Network engineer: IP Routing, Switching and Security

Main activities: 

• Implementation and configuration of routing protocols (BGP, OSPF and EIGRP)

• Configuration of Cisco switches and routers

• Update of the hardware and software of the various equipment

• Implementation of redundancy solutions.

• Preventive and corrective maintenance of equipment.

• Level 3 incident handling

• Open and manage cases (tickets) with manufacturers

• VRF configuration

• MPLS L3VPN configuration

• Configuration and commissioning of routers with an MPLS Layer 3 VPNs solution, on ASR 900s.

• Configuration of the VSS solution (Stacking Cisco switches)

• VPC Configuration on Cisco Nexus 5000 Switches

• Migration of 3750 switches to 4500 X

• Configuration of Cisco Nexus switches: VDC, vPC, Fex, Nexus 9k / 7k / 5k / 3k / 2k

• Installation and configuration of Palo Alto firewalls: Upgrade, Daily administration: Routing and security rules (Policy), Cluster setup, NAT configuration

• IPSEC and SSL VPN configuration on Palo Alto firewalls

• Install and commission F5 load balancers

• Use the graphical interface and the CLI to configure the F5 load balancers

• Set up a BIG-IP F5 cluster

• Configure the different types of profiles (Compression, SSL, Persistence, etc.)

• Implement iRules on F5s

• Installation and configuration of Fortigate firewalls: Upgrade, Daily administration: Routing, security rules (Policy), Cluster setup, NAT configuration

• VPN configuration in IPSec (site-to-site)

• IPSEC and SSL VPN configuration on Fortigate firewalls

 

Technical environment:

• Cisco: ASR9000, 7600, Catalyst 2900, 3750, 3850, 4500, 6500 (en VSS), 7600

• Cisco Nexus N7k, N5K

• Palo Alto 100/ 5020

• Fortinet: Firewall FortiGate 60C/60D/70D/80C/80D/90D/200D

 

Main projects:

 

Project 1 : GIMAC (Central African Interbank and Electronic Banking Group)

• Regular Preventive and Curative Maintenance of the Cisco GIMAC Network Infrastructure.

• Deploy VPNs between GIMAC and its PARTNERS in (IKEV1 and IKEV2)

• Deploy High Availability (HA) on Cisco ASA-5525-X Firewalls

• Segment the GIMAC Server Farm according to PCI-DSS Requirements

• Deploy the GIMAC WIFI Network using the CISCO AP 1830-Series WIFI Access Points.

• Deploy and configure the Intercos between GIMAC and its Client SITES.

 

Technical environment:

• CISCO Mobility Express AP-1830 Serie,

• Cisco-Router (1100,1800, 1900,2900, 4321) Séries, (IOS ver. 12. X and 15.X), Cisco ASA5510,

• Cisco ASA-5515; Cisco ASA-5525-X ; ASDM version 7.2; CCP (Cisco Configuration Professional);

• Windows-Server 2012/2016, Cisco-IOS Switches (2960s , 3750, 3760 ).

 

Project 2 : CEPI (Caisse D’Epargne Populaire et D’Investissement)

• Regular Preventive and Curative Maintenance of the Cisco Network Infrastructure of CEPI.

• Ensure the proper functioning of the GET-VPN between the CEPI sites, their accessibility and their availability 24 hours a day.

• Optimize the Headquarters and BRANCHES Network according to Needs.

• Administer the WIFI NETWORK of CEPI

 

Technical environment:

• CISCO Mobility Express AP-1830 Serie,

• Cisco-Router (1100, 1800, 1900, 2900, 4321) Series, (IOS ver. 12. X and 15.X), Cisco ASA5510,

• Cisco ASA-5515; Cisco ASA-5525-X ; ASDM version 7.2; CCP (Cisco Configuration Professional);

• Windows-Server 2012/2016, Cisco-IOS Switches (2960s , 3750, 3760 ). 

 

Project 3 : AFRILAND FIRST BANK (NETWORK UPGRADE AND PARTITIONING PROJECT OF THE YAOUNDE RACECOURSE HEADQUARTERS SERVER FARM)

• Reconstitute the existing Architecture of each floor of the AFRILAND RACECOURSE YAOUNDE Headquarters.

• Interconnect and Configure the Access Layer, Network Core, Distribution and Edge in a New Network in order to perform a Migration.

• Connect and configure the Connections of the Stacks between CORE1 AND CORE2

• Deploy VPCs between NEXUSes.

• Integrate the Firepower 2130 and NEXUS-3700 Security Servers into the Server Farm and deploy the FMC (Firepower Management Center)

• Deploy the Cisco ISE for authentication of Users and Currencies in Radius and TACACS +.

• Begin the Migration of the different layers of the old cers the New Network according to the Roll-back procedures.

 

Technical environment :

 

• Cisco-FirePower (2130, 2140); Switches NEXUS Series 3700,

• Cisco-Router (1100, 1800, 1900, 2900, 4321) Series, (IOS ver. 12. X and 15.X), Cisco ASA5510

• Cisco ASA-5515; Cisco ASA-5525-X, Cisco ASA-5516-X; Windows-Server 2012/2016, Cisco-IOS Switches (2960S, 3750, 3760,), Cisco-IOS Switches 9300 Series

 

Project 4 :  DEPLOYMENT OF THE DIFFERENT AFRILAND FIRST BANK AGENCIES.

• Deploy and Interconnect the New Afriland First Bank Branches (Essos, Mokolo, Melen, Olembe, Bonapriso etc ... and ensure the effectiveness of the connection with other Branches.

• Configure the Voice, DATA and Videos Profiles in the different Branches, etc.

 

Technical environment:

• Cisco-Router (1100, 1800, 1900, 2900, 4321) Series, (IOS ver. 12. X and 15.X), Cisco ASA5510,

• Cisco ASA-5515; Cisco ASA-5525-X; Windows-Server 2012/2016, Cisco-IOS Switches (2960S,3750, 3760,)

 

Project 5 :  NFC-BANK (SECURITY PROJECT RELATING TO THE DEPLOYMENT OF CISCO ISE AND CISCO FIREWALLS FIREPOWERS.)

• Carry out a study of the architecture of the existing network of the Bank's Head Office and Bonandjo Business Unit for integration of the solution.

• Deploy and Install and configure the Cisco ISE solution and administer it according to the Bank's security needs.

• Deploy and Install and configure Cisco Firepower through the FMC, according to the security needs of the bank.

• Train Bank staff on these solutions.

 

Technical environment

• Cisco-FirePower (2130, 2140); Switches NEXUS Series 3700,

• Cisco-Router (1100, 1800, 1900, 2900, 4321) Series, (IOS ver. 12. X and 15.X), Cisco ASA5510,

• Cisco ASA-5515; Cisco ASA-5525-X , Cisco ASA-5516-X ; Windows-Server 2012/2016, Cisco-IOS

• Switches (2960s , 3750, 3760 , ) , Cisco-IOS Switches 9300 Series

Main activities:

• Boost the development of the training field.

• Principal Administrator of the Company Network.

• Ensure the management and proper functioning of Network Equipment (Routers, Switches, Cisco ASA 5525-X ..., IPS / IDS-4200 Series .... Servers.)

• Responsible for the sale and presentation of our various products and services:

• Training, IT services, Professional IT equipment.

• Launch the examination center for various network training, management, etc.

• Work on the various missions with our national and international partners in the field of IT and networks.

• Project manager, in charge of a team formed and with whom I work on our various research projects, particularly in the area of ​​networks, databases and WEB.

• Facilitator and Principal Coordinator of the various IT seminars and networks for companies ...

• Grow the business by adding touches of personal innovation or offering additional services.

• Upgrading of company personnel. (Corporate Training) CCNA / CCNP Network and Security

• Implementation and configuration of routing protocols (BGP, OSPF and EIGRP)

• Configuration of Cisco switches and routers

• Update of the hardware and software of the various equipment

• Implementation of redundancy solutions.

• Preventive and corrective maintenance of equipment.

• Level 3 incident handling

• Open and manage cases (tickets) with manufacturers

• VRF configuration

• MPLS L3VPN configuration

• Configuration and commissioning of routers with an MPLS Layer 3 VPNs solution, on ASR 900s.

• Configuration of the VSS solution (Stacking Cisco switches)

• VPC Configuration on Cisco Nexus 5000 Switches

• Migration of 3750 switches to 4500 X

• Configuration of Cisco Nexus switches: VDC, vPC, Fex, Nexus 9k / 7k / 5k / 3k / 2k

• Installation and configuration of Palo Alto firewalls: Upgrade, Daily administration: Routing and security rules (Policy), Cluster setup, NAT configuration

• IPSEC and SSL VPN configuration on Palo Alto firewalls

• Install and commission F5 loadbalancers

• Use the graphical interface and the CLI to configure the F5 loadbalancers

• Set up a BIG-IP F5 cluster

• Configure the different types of profiles (Compression, SSL, Persistence, etc.)

• Implement iRules on F5s

• Installation and configuration of Fortigate firewalls: Upgrade, Daily administration: Routing, security rules (Policy), Cluster setup, NAT configuration

• VPN configuration in IPSec (site-to-site)

• IPSEC and SSL VPN configuration on Forigates firewalls

 

Technical environment

• Cisco-Router (1800, 1900,2900) Séries, (IOS ver. 12. X and 15.X), Cisco ASA5510,

• Cisco ASA-5515; ASDM version 7.2; CCP (Cisco Configuration Professional); Windows-Server 2012/2016, Cisco-IOS Switches (2960s , 3750 ).

• Routage BGP, OSPF, MPLS, xDSL

• Cisco: ASR9000, 7600, Catalyst 2900, 3750, 3850, 4500, 6500 (en VSS),

• Cisco Nexus N7k, N5K

• Palo Alto 100/ 5020

• Fortinet: Firewall FortiGate 60C/60D/70D/80C/80D/90D/200D

 

Main projects

 

Project 1 : Solicited by the European Union as Project Manager in charge of the Interconnection linking the 05 police sites to the main site of the Ministry of Justice in Chad, Ndjamena.

• Manage a Team of 10 IT Engineers and Technicians, for the realization of the said project

• Connect the different sites through a RADWIN Radio Loop, Each Site having at its periphery CISCO Series 1841 and 2911 Routers separating each Local Network at the Loop.

• Implement a DMVPN to Connect the different Sites thanks to the MGRE protocol, the IPsec protocol to Secure the Tunnel and make the Ministry Site the Central Site.

• Configure the Cisco ASA 5525-X to protect the farm of the Department's Servers through the defined Filtering rules

• Establish an SSL VPN (Anyconnect Full Client) tunnel on the ASA to allow staff from different local sites secure remote access to the Servers

• Train the IT staff of the Ministry on the management and administration of Interco.

Technical environment

• Cisco-Router (1100,1800, 1900,2900) Series, (IOS ver. 12. X and 15.X), Cisco ASA5510,

• Cisco ASA-5515; Cisco ASA-5525-X ; ASDM version 7.2; CCP (Cisco Configuration Professional);

• Windows-Server 2012/2016, Cisco-IOS Switches (2960s , 3750 ).

 

Project 2 : Solicited by the EU as part of the PRAJUST-2 Project for the deployment of the THINMANAGER solution that can Administer Light Customers, PCs, and other equipment at different sites.

• Deploy Windows Server 2016

• Install the Active-Directory, DNS, DHCP, RDP roles.

• Install the THINMANAGER Version 11.02 Solution, on the Windows Server.

• Configure Applications to Share via Thimanager over RDP.

• Configure Terminals, Display-Servers and Dispaly-Clients ...

• Synchronize AD users with Thinmanager

• Configure DHCP on the Server and define the ranges for the different Sites.

• Go to the different Sites and install the Terminals and check that they download their Firmware from the Server at the Central Headquarters.

 

Technical environment

• Thinmanager Version 11.02, Cisco-Router (1100,1800, 1900,2900) Séries,

• (IOS ver. 12. X and 15.X), Cisco ASA5510, Cisco ASA-5515; Cisco ASA-5525-X ; ASDM version 7.2; CCP (Cisco Configuration Professional);

• Windows-Server 2012/2016, Cisco-IOS Switches (2960s , 3750 ).

 

Project 3 : Solicited by Coton-Tchad SN as Project Manager for the Diffusion Works of the LOCAL WIFI network with the ACCESS POINT ARUBA INSTANT.

• Segment IP Address Ranges

• Install and configure 07 ARUBAs Instant AP

• Define the SSIDs and passwords to configure.

• Define a MASTER AP and configure the other APs in the high availability CLUSTER which gives them the Possibility of becoming MASTER AP if the main MASTER AP becomes unavailable.

• Push the Configurations defined on the Master AP on the AP Clients to form the CLUSTER.

• Train Coton-Tchad SN staff on the administration of the Solution.

 

Technical environment

• (07) ARUBA-AP Instant 207,

Main activities:

• Drafting and responses to calls for tenders.

• Customer Support (Managed Services)

• Deployment and Administration of the Company's network.

• Deployment and Administration of Windows Server 2012R2 for different companies.

• Define Security policies with GPOs on Windows Server 2012R2

• Deployment of the Cisco ASA 5510 firewall tool with SSL-VPN / ASDM

• Deployment of Site-to-Site VPN on Cisco Routers

• Cisco training animation: Routing & Switching, Security (CCNA, CCNP)

• Implementation and configuration of routing protocols (BGP, OSPF and EIGRP)

• Configuration of Cisco switches and routers

• Update of the hardware and software of the various equipment

• Implementation of redundancy solutions.

• Preventive and corrective maintenance of equipment.

• Level 3 incident handling

• Open and manage cases (tickets) with manufacturers

• VRF configuration

• MPLS L3VPN configuration

• Configuration and commissioning of routers with an MPLS Layer 3 VPNs solution, on ASR 900s.

• Configuration of the VSS solution (Stacking Cisco switches)

• VPC Configuration on Cisco Nexus 5000 Switches

• Migration of 3750 switches to 4500 X

• Configuration of Cisco Nexus switches: VDC, vPC, Fex, Nexus 9k / 7k / 5k / 3k / 2k

• Installation and configuration of Palo Alto firewalls: Upgrade, Daily administration: Routing and security rules (Policy), Cluster setup, NAT configuration

• IPSEC and SSL VPN configuration on Palo Alto firewalls

• Install and commission F5 loadbalancers

• Use the graphical interface and the CLI to configure the F5 loadbalancers

• Set up a BIG-IP F5 cluster

• Configure the different types of profiles (Compression, SSL, Persistence, etc.)

• Implement iRules on F5s

• Installation and configuration of Fortigate firewalls: Upgrade, Daily administration: Routing, security rules (Policy), Cluster setup, NAT configuration

• VPN configuration in IPSec (site-to-site)

• IPSEC and SSL VPN configuration on Forigates firewalls

 

Environnement Technique :

• Cisco-Router (1800, 1900,2900) Séries, (IOS ver. 12. X and 15.X), Cisco ASA-5510,

• Cisco ASA-5515; ASDM version 7.2; CCP (Cisco Configuration Professional); Windows-Server 2012/2016,

• Cisco-IOS Switches (2960s , 3750 ).

• Routage BGP, OSPF, MPLS, xDSL

• Cisco: ASR9000, 7600, Catalyst 2900, 3750, 3850, 4500, 6500 (en VSS), 7600

• Cisco Nexus N7k, N5K

• Palo Alto 100/ 5020

• Fortinet: Firewall FortiGate 60C/60D/70D/80C/80D/90D/200D