional and design validation
testing
* Creating design, test and handover documentation
* Deployment to production and validate the technologies.
* Working on two different projects:
o Voice interconnection project with another ISP based on Cisco 7600, CRS-1 and NCS 6000 devices using QoS
rate policing and IP to MPLS and MPLS to IP mapping, local preference and as-path prepending to control
outbound/inbound BGP traffic, unicast reverse path forwarding for BGP sessions, VRFs and MPLS.
o Validating QoS and MPLS features in order to downgrade hundreds of Alcatel-Lucent 7210 SASM/X and7750
SR12
Technical engineer and architect supporting network operations, network engineering, design and new architecture
development, pre-sales consultation services with focus on DC technologies:
* Cisco/Juniper technical reference person in the department working on all aspects of network design and
architecture, deployment new projects and supporting the current customer's infrastructure networks.
* Review of all network configuration changes for technical accuracy and impact previous the application.
* Design and deployment of several EX4200s as extension of the customer network (Government entity).
* Design and deployment a monitoring system based on Splunk and Nagios in DataCenters.
* Design and deployment of cluster of SRX240 in active/standby to interconnect the offices using routed-based VPNs.
(Government entity ).
* Design and implementation of new collapsed distribution core based on Nexus 5500, Nexus 20000 with Layer 3
features (equivalent to HM Treasure).
* Design, planning and implementation of critical DCI migration (equivalent to HMRC) to a new switched core based on
Nexus 7700 with F3 line-cards and VDCs supporting VSAN and ensuring continuous uninterrupted operation assuming
the agreed service levels.
* Design and implementation of 3 DCI based on Cisco VPLS technology and 6500 VSS (bank). At the same time, I
participate in the design of the deployment of another project of this financial company based on two Data Centers in
active-active using F5 as load balancers and Cisco devices.
* Design and LLD documentation of L3VPN solution using VRF for several internal services, design route targets
specifying export and import RTs, route distinguisher (RDs) to enable VRFs and MP-BGP sessions between PE routers
(main public service broadcaster).
* Pre-deployment of Advanced Network Access Control system based on Layer 2 authentication with 802.1x using
switches and supplicant, digital certificates. MAB and CoA for Voice and data VLANs and support during the solution
implementation in more than 2100 sites around the whole world.
* LLD and NRFU was written for each project as well as last escalation of the infrastructure support and training to the
end customer support team
development, pre-sales consultation services with focus on DC technologies:
* Cisco/Juniper technical reference person in the department working on all aspects of network design and
architecture, deployment new projects and supporting the current customer's infrastructure networks.
* Review of all network configuration changes for technical accuracy and impact previous the application.
* Design and deployment of several EX4200s as extension of the customer network (Government entity).
* Design and deployment a monitoring system based on Splunk and Nagios in DataCenters.
* Design and deployment of cluster of SRX240 in active/standby to interconnect the offices using routed-based VPNs.
(Government entity ).
* Design and implementation of new collapsed distribution core based on Nexus 5500, Nexus 20000 with Layer 3
features (equivalent to HM Treasure).
* Design, planning and implementation of critical DCI migration (equivalent to HMRC) to a new switched core based on
Nexus 7700 with F3 line-cards and VDCs supporting VSAN and ensuring continuous uninterrupted operation assuming
the agreed service levels.
* Design and implementation of 3 DCI based on Cisco VPLS technology and 6500 VSS (bank). At the same time, I
participate in the design of the deployment of another project of this financial company based on two Data Centers in
active-active using F5 as load balancers and Cisco devices.
* Design and LLD documentation of L3VPN solution using VRF for several internal services, design route targets
specifying export and import RTs, route distinguisher (RDs) to enable VRFs and MP-BGP sessions between PE routers
(main public service broadcaster).
* Pre-deployment of Advanced Network Access Control system based on Layer 2 authentication with 802.1x using
switches and supplicant, digital certificates. MAB and CoA for Voice and data VLANs and support during the solution
implementation in more than 2100 sites around the whole world.
* LLD and NRFU was written for each project as well as last escalation of the infrastructure support and training to the
end customer support team
Certificates
CKAD: Certified Kubernetes Application Developer
The Linux Foundation2022
AWS Certified Solutions Architect – Professional
AWS2021
AWS Certified Big Data – Specialty
AWS2020
AWS Certified Advanced Networking – Specialty
AWS2019