Network and security specialist

Nader Javanmardi

Network, Security and System Expert, Computer Science Trainer

Email: nader.javanmardi@gmail.com

I am available as soon as getting request. I am looking forward to finding senior,

management or high skilled IT jobs’ fileds.

Summary

Network engineer and Security specialist with 19-years of experience in hardware and network support,

security architecture and configuration. I administrate, troubleshoot and support advanced Enterprise

IP network infrastructures and security solutions. I have in numerous projects optimized and updated

existing networks and implemented new networks from initial design to delivery. Not only having

excellent communication’s skills and good team player, and also leading and teaching colleagues and

customers to achieve company goals. Clearly, with having noteworthy experience makes predictable,

hardworking characteristics and good teamwork leader to handle either various human resources’

troubles and technical issues and preparing cool and calm place for both staffs and clients in the worst

conditions.

Education

2014-2016 M. Sc. in S/W Engineering from Safahan higher education institute, Iran

2011- 2013 B. Sc. in S/W Engineering from Safahan higher education institute, Iran

2008-2010 Associate degree in IT from Esfahan Scientific Industrial Services, Iran

Courses and Certifications

Fortinet (NSE1, 2)

Splunk

VMWare vSAN and NSX Expert

VOIP Security and Engineer

Cisco CCNA Security, CCNA R/S, CCNP R/S and CCDA

VCP and VCA (VMware)

Storage+ (Comptia)

MTCUME, MTCIPv6E, MTCINE, MTCTCE, MTCWE, MTCRE and MTCNA (Mikrotik)

Penetration Test and Anti Hack

SCSC, SCA and SCE (Sophos)

Citrix XenApp

Crisis management of Tehran University

Linux Advanced (Red Hat Advanced Server) and Linux Fundamental

Infrastructure of Data Security BS-7799

Windows 2003 Server (MCP) and Windows XP (MCP)

Term of application of Security

Skills & Expertise

• Routing Skills: Switching and Security Mechanisms

• Switching Skills: Switching and Security L2 to L4 Mechanisms

• Security Skills: IPsec, dot1x, VPN Technologies, IDS, IPS, IOS Firewall, L2 to L7, NGFW, Snort, Mail

Gateway, Open source Firewall

• MPLS Skills: MPLS-VPLS

• QoS Skills: Policing, Shaping, Rate Limiting.

Work experience

September 2019 – present

IT manager Tamin Sanat

More than 50 employers in two branches with variety of devices like voip gateways, windows

servers, open source storages, cyberoam firewalls and several routers and gateways and internal

mail server and domains and also several sip trunks between our central office and abroad. We

have 160 domains and 10 hosts on famous hosting companies in different countries.

Network and System manager Resane Pardaz Sepahan

Together with two other engineers, we design, implement and take care of the configuration for

customers as well as render technical support for establishing Internet in different cities in

Esfahan province. We have more than 2000 WiFi users and 3000 ADSL users. We work with

Mikrotik, EnGenius, Ubiquiti, Cisco devices. Also with Zabbix and Cacti for monitoring. As

operation system, we use windows server 2016 and Linux Ubuntu and Centos. We support our

customers by phone, remote and online.

Senior Data Centre Engineer Ariana Gostar Spadana

NOC specialist in Data Centre, the main duties were R&D and design, implement and troubleshooting and

develop existing services. Working by Cisco switch 6509 and router 7603; definition of QoS like traffic

shapping and traffic policy with BGP routing protocol, I installed and controlled web caching and defined

some ACLs for redirect web to software. Supervised network traffic and bandwidth with Zabbix and

advocating several macro waves links between our data center and our customers. Used VMware and

clustering and HA on more than 100 servers in data center. I used all OS platforms and distribute 5 gigabits

Internet through Esfahan province. And Elastix as a PBX and Zycoo IP phone, changing extension and

configuration and IVRs. I installed Centos DNS server (BIND 9) and protected with Snort 3 and CSF for all

internet users and monitored with Solawinds SAM.

Network expert Aramin IT, Basa Co., Civil Organization & Samen‐ol aemeh Esfahan

The main duties were consultant, design, implement (active‐ passive), configure kind of firewalls,

switches, routers and others. I was working as a network supporter in deeds and official estates

registration of Esfahan. I configured Cisco routers 3845 and 2800 series for implementing DMVPN with

IPSec technique and OSPF verson3 as a routing protocol by two WAN links for fully redundancy. I had

duties as supervision and monitor Intranet and Internet via Leased line and fiber optic link. I went on

missions so many times through Esfahan province. I installed Kerio control for sharing and monitoring

Internet. Furthermore, I made some plan for new Data Center. I configured 34 routers and ASA 5540 for

branches. For Center, I asked to manager to buy SSM‐ 40 to install on ASA 5540 for preventing attacks.

Plus, I taught its staffs to better support their networks. Also design, configure kind of cisco, fortigate,

juniper firewalls, Mikrotik, cisco routers and WiFi. I was working as a network supporter in deeds and

official estates registration of Esfahan. Plus, I took part in city hall’s project for designing and configuring

WiFi mesh topology through Esfahan city for more than 120 points, so I made a plan basis on two WLAN

links for each point by Mikrotik SXT and OmniTIK U‐5HnD and Ubnt and also CCR1072 as a strong router

to firewalling and queuing and other issues. Also, for transferring 4 voice lines I configured and supported

two D‐link VOIP gateways. Furthermore, negotiated with 3rd party firms, making proposal. Designing

secure room and other features for Data Centre. Application testing and debugging, analyzing logs and

reports. Plus, my colleagues and I converted physical to VM machines for importing in ESXi 5.5 and we

established province’s network to connect to center with ADSL Intranet for each branch and outdoor

wireless link for center office. I installed TSPlus into Windows 2012 server x64 and Apache.

Network administrator Samen‐ol aemeh Esfahan

Supervising constructors’ duties, making plan for IT staff, managing and monitoring VOIP and call center

basis on Planet productions. It run over E1 ISDN line with 3Mbps throughout Center and Iranian branches

and for foreign offices I had to use CPE device to establish IPSEC tunnel to avoid Iranian Government’s

filter to transact voice over Wan. Coupled with inspecting other branches and troubleshooting

communications throughout Iran and neighboring countries. We configured Planet VOIP devices to have

connection to others branches in Iran. Making plan for new passive infrastructure with the latest passive

standards. For using some legacy applications for other outside’s staff and then I installed Citrix XenAPP

to share application to web style into Windows 2008 server 64 bit and IIS 6.0, but the project was

incomplete because its license in Iran was prohibited.

Network and Hardware supporter Arico (Aeein Rayaneh Esfahan)

Agent and helpdesk in Hardware and supporting department, in Esfahan steel for 3 years, after that time,

I became vice‐president in backbone (Network unit). Configuring and monitoring backbone’s devices with

Solarwinds and Ciscoworks, configuring kind of routers and multilayer switch like 45xx and 65xx, ASA and

FWSM, SSM module and things like that as well as Solaris and Linux and windows OSs were my daily

routine responsibilities. Our Network group included 3 people and I was as an On‐call and Shift-hour

worker. I was present at the site several times in 24 hours. In this group, we designed passive wireless,

fiber or wired. In this project, my group include 3 people installed more than 40 wireless links throughout

Esfahan steel company such as; point to point and point to multi point links either indoor or outdoor.

Network and help desk technician Ghaem Taraz Sepahan

Hardware and software support, repairing and assembling hardware, DB supporter like MS SQL 2000 and

ACCESS XP, implementing electricity emergency system and passive fields in Esfahan steel company

project. Installing and troubleshooting kind of Microsoft Windows Like 98‐Me‐2000‐ XP‐ NT4.1‐ 2000

adv. server. Bus topology was difficult in troubleshooting and expanding. By advent of windows 2000 like

an effective revolution in OS and step by step it was being good alternation instead of Novel Netware. In

ESCO, a few number of people knew about how to support and manage its OS. it was very useful and fast.

Furthermore, working with begging Pentium version had their own problems; weak, slow and difficult to

upgrade. There were no specialist in Foxpro application which caused us to know about foxpro and C.

Network and ISP supporter Parto Khebregan Computer Co.

Adding new accounts, troubleshooting customers’ problems, implement new services, configure firewalls

to avoid attacking, supporting CRM, configuring AS5300 and router with E1, IN modules and Squid on

Fedora linux, establishing WiFi links for customers. This company was the first ISP in our area which it was

leader to represent intelligent Internet over pulse telephone system and after some months the company

upgraded its system to IN technology and tone system. Before changing system to new method I inserted

new account into NTTac Plus and Dialways and other AAA software, some definitions like working hour,

credit, bandwidth, traffic etc. I installed PCI, USB and parallel modem for customers and taught them how

to use and surf the Internet. After revolution in Telecommunication, there were no demand to have

accounts, because users recognized via ID caller by telephone number and as much as they used Internet,

these usages came over telephone bills. We have log server and monitoring to send reports to government

to control users over SSL web page. We sent users’ web access and visit sites. We monitored bandwidth

and SLA with first generated application like MRTG. We got involved countless problem with old

application and cracked ones like, attacking and hack our system and crashed our software and platform

many times. Apart of starting configuring and Cisco devices I assembled cases and established passive

BUS’s and a few locations by Star’s topology. It was the first my experience in active and service provider

works.

Languages

• English: Fluent proficiency

• Persian: Mother tongue

Personal data

Date and place of birth: 10 June 1980 Isfahan, Iran

Family status: Married with 2 sons

Interests: Doing Martial art, football, music, traveling, history and poetry.