CURRICULUM VITAE

Bhuwan Gautam

NETWORK & SYSTEMS ENGINEER // (VHUWON MATHERS • @sudovu) // GAUTAMBHUWAN.COM.NP

Professional Profile

Bhuwan Gautam (also known as Vhuwon Mathers / @sudovu) is an accomplished Network & Systems Engineer with 5+ years of progressive hands-on experience in Internet Service Provider (ISP) network infrastructure (advancing from NOC Trainee to NOC Administrator) alongside deep expertise in internal enterprise networks, multi-site SD-WAN, and zero-trust campus separation & isolation for schools, colleges, corporate business houses, metropolitan city offices, and local municipalities. Specializes in carrier GPON/EPON OLT deployments, enterprise switching fabrics (Cisco Catalyst, Juniper EX), multi-branch SD-WAN (Fortinet Secure SD-WAN, IPsec overlay), VRF-Lite micro-segmentation, Private VLANs, core BGP peering & internal OSPF multi-area routing, Carrier-Grade NAT (CGNAT RFC 6598), and next-generation perimeter firewalls (FortiGate, pfSense HA).

Technical Competencies

Enterprise LAN, SD-WAN & Network Isolation:

Fortinet Secure SD-WAN, Cisco Meraki / Viptela, MikroTik IPsec overlay, dynamic SLA path steering, VRF-Lite, 802.1Q micro-segmentation, Private VLANs (PVLANs), 802.1X NAC, RADIUS, isolated Guest Wi-Fi captive portals, and CCTV/IoT physical containment.

Campus & Public Sector Deployments:

Specialized architectures for Educational Institutions (Schools & Colleges), Corporate Business Houses, Metropolitan City Administrations, and Local Municipalities (e-Governance data centers and ward interconnects).

ISP & Optical Access (FTTH):

Huawei SmartAX (MA5608T), ZTE (C320), VSOL GPON/EPON OLTs, ONT/ONU provisioning, DBA profiles (Type 1–5), T-CONTs, GEM ports, QinQ (802.1ad) VLAN tagging, OTDR fiber testing, PPPoE / BRAS.

Core Routing & Switching:

Cisco IOS-XE (Catalyst 3850/9300, ASR), Juniper Junos (MX204, SRX345, EX3400/4300), MikroTik RouterOS (CCR), BGP (eBGP/iBGP, Communities, NPIX Peering), OSPFv2/v3, MSTP (802.1s), LACP (802.3ad).

Perimeter Security & CGNAT:

Fortinet FortiGate, pfSense Plus HA (CARP), Carrier-Grade NAT (CGNAT RFC 6598 100.64.0.0/10), IPsec IKEv2 Site-to-Site VPNs, Zone-Based Firewalls, DHCP Snooping, Dynamic ARP Inspection (DAI), Storm Control.

NMS Telemetry & Automation:

Zabbix, LibreNMS, Grafana, PRTG, SNMPv2c/v3, NetFlow/sFlow, Wireshark, Linux (Ubuntu/Debian), Nginx reverse proxy, Docker, Anycast DNS, Python (Netmiko), Bash scripting.

Professional Experience & Career Progression (Foundational to Enterprise Architecture)

NOC Operations Trainee / Network Intern

Internet Service Provider (ISP) // NOC Operations

Assisted in datacenter rack integration, structured cabling, optical distribution frame (ODF) patching, and equipment mounting.
Supported configuration of basic access VLANs, switchport security, and router management access on Cisco and MikroTik hardware.
Measured optical power loss using Optical Power Meters (OPM) and Visual Fault Locators (VFL).

Hardware Telemetry & Device Support

Hik-Partner Pro Platform Management

Managed hardware health monitoring, firmware compliance, and support ticketing across enterprise surveillance and networking deployments.

NOC Support Engineer / Level 1 Operations

Internet Service Provider (ISP) // NOC Operations

Executed 24/7 network monitoring of core links, optical attenuation margins, and customer latency across LibreNMS and PRTG.
Provisioned subscriber ONT/ONU units, managed PPPoE authentication credentials, dynamic/static IP allocations, and customer VLAN routing.
Analyzed Wireshark packet captures and MTR traces to isolate packet drops, BGP routing anomalies, and optical link degradation.

Senior NOC Engineer / L2 & L3 Operations Lead

Internet Service Provider (ISP) // NOC Operations

Commissioned and provisioned Huawei SmartAX MA5608T, ZTE C320, and VSOL GPON/EPON OLTs with Type 1–5 DBA profiles and QinQ (802.1ad) service tagging.
Engineered metro switching rings on Cisco Catalyst (3850/9300) and Juniper EX with MSTP (802.1s), LACP port-channels, DHCP Snooping, and Option 82.
Conducted advanced fiber fault isolation using Optical Time-Domain Reflectometers (OTDR), pin-pointing physical fiber cuts and high-loss splices.
Configured MikroTik CCR bandwidth shaping with Per-Connection Queue (PCQ) algorithms and PPPoE subscriber termination.

NOC Administrator & Core Network Specialist

Internet Service Provider (ISP) // NOC Operations

Oversee core ISP routing: multi-homed eBGP with Tier-1 upstreams and local Internet Exchange (NPIX), routing policies, and internal OSPF Area 0 backbones.
Manage Carrier-Grade NAT (CGNAT RFC 6598 100.64.0.0/10) deterministic translation pools with 2,000-port blocks per subscriber for regulatory compliance.
Administer Fortinet FortiGate and pfSense High-Availability (CARP) clusters, hardware IPsec IKEv2 site-to-site VPNs, and anti-DDoS scrubbing filters.
Lead 24/7 NOC operations, managing telemetry via Zabbix, LibreNMS, and Grafana with automated incident escalation workflows.

Enterprise Internal Network & SD-WAN Specialist

Corporate Houses, Schools/Colleges, Metropolitan & Municipal Bodies

Designed and implemented enterprise-wide network segmentation for corporate business houses, schools, and colleges, separating administration, computer laboratories, faculty, and student guest Wi-Fi using Private VLANs (PVLANs) and 802.1X NAC.
Engineered metropolitan and municipal government e-Governance networks, connecting central city offices with distributed ward locations using Fortinet Secure SD-WAN and IPsec IKEv2 tunnels with automatic SLA failover.
Configured VRF-Lite across Cisco Catalyst and Juniper EX switches to enforce non-routable traffic isolation for citizen databases, financial ERPs, and municipal management systems.
Quarantined hundreds of IP CCTV cameras and biometric terminals into dedicated security enclaves with stateful inter-VLAN inspection firewalls.