KHALIL DAHBOUR

Experienced senior network engineer with 18 years of expertise in network engineering, eager to take on a challenging role in cybersecurity. I seek opportunities to develop my network engineering and design skills further to strengthen network security and infrastructures. Enthusiastic about making valuable contributions to the dynamic and ever-evolving field of cybersecurity

RBC Bank – Toronto, ON – Contract

Technology Infrastructure - Campus and Branch Network Services

Senior Network Engineer                                                          June 2022 - present

• Orchestrated the design of a cutting-edge Cisco wireless network infrastructure, meticulously incorporating access points, controllers, and a robust management system. Ensured the deployment adhered strictly to industry standards and cybersecurity best practices, enhancing the overall security posture of the wireless environment.
• Led a seamless migration initiative, transitioning from Aruba Access Points to Cisco's sophisticated wireless solution. Executed the migration precisely, minimizing downtime and disruptions to critical business operations while incorporating advanced security features to safeguard sensitive data.
• Configured and conducted thorough testing of the Cisco wireless network, optimizing performance, bolstering security protocols, and enhancing overall reliability. Applied expert-level knowledge to create a network environment that meets and exceeds industry standards, safeguarding critical assets against evolving cyber threats.

RBC Bank – Toronto, ON – Contract

Technology Infrastructure - Campus and Branch Network Services

Senior Network Engineer                                                        Sep 2019 - Feb 2022

• Participated as Subject Matter Expert (SME) in Pilot testing and design for high availability branch transformation using Silver-Peak SD-WAN with Multi-home ISP links, QoS, and Cisco StackWise switching. 
• Upgraded existing ASA firewalls to Cisco Firepower Threat Defense (FTD), enhancing network security infrastructure. 
• Served as the escalation point for the technical Operation team, resolving issues in branch and ATM environments related to SD-WAN, DMVPN, EIGRP, BGP, IPsec, and StackWise switching. 
• Redesigned critical bank branches to enhance failover and resiliency with high availability design using VPLS, BGP, and HSRP between Data center and head offices. 
• Played a key role in the configuration and provisioning of Cisco Firepower devices, ensuring seamless integration and optimal functionality of the enhanced firewall system.
• Collaborated with the operation, service delivery, and field technicians to migrate legacy branch design to Silver Peak SD-WAN, managing all change records and tasks in ServiceNow. 
• Created detailed Visio Diagrams for various environments such as Data centers, ATMs, MPLS, VPLS, and non-standard branch designs.

BMO Bank - Scarborough, ON - Contract

Network Engineering – Lab Deployments – Data Center

Senior Network Consultant                                                          Jul 2018 - Sep 2019

• Built, tested, and certified network components in a controlled lab environment, including hardware, software, protocols, and configuration files for Cisco, Checkpoint Firewall, IXIA, and f5 in the Data center.
• Integration of Cisco NEXUS Fabric Extender: Implemented and integrated the Cisco NEXUS fabric extender (2248) into the data center architecture, facilitating enhanced connectivity, scalability, and manageability across the network.
• Ensured efficient and standardized log collection from diverse devices by implementing robust methodologies, contributing to a centralized logging infrastructure. This streamlined log management and enhanced our ability, with Splunk, to proactively detect and respond to security incidents, strengthening our cybersecurity posture.
• Collaborated with Engineering and E&D teams to resolve production issues by replicating them in the lab, offering alternative solutions and recommendations.
• Prepared and published comprehensive test result reports for projects and stakeholders. 
• Ensured network lab management infrastructure adhered to bank standards and regulations.
• Demonstrated expertise in effectively overseeing and maintaining the CISCO NEXUS data center infrastructure, encompassing a range of switches including 9K, 7K, 5K, and 2K series switches.

BMO Bank - Scarborough, ON - Contract

Network Engineering – Data Center

Technical Specialist                                                                 Aug 2017 - Jul 2018

• Actively involved in the planning, designing, and implementing Dot1x port-based authentication, facilitating the migration of all Bank domains from MAB to certificate-based authentication utilizing Aruba ClearPass CPPM as the network access Control NAC solution. 
• Led dot1x port-based authentication testing, verification, and post-validation across DEV environment, Pre-Production, and Production deployments. 
• Configured multiple models of Cisco switches for dot1x port-based authentication, ensuring IOS command compatibility, features, and timers were optimized to enhance performance and high availability on end-users’ systems. 
• Collaborated with the Active Directory team to maintain a standard Dot1x GPO, fine-tuning Windows timers and conducting multiple tests and scenarios to confirm smooth operation and authentication behaviors.

RBC Royal Bank - Toronto ON

End User Services | Global Network Services 

Senior network Analyst                                                        March 2015 - Aug 2017

• Designed, implemented, configured, and managed enterprise and guest wireless networks using Aruba Networks solutions like WMC, CPPM, Airwave, and instant access points. 
• Conducted predictive and active wireless designs/site surveys with Ekahau Site Survey software, ensuring proper wireless coverage and meeting agile requirements. 
• Collaborated with the Engineering team to create and test QoS templates for various Cisco models and platforms, enabling automation and scripting. 
• Revised the current Cisco DMVPN design for branches, providing a Proof of Concept (POC) for backup links VPN to Datacenters, incorporating Phase 3 DMVPN with Intrusion Prevention System (IPS). 
• Conducted monthly lunch and learn sessions, educating team members on various Cisco technologies such as VPLS, DMVPN, IPsec, MPLS, and routing enhancements with BGP, EIGRP, and OSPF between data centers and branches. 
• Worked with the Architect and Cisco engineering team to enable 802.1X port-Based Authentication using Aruba CPPM in the pre-production environment, conducting pilot tests before production deployments. 
• Designed and configured Silver Peak SD-WAN solutions to optimize business applications over WAN, ensuring efficient traffic shaping control between Datacenters. 
• Actively contributed to the wireless LAN engineering team, managing enterprise and guest wireless networks' design, implementation, configuration, and maintenance. Conducted testing of code updates and patches in the Lab environment for Aruba wireless systems (WMC, iAP, and CPPM) and successfully transitioned them to production. Compiled detailed documentation and Visio Diagrams for network appliances, Infoblox DHCP/DNS, VLANs, subnets, and server systems, ensuring highly detailed Global DMZ infrastructure designs.

RBC Royal Bank - Toronto ON – Contract

Service Transition | Global Network Services 

Network Performance Engineer                                             Nov 2014 - March 2015

• Served as the primary point of contact for network escalation during the Windows 7 migration, determining network resources and capacity while evaluating the deployments of PSIS and VSIS. 
• Conducted rigorous testing and evaluation of the Windows 7 migration process in a pre-production environment, analyzing traffic patterns and Data Center WAN links' impact using Wireshark and Observer. Ensured risk elimination to bank production during live migration. 
• Analyzed diverse Video on Demand formats and codecs in a lab environment, utilizing Packet sniffing tools to generate benchmarking for video streaming quality and network utilization. Verified QoS policies and classes to manage excessive streaming traffic effectively.
• Collaborated with migration, engineering, real-estate, and CIM teams to install, configure, and deploy temporary staging depots across Canada, expediting migration processes and meeting deadlines. 
• Compiled and maintained project trackers to ensure precise and timely delivery of key milestones, keeping various groups updated on the project's status during different stages via the tracker.

 HP enterprise services – Markham ON – Contract

Data Center Transformation and consolidation

Network Engineer                                                                     Aug 2014 - Oct 2014

• Managed Data Center Migration and Consolidation for L2 & L3 Network devices, overseeing the seamless transition from the old to the new DC with updated technology, services, and hardware across HP\H3C\Cisco environments. 
• Led project management for Data Center LAN initiatives, encompassing upgrades, redesigns, implementations, consolidations, and segment analysis to relocate all existing LAN devices to the New Data Center. 
• Acted as a liaison with other Global Infrastructure Strategy Teams, coordinating the installation and migration of new network equipment and servers. Developed a Global Kit to determine Grid Location, cooling, capacity, and power consumptions for new hardware installations. 
• Configured and provisioned new HP\H3C network routers and switches, employing IRF (Intelligent Resilient Framework) technology for seamless control over multiple active switches, akin to VSS in the Cisco world. 
• Conducted thorough validation and testing of the L2 VLAN extension link, such as Dark Fiber (DWDM), before physical moves to the new DC, ensuring redundancy for customer environments before final migration.
• Produced comprehensive design documentation, including network diagrams and explanations, using Visio and PowerPoint for all projects, ensuring clear communication and reference materials for stakeholders.

TeraGo Networks, Thornhill ON                                                                   

Network Engineer Level 3                                                        July 2009 - June 2014

• Acted as a trusted subject matter expert for Cisco Routing and switching protocols, offering valuable insights, addressing issues, and providing recommendations. 
• Led the design of LAN, WAN, access, and backbone network technologies and products, including Cisco Catalyst 6500, 4500 series, ISR and ASR routers, 7600 and XR series routers, and 3550, 3560, 3750, 4500, 2960 switches. 
• Played a key role in project teams, contributing as a technical expert to research, select, evaluate, and implement new/upgraded network infrastructure solutions and services. 
• • Designed and implemented Multi-homing BGP solutions with major stream providers ISPs such as Bell, SHAW, and Cogent, ensuring enhanced redundancy and network performance. 
• Monitored clients' network traffic activities using sniffers to analyze packet headers and protocols, providing valuable statistics and solutions to improve network performance and mitigate security threats. 
• Managed Checkpoint Firewall policy rules using Gaia, set up NATS and static routes for new clients, and performed firewall audits in collaboration with the server team. 
• Defined short and long-term infrastructure requirements, growth plans, and hardware end-of-life strategies, ensuring scalability and efficient resource utilization.
• Designed, implemented, and tuned OSPF redundant services for enterprise solutions, achieving high availability and scalability for critical systems. 
• Served as an escalation engineer for service incidents, customer concerns, and chronic issues, driving customer satisfaction by effectively resolving issues and meeting customer expectations.
• Assumed ownership of all severity incidents, initiating notification processes to restore normal operations with minimal disruption to client businesses and driving incidents to resolution or acceptable workarounds. • Developed configuration and installation templates, troubleshooting guides, and instructional documentation for various network technologies, contributing to a centralized knowledge base in the company wiki. 
• Created and revised Layer 2 and 3 Backbone designs, End-to-End client charts, and access layer topologies using Microsoft Visio. 
• Provided technical training, coaching, and mentoring for 1st and 2nd-level support technicians, creating real-world lab scenarios using physical and virtual servers to enhance practical experience. 
• Adhered to ITIL standards, providing incident and problem resolution support, and assisting L1\L2 operation teams with wired and wireless connectivity issues.

TeraGo Networks, Thornhill ON                                                                   

Network Operation Engineer Level 2                                       Aug 2008 - July 2009

• Provided technical support to over 6,000+ customers across 19 markets within a national NOC (Network Operations Centre) environment. 
• Demonstrated a proactive approach to problem-solving and technical knowledge by investing personal time to understand existing access and backbone technologies, resulting in a 30-40% reduction in escalations.
• Led testing efforts, analyzing, and troubleshooting incoming incidents, and promptly documenting resolutions or next steps within the Microsoft NAV ticketing system before assigning tickets to NOC technicians for customer follow-up. 
• Proactively monitored Cisco network performance, security, and capacity using packet analyzers and sniffers, ensuring high availability and reliability, and offering valuable improvement recommendations. 
• Played a key role in RF Channel Changes and monitoring interference in different sectors of all markets, both in licensed and non-licensed bands. • Provided expert support and resolution for clients' diverse issues related to DNS, Email, and Web Hosting support. 
• Proficiently provisioned, monitored, and troubleshoot fixed wireless access and 802.16/Pre-WiMAX based broadband wireless backbone PTP and PTMP access Microwave radios. 
• Successfully configured and supported Adtran, ISDN PRI, and SIP Trunk to ITSP (Thinktel) while implementing Traffic classification, marking, rate shaping, and QoS strategies for optimal performance.

Sutherland Global Services, Windsor ON

System Network Engineer                                                       Aug 2006 – July 2008                                         

• Provided network-related support and served as 2nd Level Desktop Support for 750 Users, addressing technical issues and ensuring smooth operations. • Proficiently configured and administered Cisco 4500\6500\3700\7200 series switches and routers, including Switch stacking and performing IOS Upgrades to maintain optimal performance. • Administered MS Active Directory, Group Policies, User accounts, and MS Exchange, ensuring smooth user management and efficient email communication. 
• Implemented security measures and anti-virus software updates and patches, using disk imaging software like Symantec Ghost and Ximage for system maintenance and security. 
• Expertly managed Cisco firewalls from ASDM, applying new rules and policies to meet the specific requirements of different Client programs. 
• Conducted IOS upgrades and password recovery for multi-cisco platforms to ensure the latest software versions and secure access. 
• Collaborated in planning and assisting in designing and implementing networking infrastructures, including cabling, terminations, and patch panels for data, voice, and video communications. 
• Provided support for various Nortel/Avaya phones and call recording solutions and skillfully set up workstations with Desktops and IP Phones to enhance communication capabilities.
• Responded promptly to Service and Trouble tickets, ensuring adherence to SLA (Service Level Agreement) and maintaining high system uptime for seamless operations.

• Master’s degree in cybersecurity – Northeastern University                2023, Toronto Campus, ON
• Implementing and Operating Cisco Security Core Technologies          2020 – Toronto, ON
• Silver Peak SDWAN Professional (SPSP)                                        2016 – Toronto, ON
• Silver Peak Optimization Expert (SPOX)                                           2016 – Toronto, ON
• CCIE RS #37290 (Cisco Certified Internet Expert)                             2012 - RTP, NC
• SSCA (SIP School Certified Associate)                                            2012 - Thornhill, ON
• CCIP (Cisco Certified Internetwork Professional)                              2011 - Markham, ON
• CCDP (Cisco Certified Design Professional)                                     2010 - Markham, ON
• CCNP (Cisco Certified Network Professional)                                   2009 - Toronto, ON
• CCNA (Cisco Certified Network Association)                                     2008 - Windsor, ON
• ITIL Foundation (Information technology infrastructure Library)          2008 - Rochester, NY
• Visual Basic .Net, Linux, HTML, C++                                                2006 - Windsor, ON
• JavaScript, ASP.NET, Bash, Perl, Expect                                         2005 - Windsor, ON
• B.Eng. Electrical and Electronic – Aden Univ.                                   1993 - Yemen