Description

When multi-cloud networks fail, the issue is rarely obvious.

I’ve worked on global environments where MPLS, SD-WAN, and cloud connectivity all intersect—and where outages impact real business operations.

By combining deep network expertise with automation (Terraform, Python), I help identify root causes, stabilize systems, and design architectures that scale reliably.

I focus on solving complex networking problems that others struggle to isolate.

Languages

English
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

Verizon,
Senior Network Architect
January 2020 - Today (6 years and 5 months)
Prague, Czechia
• • Designed and deployed global SD-WAN architectures across AWS, Azure, and GCP for enterprise customers operating in multi-cloud environments.
• • Led migration initiatives from legacy MPLS networks to SDN-based solutions, improving scalability and operational efficiency.
• • Designed and operated global enterprise network infrastructures across data centers and office locations, ensuring high availability and performance
• • Built and supported LAN/WAN architectures, including routing, switching, segmentation, and secure connectivity across hybrid environments
• • Worked extensively with Cisco Nexus, IOS/IOS-XE platforms, and multi-vendor environments including Arista EOS
• • Designed and troubleshot Layer 3 networks (BGP, OSPF, route redistribution, inter VLAN routing) across large-scale deployments
• • Developed Infrastructure as Code using Terraform, AWS CDK (Python), and CloudFormation to automate provisioning of VPCs, subnets, and cloud workloads.
• • Automated network and cloud operations using Python, reducing manual effort and improving deployment reliability.
• • Built and tested containerized network functions using Kubernetes and OpenStack based whitebox environments.
• • Integrated hybrid data center architectures across Cisco, Juniper, and Arista platforms.
• • Troubleshot complex end-to-end connectivity issues across global service provider networks, including IPsec and cloud interconnects.
• • Provided L4 escalation support and led a team of network/security engineers in resolving critical production issues.
• • Designed secure connectivity solutions including IPsec tunnels and Palo Alto-based security architectures.
• • Implemented and validated L2/L3 VPN services for enterprise customers across global infrastructure.
• • Collaborated directly with customers to resolve complex technical challenges and deliver tailored network solutions.
Multi-Cloud Network Architecture Troubleshooting Complex Global Networks
AsiaTech
Senior Network Engineer
January 2015 - January 2019 (4 years)
• • Designed and implemented large-scale IP/MPLS networks across multiple data centers and service provider environments.
• • Delivered L2VPN and L3VPN proof-of-concept solutions, improving service scalability and reducing operational complexity.
• • Optimized CGNAT (F5) performance under high-load conditions, mitigating packet loss affecting millions of users.
• • Automated network operations using Python and Ansible, improving efficiency and reducing manual configuration errors.
• • Configured and optimized security infrastructure including Fortinet, Cisco ASA, and IPS systems.
• • Contributed to IP planning, network design, and capacity optimization initiatives.
• • Engaged with vendors and stakeholders to support deployment and troubleshooting efforts.
Troubleshooting Complex Global Networks
Ayande Bank,
Senior Network Engineer and Team Leader
January 2010 - January 2015 (5 years)
• • Led network design, implementation, and operations for a large enterprise infrastructure serving 500+ branches.
• • Designed and deployed MPLS L2/L3 VPN solutions for data center interconnect and enterprise services.
• • Managed and optimized data center infrastructure, aligning with industry standards for security and performance.
• • Supervised and mentored a team of network engineers, supporting skill development and operational excellence.
• • Implemented layered security architecture (defense-in-depth) across network and application layers.
• • Configured and optimized firewalls (Juniper SRX, Cisco ASA, Fortinet) and IPsec based connectivity solutions.
• • Led virtualization initiatives, migrating services from physical infrastructure to VMware-based environments.