Veniamin Beskrovny

Consultant via IBM for Finanz Informatik (Sparkassen-Finanzgruppe). • 2nd/3rd level operations of the nationwide secure data center network in a regulated banking environment (ServiceNow) • Network as Code: Ansible and Python playbooks • Cisco Nexus (NX-OS), FEX, Catalyst, NDFC • Compliance-driven changes incl. firewall rules • Lifecycle management, network documentation, maintenance windows Technologies: Cisco Nexus, NDFC, Ansible, Python, ServiceNow, Data Center Networking, Firewalls

Deutsche Telekom / T-Systems – Toll Collect (Germany's nationwide toll system). • Design and operation of carrier-grade and enterprise networks; 2nd/3rd level escalations • Two data center migrations, HW/SW upgrades, IPv6 migration • Network automation and monitoring; hybrid cloud (Azure, AWS) • SIEM-based security monitoring per ISO 27001; PoCs Technologies: BGP, OSPF, MPLS, VPN, IPv6, Python, Ansible, REST APIs, Grafana, Prometheus, SIEM, ISO 27001

• Zero-Trust architecture, network segmentation, security zones and hardening • MFA introduction, IDS/IPS tuning, security monitoring (SIEM) • DNS, DHCP and IPAM operations • Secure connectivity for microservices on-prem and in AWS/Azure; site-to-site and remote-access VPN • Network security per ISO/IEC 27001: risk analyses, ISMS compliance, audits • ITSM change management, monitoring and alerting Technologies: Zero Trust, MFA, IDS/IPS, Firewalls, SIEM, DNS/DHCP/IPAM, IPsec VPN, AWS, Azure, ISO 27001

• Nationwide WLAN planning and rollout incl. capacity planning and radio field analysis • Global data center interconnection Germany–USA; redundant WAN and DC connectivity • Private cloud interconnect to AWS and Google Cloud; hybrid cloud architectures • DNS/DHCP migration to IPAM platforms (BlueCat, Infoblox) • IPSec dial-in, IPv6 introduction, SIEM per ISO 27001 Technologies: WLAN, WAN, AWS, GCP, Hybrid Cloud, BlueCat, Infoblox, DNS/DHCP/IPAM, IPSec, IPv6, SIEM

• Network integration of two acquired companies in the USA and Canada within two months • SDN architecture for centralized control, segmentation and automation • Redesign of the central hub data center (core/aggregation), HA and failover • VLANs, DMZs and IPSec VPNs per ISO 27001 Annex A • Migration from Check Point to FortiGate firewalls • ITIL incident, problem and change management Technologies: MPLS, SDN, BGP, OSPF, VLAN, DMZ, IPSec VPN, FortiGate, Check Point, ISO 27001, ITIL, ServiceNow

• Responsible for the EU-wide network incl. central data center and production sites • Coordination of interdisciplinary teams; documentation and runbooks • ISO 27001 audit support, IPv6 migration, migration from MPLS to SD-WAN • Integration of the acquired site Utzenfeld (DE): network redesign and hardware rollout • New redundant network architecture for two plants in Forlì and Ferrara (IT) Technologies: Data Center Networking, VLAN, MPLS, SD-WAN, IPv6, HA/Failover, Zscaler, Palo Alto, ISO 27001

• Design and implementation of enterprise and service provider network solutions; PoCs • Vodafone (Frankfurt): data center network redesign incl. DC interconnection and redundancy concepts • Deutsche Telekom / T-Systems: RADIUS-based access and accounting architecture • Media Broadcast: MPLS/VPN/VXLAN network design and PoC tests Technologies: MPLS, BGP, OSPF, VLAN, VPN, VXLAN, RADIUS, AAA, DC Interconnection, High Availability

• Hardware refresh and migration project to modernize the network infrastructure • Replacement and standardization on Juniper technologies; migration strategy • MPLS configuration and management on Cisco hardware • Stepwise migration of production segments with minimal downtime • Testing, troubleshooting and handover to operations Technologies: Juniper, Cisco, MPLS, BGP, OSPF, VLAN, TCP/IP

• Technical responsibility for enterprise and financial clients incl. UBS, Credit Suisse, MediaMarkt, HP and Volvo Trucks • Design and implementation of secure enterprise network architectures • 2nd/3rd level support for network and security infrastructures • Routing, switching, VPN and firewall deployments • Documentation and client advisory on network and security optimization Technologies: BGP, OSPF, MPLS, VLAN, TCP/IP, Firewalls, VPN