PROFESSIONAL SUMMARY

Network Engineer who also ships production software: 7+ years running ISP-scale, multi-vendor infrastructure (Cisco IOS-XE/XR, Huawei VRP, FortiOS) under strict SLA requirements — and the Python/FastAPI engineer who automated it. Built the automation platform (FastAPI, Netmiko, Jinja2, Docker) that cut circuit provisioning time by 70% and manual operations by 65%, without sacrificing the operational safety and rollback discipline enterprise networks demand.

TECHNICAL SKILLS

PROFESSIONAL EXPERIENCE

• ISP Enterprise Provisioning & Delivery: Owned end-to-end network provisioning for enterprise circuits (PE/CE, L2/L3, MPLS, DWDM), reliably delivering ~30 circuits per week in high-scale ISP production environments.
• Network Automation Platform: Designed and developed a Python-based configuration automation engine (FastAPI, Jinja2, SAP API Integration), reducing circuit provisioning turnaround time by 70% and eliminating manual calculation errors.
• NetOps API & ChatOps Orchestration: Built a production-grade Network Operations API using FastAPI and Netmiko integrated with n8n and Line Messenger, automating port status diagnostics and bandwidth adjustments, cutting manual repetitive tasks by 65%.
• Production Safety & Zero-Impact Deployment: Implemented dry-run validation mechanisms and non-destructive deployment workflows for multi-vendor configuration pushes, designed to prevent unintended service disruptions during live changes.
• L2/L3 Incident Escalation & SLA: Provided escalation support for complex ISP network incidents, restoring mission-critical customer circuits within 3-hour MTTR targets and maintaining 99.95% SLA compliance.
• Change Management & Maintenance: Executed scheduled maintenance window firmware upgrades and security hardening on multi-vendor enterprise routers, switches, and Next-Generation Firewalls (NGFW), adhering strictly to change control and rollback protocols.
• Proactive Network Monitoring: Leveraged Grafana API and PRTG Network Monitor to establish real-time circuit health visibility and proactive fault detection.

• Designed and deployed structured cabling systems and physical network infrastructure for enterprise customer sites.
• Executed on-site troubleshooting, preventive maintenance, and hardware repair for network switching nodes.
• Produced precise AutoCAD-based as-built engineering drawings to guarantee documentation accuracy and project handover integrity.

• Conducted RF field testing, drive tests, and parameter optimization (RRU and antenna alignment) for mobile carrier networks.
• Diagnosed and resolved 4G LTE cellular data throughput bottlenecks to improve network stability and KPI standards.

• Configured and verified multi-vendor enterprise routing and switching infrastructure for corporate post-sales deployments.
• Delivered Tier-2 technical support and on-site troubleshooting for customer WAN connectivity and VLAN segmentation issues.

• Installed, integrated, and maintained enterprise telecommunication and unified collaboration systems.
• Conducted preventive maintenance cycles and delivered technical handover training for enterprise clients.

KEY ENGINEERING PROJECTS

• Designed and developed a Python-based automation gateway and dynamic template rendering engine that integrates SAP enterprise data with multi-vendor network devices (Enterprise Network OS / IOS-XE / VRP).
• Stateless GitOps Architecture: Built a decoupled gateway using FastAPI fetching device templates dynamically via GitLab/GitHub APIs with TTL caching.
• Data Integrity & Subnet Calculation: Implemented a robust Pydantic validation architecture to sanitize SAP payloads, calculate CIDR subnets/wildcard masks, and normalize port designations automatically.
• Security & Sandboxing: Secured dynamic configuration generation using Jinja2 SandboxedEnvironment (mitigating SSTI/RCE risks) and integrated Microsoft Azure AD SSO (OAuth2/OIDC) with audit logging.

• Developed a production-grade Network Operations API using FastAPI and Netmiko, transforming complex multi-vendor CLI workflows into standardized RESTful endpoints.
• Engineered ChatOps workflows integrated with n8n and Line Messenger, enabling Level-1 support teams to execute port status checks and bandwidth adjustments safely.
• Implemented robust CLI parsing using Regex for multi-vendor devices, Python Context Managers for SSH connection teardown, and structured exception handling for production safety.

• Built automation systems for Bandwidth and QoS management on multi-vendor network devices in ISP environments, supporting split Domestic/International traffic policies.
• Implemented dry-run workflows and non-destructive logic to preserve existing QoS burst parameters (CBS/PBS) and prevent packet drops across network devices.
• Integrated automation with Grafana REST APIs to synchronize network policy changes with live monitoring dashboards.

EDUCATION & CERTIFICATIONS