Professional Experience

NOC Operations Trainee / Network Intern

Completed rigorous full-time immersion into ISP network operations, physical datacenter infrastructure, optical fiber distribution hubs, and Layer 1/2 troubleshooting methodologies.

• Datacenter & Rack Operations: Assisted senior engineers with server rack installations, cable management, patch panel punch-downs, and optical fiber splice closures.
• Foundational Networking: Assisted in configuring basic VLANs, switchport security, and initial router hardening on Cisco IOS and MikroTik platforms.
• Optical Testing: Operated Visual Fault Locators (VFL) and Optical Power Meters (OPM) to verify insertion loss across fiber jumpers and patch cords.

Hardware Support & Site Telemetry Management

Managed hardware health monitoring, firmware compliance, device unbinding requests, and technical support troubleshooting cases for enterprise surveillance and networking devices across customer installations.

Authoritative Anycast DNS Operations

Configured and maintained authoritative DNS records, automated health checks, TTL tuning, and edge routing for personal and professional infrastructure under gautambhuwan.com.np.

NOC Support Engineer / Level 1 Operations

Provided 24/7 network monitoring, incident response, and broadband service provisioning. Diagnosed subscriber connectivity, link latency anomalies, and performed first-touch resolution for field outages.

• Real-time Monitoring: Supervised statewide core/distribution link health, optical power margins, and backbone utilization across PRTG, LibreNMS, and Cacti.
• Broadband Provisioning: Configured customer ONU/ONT terminals, managed PPPoE authentication databases, static IP allocations, and customer VLAN boundaries.
• Triage & Diagnostics: Conducted packet-level trace analysis (Wireshark, MTR, ping/traceroute) to isolate packet drop causes, upstream peering bottlenecks, and localized fiber outages.

Senior NOC Engineer / L2 & L3 Operations Lead

Specialized in internal networking, metro switching fabrics, and carrier-grade optical distribution infrastructure. Handled second-level network escalations, core switch provisioning, and optical link budget calculations.

• GPON/EPON OLT Deployment: Commissioned and maintained Huawei SmartAX (MA5608T), ZTE (C320), and VSOL OLT chassis. Configured Type 1–5 DBA bandwidth profiles, mapped T-CONTs to GEM ports, and implemented QinQ (802.1ad) VLAN tagging per customer service class.
• Switching Fabric & Ring Protection: Configured Cisco Catalyst (3850/9300) and Juniper EX switches with Multiple Spanning Tree (MSTP 802.1s), multi-port LACP EtherChannels, DHCP Snooping, Option 82 circuit insertion, and Dynamic ARP Inspection (DAI).
• Fiber Network Diagnostics: Diagnosed critical fiber cuts, excessive attenuation, and macro-bends using Optical Time-Domain Reflectometers (OTDR) and optical power meters, restoring subscriber link margins within SLA.
• Bandwidth Management: Implemented Per-Connection Queue (PCQ) traffic shaping on MikroTik Cloud Core Routers (CCR) and subscriber PPPoE server terminations.

NOC Administrator & Core Network Specialist

Promoted to oversee core ISP infrastructure, internal networking backbones, and multi-homed BGP routing. Direct 24/7 NOC engineering team, manage upstream Tier-1 transits and local Internet Exchange Point (NPIX) peering, and orchestrate high-availability failover architectures.

• Core BGP & Internal OSPF: Maintained eBGP multihomed peering with upstream transit providers and local IXPs, enforcing routing policy filters, community tagging for traffic engineering, and stable internal OSPF Area 0 backbones across aggregation rings.
• Carrier-Grade NAT (CGNAT): Designed and managed deterministic CGNAT clusters (RFC 6598 100.64.0.0/10) serving high-volume broadband subscribers, allocating predictable 2,000-port blocks per client for regulatory traceability while mitigating IPv4 exhaustion.
• Perimeter Firewalls: Administered Fortinet FortiGate and pfSense High-Availability (CARP) firewall clusters, hardware-accelerated IPsec IKEv2 site-to-site tunnels, and anti-DDoS rate-limiting policies.
• Telemetry & Observability: Deployed and fine-tuned Zabbix, LibreNMS, and Grafana telemetry dashboards with automated SNMPv2c/v3 traps, NetFlow/sFlow collectors, and Telegram/SMS NOC alert integrations.

Enterprise Internal Network & SD-WAN Specialist

Architect, deploy, and maintain high-security internal networks for educational institutions (schools & colleges), corporate business houses, metropolitan city administrative offices, and local municipalities. Specialize in multi-site SD-WAN interconnects and zero-trust internal network separation & isolation.

• Schools & College Campus LAN: Designed high-density campus distribution fabrics with segmented VLANs for administrative offices, faculty lounges, computer laboratories, and student guest Wi-Fi. Implemented Private VLANs (PVLANs) on Cisco Catalyst and Juniper EX switches to eliminate lateral malware spread between lab computers.
• Corporate Business Houses: Engineered resilient multi-floor enterprise LANs featuring LACP link aggregation, HSRP/VRRP gateway failover, 802.1X Network Access Control (NAC) via RADIUS, and dynamic department quarantine policies.
• Metropolitan & Municipal Government Infrastructure: Implemented secure SD-WAN mesh and IPsec IKEv2 site-to-site VPN tunnels connecting central municipality headquarters with distributed ward offices. Configured VRF-Lite to isolate citizen records and e-Governance systems from public internet access.
• SD-WAN & Zero-Trust Isolation: Deployed Fortinet Secure SD-WAN and MikroTik overlay gateways with real-time SLA probing, jitter/loss dynamic link steering, and zone-based firewall rules ensuring strict segregation between internal accounting, VoIP, and IoT/CCTV networks.