Chiraphon Kraiya
Network Engineer | Network Automation & ISP Infrastructure
Professional Summary
Network Engineer who also ships production software: 7+ years running ISP-scale, multi-vendor infrastructure (Cisco IOS-XE/XR, Huawei VRP, FortiOS) under strict SLA requirements — and the Python/FastAPI engineer who automated it. Built the automation platform (FastAPI, Netmiko, Jinja2, Docker) that cut circuit provisioning time by 70% and manual operations by 65%, without sacrificing the operational safety and rollback discipline enterprise networks demand.
Professional Experience
Network Engineer (Provisioning)
Aug 2022 – Present- ISP Enterprise Provisioning & Delivery: Owned end-to-end network provisioning for enterprise circuits (PE/CE, L2/L3, MPLS, DWDM), reliably delivering ~30 circuits per week in high-scale ISP production environments.
- Network Automation Platform: Designed and developed a Python-based configuration automation engine (FastAPI, Jinja2, SAP API Integration), reducing circuit provisioning turnaround time by 70% and eliminating manual calculation errors.
- NetOps API & ChatOps Orchestration: Built a production-grade Network Operations API using FastAPI and Netmiko integrated with n8n and Line Messenger, automating port status diagnostics and bandwidth adjustments, cutting manual repetitive tasks by 65%.
- Production Safety & Zero-Impact Deployment: Implemented dry-run validation mechanisms and non-destructive deployment workflows for multi-vendor configuration pushes, designed to prevent unintended service disruptions during live changes.
- L2/L3 Incident Escalation & SLA: Provided escalation support for complex ISP network incidents, restoring mission-critical customer circuits within 3-hour MTTR targets and maintaining 99.95% SLA compliance.
- Change Management & Maintenance: Executed scheduled maintenance window firmware upgrades and security hardening on multi-vendor enterprise routers, switches, and Next-Generation Firewalls (NGFW), adhering strictly to change control and rollback protocols.
- Proactive Network Monitoring: Leveraged Grafana API and PRTG Network Monitor to establish real-time circuit health visibility and proactive fault detection.
Technical Engineer
Feb 2021 – Feb 2022- Designed and deployed structured cabling systems and physical network infrastructure for enterprise customer sites.
- Executed on-site troubleshooting, preventive maintenance, and hardware repair for network switching nodes.
- Produced precise AutoCAD-based as-built engineering drawings to guarantee documentation accuracy and project handover integrity.
RF Engineer (Contract)
Mar 2019 – Dec 2019- Conducted RF field testing, drive tests, and parameter optimization (RRU and antenna alignment) for mobile carrier networks.
- Diagnosed and resolved 4G LTE cellular data throughput bottlenecks to improve network stability and KPI standards.
Network Engineer (Contract)
Jun 2018 – Jan 2019- Configured and verified multi-vendor enterprise routing and switching infrastructure for corporate post-sales deployments.
- Delivered Tier-2 technical support and on-site troubleshooting for customer WAN connectivity and VLAN segmentation issues.
Service Engineer
Aug 2016 – May 2018- Installed, integrated, and maintained enterprise telecommunication and unified collaboration systems.
- Conducted preventive maintenance cycles and delivered technical handover training for enterprise clients.
Key Featured Engineering Projects
Network Configuration & CID Service Portal
A production-grade network automation portal built with FastAPI & Python that automates multi-vendor router/switch configuration generation based on Circuit IDs (CID). It interfaces directly with the internal SAP Backend and authenticates users via Microsoft Azure AD SSO, cutting manual configuration creation time from hours to minutes while automating CIDR subnet and wildcard mask calculations to eliminate manual math errors.
account_tree
Technical Architecture, Safety Controls & Visual Flow
- Stateless GitOps Architecture: Decoupled device templates and service profiles, fetching them dynamically via GitLab/GitHub APIs with TTL caching.
- Data Integrity & Subnet Calculation: Automated CIDR IP subnetting, wildcard mask calculation, and interface normalization (e.g. `GigabitEthernet` vs `GE`).
- Complex Topologies: Full dynamic support for Dual-Homed Routers (Active/Standby) and L2 EVPN (Originate/Terminate nodes).
- Security & Auditing: Jinja2 SandboxedEnvironment eliminates SSTI risks; SQLite transaction logging tracks configuration history for audit compliance.
Network Operations API & ChatOps Gateway
A production-grade middleware API gateway built with FastAPI & Netmiko that abstracts complex, risk-prone SSH CLI sequences into standardized, type-safe RESTful API endpoints. Integrated with n8n and Line Messenger ChatOps to enable Level-1 network support teams to query port statuses and execute controlled speed adjustments safely.
- CLI Parsing Engine: Engineered advanced Regex parsing to transform raw unstructured CLI terminal text from multi-vendor network devices (VRP / Enterprise Network OS) into structured JSON schemas.
- Connection Safety: Implemented Python Context Managers for Netmiko SSH sessions, ensuring automatic connection teardown and preventing stale SSH sessions on network devices.
- Fault Tolerance: Built custom exception handling layers translating raw device connection timeouts and authentication errors into standard HTTP error responses.
Bandwidth & QoS Automation with Grafana Sync
An end-to-end automation system for managing complex multi-tier Traffic Policy shaping (Domestic vs. International bandwidth) on multi-vendor enterprise network devices, with automated two-way synchronization into Grafana Monitoring Dashboards via REST APIs.
- Non-Destructive QoS Updates: Preserves original Burst parameters (CBS/PBS) and enforces strict Network OS syntax compliance and QoS shaping rules to prevent production traffic drops.
- Pre-Flight Dry-Run: Generates command previews allowing engineers to review configuration diffs before deploying live changes.
- Monitoring Automation: Automatically queries Grafana API to update panel titles and bandwidth thresholds matching new provisioned speeds.