Ali Mustafa Hussain

Network & Security Engineer — SD-WAN · FortiGate · Meraki · Cloud

5+ years designing, deploying, and supporting enterprise LAN/WAN, SD-WAN, firewall, wireless, and hybrid-cloud networks — Cisco, Meraki, Velocloud, HPE Aruba, and FortiGate.

5+ yrs
Hands-on enterprise experience
~20%
Network efficiency gain, multi-site upgrades
Meraki + Azure
Latest deployment: vMX HA / BGP
● Online
Open to new opportunities
Device inventory

Core technical skills

5+ years of hands-on work across Cisco, Meraki, Velocloud, HPE Aruba, and FortiGate environments — from firewalls and SD-WAN to wireless, switching, and Azure-hosted hubs.

Firewalls & Security

5 items
Fortinet FortiGate — policies, SSL-VPN, RADIUS, IPS, web filtering
Cisco ISE — 802.1X, MAB, policy sets
Palo Alto — integration
VPN — SSL / IPsec / Auto VPN
Segmentation

SD-WAN

6 items
VMware Velocloud
HPE Aruba SD-WAN
Cisco Meraki Auto VPN / vMX
Edge onboarding — Orchestrator policies
Dynamic path selection — ZTP
Application-aware routing

Routing & Switching

6 items
Cisco Catalyst & Meraki MS — L2/L3
VLANs, STP, stacking, SVIs
OSPF & BGP
HSRP / VRRP
NAT, DHCP, DNS
WAN / LAN design

Wireless & NAC

6 items
Cisco WLC + APs
Meraki MR
SSIDs — FlexConnect vs local mode
Roaming
RADIUS / 802.1X
RF & client troubleshooting

Cisco DNA / Cloud

4 items
Cisco DNA Center (Catalyst Center) — assurance, inventory, templates
Microsoft Azure VNets
Azure Route Server
BGP peering

Operations

6 items
Packet analysis — Wireshark
Firmware upgrades
Change control
SOP documentation
Vendor escalation
Multi-site support
Career path — traceroute

Professional experience

Six hops from accounts payable to multi-site SD-WAN and Azure migrations. Each one is where the route actually went.

6
Network Engineer
Nov 2024 – Jul 2025
Microland Limited → Hyderabad, India
  • Led a Cisco Meraki hub-and-spoke migration, replacing MX450 internet-breakout hubs with dual Meraki vMX appliances hosted in separate Microsoft Azure VNets.
  • Designed and validated the target architecture in a dedicated test Meraki organization (two vMX hubs + spoke MX) before production cutover to reduce migration risk.
  • Implemented high availability for Azure vMX using Azure Route Server and BGP peering between Palo Alto firewalls, Route Server, and the vMX appliances.
  • Built separate wireless templates with distinct RADIUS servers to tighten authentication and user management across sites.
  • Validated post-migration connectivity site by site: ping, traceroute, application access, VPN stability, RADIUS authentication, and DNS using Meraki Dashboard, packet captures, and logs.
  • Operated day-to-day Cisco Catalyst switching, Cisco WLC wireless, Cisco ISE access policies, and Cisco DNA Center (Catalyst Center) assurance/templates alongside the Meraki and Azure environment.
  • Troubleshot outages, misconfigurations, and complex routing issues during cutover with project teams; documented configurations and SOPs for future migrations.
5
Senior Technical Support Engineer
Apr 2024 – Jul 2024
Miles IT → Hyderabad, India
  • Diagnosed and resolved network, hardware, and software incidents for enterprise users, focusing on rapid root-cause isolation and reduced downtime.
  • Handled escalated outages and connectivity issues, communicated fixes clearly to technical and non-technical stakeholders, and contributed to support process improvements.
4
Network Engineer
Jan 2021 – Dec 2023
Rayven IT Solution Pvt. Ltd. → client: Dorel Sports / PonBike, Hyderabad
  • Designed, implemented, and supported multi-site network infrastructure (routers, switches, firewalls, wireless, SD-WAN) and coordinated vendor-led upgrades that improved network efficiency by ~20%.
  • Owned tickets from intake to resolution across security, routing, switching, wireless, VPN, DHCP, DNS, content filtering, and traffic shaping; used Wireshark and vendor dashboards for packet-level diagnosis.
Velocloud & HPE Aruba SD-WAN
  • Deployed and configured Velocloud SD-WAN edges at multiple branch locations and migrated legacy MPLS circuits to Velocloud to improve bandwidth utilization and reduce WAN cost.
  • Supported HPE Aruba SD-WAN deployments in parallel — edge onboarding, path selection, policy consistency, and branch WAN troubleshooting alongside Velocloud sites.
  • Implemented centralized policy management in Velocloud Orchestrator, including dynamic path selection, zero-touch provisioning, and application-aware routing.
  • Used Velocloud analytics, path monitoring, and real-time visibility to troubleshoot performance, protect SLAs, and apply dynamic multi-pathing during WAN outages.
  • Applied segmentation and access-control policies, kept edge firmware current, and trained internal stakeholders on Velocloud operations.
Fortinet FortiGate firewalls
  • Configured FortiGate SSL-VPN for secure remote access with local user authentication and RADIUS integration; used logs and diagnostics to restore user VPN access quickly.
  • Deployed BGP routing in a multi-site FortiGate topology (Shanghai hub with spokes in Shenzhen, Kunshan, and Tianjin) and maintained firmware and security policy compliance.
  • Built LAN services on FortiGate (DHCP/DNS), configured WAN interfaces with ISP addressing, and implemented firewall policies, intrusion prevention, and web filtering.
Cisco Meraki (MX / MS / MR / MV)
  • Deployed and supported Meraki MX security appliances, MS L2/L3 switches (MS250 / MS320 / MS350 including stacks), MR access points, and MV cameras via Meraki Dashboard.
  • Configured OSPF on Meraki Layer-3 switches across multiple locations; designed LAN/WAN/WLAN topologies using VLANs, DHCP, DNS, NAT, VPN, HSRP/VRRP, SNMP, and RADIUS.
  • Troubleshot Meraki Auto VPN and inter-vendor VPNs with Cisco ASA, Palo Alto, and UniFi; wrote SOPs and stayed current on Meraki feature releases.
3
Earlier IT & Network Support Roles
Mar 2017 – Jan 2020
Savantis · Uclid IT · GSS Infotech · IBM India → Hyderabad (incl. Dorel Sports client environments)
  • Junior Network Analyst (Savantis, Jan 2019 – Jan 2020): monitored and troubleshot production networks, assisted with upgrades and equipment installs (routers, switches, firewalls), and resolved end-user connectivity issues.
  • Service Desk / Desktop Support (Uclid IT & GSS Infotech, Oct 2017 – Dec 2019): administered Active Directory users, groups, and OUs; resolved hardware, OS, and infrastructure tickets.
  • IT & Network Support (IBM India, Mar 2017 – Oct 2017): supported US/UK voice-process users on imaging, wired/wireless issues, Outlook/VPN, printers, and ITIL incident handling.
2
Seller Support Associate
Apr 2015 – Oct 2016
Amazon Development Centre (India) Private Limited → Hyderabad, India
  • Handled seller support by email and chat, explaining product and account issues in plain language and keeping cases moving to resolution.
  • Planned daily work and supported team targets, building the customer-facing communication style used later with network users and partners.
1
Junior Accountant
Feb 2011 – Dec 2014
Focus Softnet Pvt. Ltd. → Hyderabad, India
  • Maintained accounts payable and receivable, vouchers, ledgers, journal entries, and bank reconciliation statements.
  • Checked invoices against payments, helped roll out updated accounting procedures, and handled filing, scanning, and data entry.
Root record

Education

Bachelor of Commerce

University of Madras · Chennai, India
Apr 2004 – Jun 2007
Additional strengths

Beyond the CLI

Clear communication with customers, partners & engineering teams Owning migrations end-to-end: design, lab validation, cutover, testing, documentation Mentoring junior team members & standardizing support processes
Establish connection

Let's talk networks.

Open to Network and Security Engineering roles. Reach out directly — no ticket queue required.