Mohammad Nawabi

• Monitored network activities to quickly detect and resolve operational and security issues.
• Led planning and technical design activities for routine operations and special projects.
• Managed purchasing and installation of networking equipment such as core routers and switches.
• Standardized processes and procedures for network maintenance and configuration changes, reducing errors and streamlining operations.
• Configured, tested and maintained LAN/WAN components and connections.
• Recommended network security standards and upgrades to management.
• Installed and configured network security solutions such as VPNs, Firewalls and intrusion detections and mitigation tools.
• Streamlined troubleshooting processes by creating detailed documentation of network infrastructure, configurations, and topologies.
• Designed scalable WAN architectures to accommodate growing bandwidth requirements while minimizing costs.
• Architected high-availability networks incorporating redundancy at all levels for seamless failover during outages or maintenance events.
• Managed vendor relationships for hardware procurement, software upgrades, and technical support services to ensure optimal resource utilization.
• Implemented WAN and LAN designs in multi-datacenter configurations.
• Monitored network capacity and performance to diagnose and resolve complex network problems.
• Assisted with implementation and support of network monitoring tools.
• Mentored junior engineers on best practices in networking technologies, resulting in increased team efficiency and effectiveness.
• Developed custom scripts for automating routine tasks, increasing productivity and reducing human error potential within the department.
• Reduced downtime for essential systems by proactively identifying and resolving network issues.

• Monitored network capacity and performance to diagnose and resolve complex network problems.
• Provided complete end-to-end engineering and installation of route-based IP network solutions.
• Performed troubleshooting for Cisco, and packet analysis.
• Provided network support services for devices such as hubs, bridges, routers, and other hardware.
• Boosted system availability by conducting regular maintenance tasks, including firmware updates and hardware replacements.
• Designed and deployed scalable network infrastructure for increased efficiency and reliability.
• Created VPN infrastructure and allowed for secure remote connections.
• Oversaw development and maintenance of computer systems, server upgrades and operating systems.
• Managed vendor relationships to negotiate contracts, procure equipment, and receive timely technical support when needed.
• Integrated fixed wireless connectivity into facilities requiring high-speed networks.

• Designed, setup and build APS network to provide connectivity and support for all Afghanistan government and private banks and financial institution.
• • The network design consists of Cisco 6509-E Catalyst switches, Cisco ASA 5555-X firewalls, Cisco ISR 4451-X and Cisco Firepower 2100.
  • Configred F5 Local Traffic Manager to distribute traffic load to Smart Vista application servers.
  • Configured IPSec VPN between APS HQ and private and government banks and financial sectors.
• Planned implementation of network enhancements and upgrades.
• Led planning and technical design activities for routine operations and special projects.
• Monitored network activities to quickly detect and resolve operational and security issues.
• Managed purchasing and installation of networking equipment such as core routers and switches.
• Configured, tested and maintained LAN/WAN components and connections.
• Standardized processes and procedures for network maintenance and configuration changes, reducing errors and streamlining operations.
• Installed and configured network security solutions such as VPNs, Firewalls and intrusion detections and mitigation tools.
• Designed scalable WAN architectures to accommodate growing bandwidth requirements while minimizing costs.

• • Design, setup and build Ministry of Defense Data Center Network to provide network access for 15000 users.
  • Data Center network design consist of Cisco Nexus 7710 switches, Cisco ASA 5585-X firewalls, Cisco ASA5585-X Firepower, Cisco ASR 1001, Cisco 6509-E Catalyst Switches, Cisco 4510-RE switches, Cisco 3945 ISR routers, Cisco 6500 ASA Module, Cisco BE7000H, Cisco CME, Cisco CUCM, Cisco ASA 5555-X Firepower, Cisco ACS 5.7, Cisco ISE, Sophos 750 XG UTM firewalls, SolarWinds NPM and NCM, PRTG, Cisco WLC 5520, VMware EXSI 6.0, VMware VCenter 6.0.
  • Configured Palo Alto 5280 firewall on network to perform URL filtering packet inspection.
  • Configured Palo Alto 5280 high availability as active and passive mode.
  • Setup and configured technologies and routing protocols such as BGP, ISIS, L3VPN, VRF, MPLS, OSPF, EIGRP, redistribution, IP SLA, VTP, STP, HSRP, VRRP, VLAN, 802.1q, NAT, SNMP, NTP, Configuration Backups, IPSec, Site2Site VPN, DMVPN, IPS and Cisco Any Connect.
  • Efforts in network restoration and monitoring. This information can be obtained but not limited to programs such as SolarWinds Orion, NPM, NCM, PRTG, Cacti and LEM.
  • Ensure that the MoD Network Wireless Infrastructure is maintained to the highest levels of security and availability.
  • Network Design and Solution provider on each expansion site, including system, VOIP, Security and network.
  • Responsible to lead to the configuration control board (CCB), The CCB shat consist of personnel appointed by the GSG6 Directorate with contractor providing operation advisory capacity. Changes shall consist of routers, switches, Cisco Unified Communication CME, CUCM and BE6000/BE7000, Cisco Nexus 7710 switches, Cisco 4500E/6500E switches, Cisco NG Intrusion prevention system (IPS) 4510, Cisco Wireless LAN controllers, Cisco NAC appliances, ASA 5525-X, 5555-X 5585-X firewall/SFRs (Firepower) appliances, IOS upgrades, and addition/changes to the MoD network architecture.
• Led planning and technical design activities for routine operations and special projects.
• Monitored network activities to quickly detect and resolve operational and security issues.
• Managed purchasing and installation of networking equipment such as core routers and switches.
• Standardized processes and procedures for network maintenance and configuration changes, reducing errors and streamlining operations.
• Installed and configured network security solutions such as VPNs, Firewalls and intrusion detections and mitigation tools.
• Recommended network security standards and upgrades to management.
• Configured, tested and maintained LAN/WAN components and connections.
• Architected high-availability networks incorporating redundancy at all levels for seamless failover during outages or maintenance events.
• Implemented robust backup solutions to protect critical data from loss or corruption due to system failures or malicious attacks.
• Designed scalable WAN architectures to accommodate growing bandwidth requirements while minimizing costs.

• Configure, Monitor, Maintain and troubleshooting Ministry of Defense strategic communication system which consist of Cisco ASA firewalls, Cisco ISR and ASR routers, different Cisco Catalyst switches 2960S, 3750S, 3750X, 3650S and 3850, Cisco Unified Communication CME, Cisco 4500 Catalyst switches, Cisco 6500 –E switches, Cisco IPS 4510, Cisco FWM, Cisco IDSM and Cisco ASA 5525-X.
• Develop technical solutions to complex problems which require the regular use of ingenuity and creativity.
• Responsible for overall network communication, expansion, improvements, implementation, configuration, management, maintenance, monitoring, security, performance and insurance.
• Performed network operating administration and engineering duties.
• Planed and developed network layouts and configures network and systems to user environments.
• Maintained current knowledge of relevant technology as assigned.

• Monitored network activities to quickly detect and resolve operational and security issues.
• Managed purchasing and installation of networking equipment such as core routers and switches.
• Led planning and technical design activities for routine operations and special projects.
• Configured, tested and maintained LAN/WAN components and connections.
• Installed and configured network security solutions such as VPNs, Firewalls and intrusion detections and mitigation tools.

• Implemented corrective plans of action for network availability and latency.
• Established network specifications and analyzed workflow, access, information, and security requirements.
• Led training sessions for junior staff members, fostering a strong team-oriented atmosphere conducive to professional development and knowledge-sharing practices.
• Collaborated with cross-functional teams to develop comprehensive project plans for large-scale network initiatives.
• • Establishes network specifications by conferring with users; analyzing workflow, access, information, and security requirements; designing router administration, including interface configuration and routing protocols.
  • Established network by evaluating network performance issues including availability, utilization, throughput, good put, and latency; planning and executing the selection, installation, configuration, and testing of equipment; defining network policies and procedures; establishing connections and firewalls.
  • Maintained network performance by performing network monitoring and analysis, and performance tuning; troubleshooting network problems; escalating problems to vendor.
  • Secures network by developing network access, monitoring, control, and evaluation, maintaining documentation.
  • Prepares users by designing and conducting training programs, providing references and support.
  • Upgrades network by conferring with vendors; developing, testing, evaluating, and installing enhancements.
  • Network design and configuration of CISCO devices such as Cisco 6500 Series Switch, Cisco 3900 Series router and ASA firewall 5520.

• • Managing and maintaining domain active directory, DNS, DHCP, File Sever, AV Server, and Backup Server and read only domain controller.
  • Trained IT support staff in new software and new hardware equipment and its usage.
  • Managing IP addresses and keeping inventory of hardware equipment.
  • Troubleshooting of Servers, Clients, Network, Switches and Routers
  • Monitoring Branches TMG Firewall daily.
  • Check and auditing branches computers and network performance.
• Configured hardware, devices, and software to set up work stations for employees.
• Managed hardware and software inventory, ensuring timely updates and replacements as needed.
• Maintained servers and systems to keep networks fully operational during peak periods.
• Provided exceptional customer service by promptly addressing problems reported by endusers.
• Maintained a comprehensive knowledge of current industry trends, developments, tools, or techniques relevant to the role of an IT specialist.
• Evaluated emerging technologies for feasibility, cost-effectiveness, and potential value-add to the company''s IT ecosystem.

• Maintained cleanliness and organization of warehouse workspace to promote safety and accessibility for all staff members involved in handling inventory items.
• Provided accurate data entry for all received items, ensuring timely updates to the inventory database.
• Completed physical inventory counts each month.
• Assisted with training new team members on best practices in inventory control, providing guidance and mentoring for their professional development within the organization.
• • Daily recording of invoices to the database
  • Solving hardware and software issue
  • Managing network environment
  • Troubleshooting