AK Kowsari Network • Security

Network • Data Center • Cyber Security • Automation

Amir Kowsari

Senior Network & Data Center Engineer
Cyber Security Specialist

Designing, migrating, securing, and operating data center networks with automation-minded engineering.

Contact me Request full resume

At a glance

Practical network, data center, and cyber security engineering with systems and automation depth.

I am a hands-on senior network and data center engineer and cyber security specialist with experience across enterprise networks, data center infrastructure, cloud connectivity, Linux systems, firewalls, load balancers, wireless, hosting platforms, and network automation. My background includes ISP, hosting, managed services, SaaS, cloud, security, and large-scale data center environments.

I enjoy solving complex routing, migration, security, and operational problems. I value clear documentation, careful change planning, and automation that makes networks easier to operate, audit, and scale.

Skills

Network, data center, cyber security, cloud, systems, and automation toolkit.

A more visible public overview of my main technologies and operating areas.

Cyber Security Cisco ACI NX-OS Cumulus Linux SONiC BGP VXLAN Palo Alto Cisco ISE Python NetBox Azure

Data Center & Fabric

Cisco ACI Cisco Nexus / NX-OS Cumulus Linux SONiC Arista switching Aruba switching Spine-leaf design L3 fabrics Rack onboarding Switch lifecycle Code upgrades Fabric deployment

Routing & Transport

BGP OSPF EIGRP RIPv2 VXLAN MPLS IPsec IKEv1 / IKEv2 GRE QoS Route maps NAT / ACLs

Cyber Security & Network Security

Cyber Security Network security analysis Palo Alto Networks Cisco ASA Cisco Firepower / FTD Cisco ISE GlobalProtect Site-to-site VPN Remote access VPN Security zones DMZ migration Firewall policy review Firewall log analysis DDoS mitigation support Netskope exposure

Cloud & Systems

Azure networking AWS exposure OpenStack exposure Linux / CentOS CloudLinux Windows Server / AD VMware Xen KVM Docker cPanel / WHM BIND / DNS

Automation & Development

Python Ansible NetBox API services Log parsing Reporting scripts JavaScript PHP Laravel MySQL MariaDB Operational tooling

Observability & Operations

PRTG Cacti WhatsUp Gold ManageEngine NCM SNMP NetFlow Firewall logs Change control ITIL process ServiceNow Cherwell Network diagrams

Wireless & Access

Cisco WLC 5508 Cisco WLC 9800 Aruba wireless Wireless redesign Access point migration Access switching Switch stacks Port channels VLAN planning 802.1X / ISE Campus troubleshooting Branch rollout

Load Balancing & Hosting

F5 load balancers A10 load balancers A10 vThunder Nginx Apache Squid proxy VIP migration Reverse proxy Web hosting Backup monitoring Server provisioning Container support

Professional experience

Experience summary

Employer names, client names, exact dates, and production identifiers are intentionally omitted from this public website. A detailed resume is available upon request.

01

Data Center Fabric & Switch Operations

Hands-on production support for modern data center fabrics and high-availability switching environments.

  • Deploy and maintain fabric environments across Cisco ACI, NX-OS backbone infrastructure, Cumulus Linux, and SONiC switches.
  • Support switch lifecycle operations, code upgrades, rack onboarding, port planning, and production change execution.
  • Use Python and NetBox to improve network automation, inventory accuracy, and operational consistency.
02

Routing, VXLAN & Backbone Engineering

Design and troubleshoot routing-heavy enterprise and data center networks with clean documentation and careful change execution.

  • Build and maintain BGP, OSPF, EIGRP, MPLS, VXLAN, VPN, and high-availability routing environments.
  • Redesign VXLAN and BGP paths to correct asymmetrical routing and improve traffic flow.
  • Validate route advertisements, filters, diagrams, and data center / branch connectivity before and after changes.
03

Cyber Security, Firewall & Secure Connectivity

Modernize edge and internal security platforms while preserving production availability and improving operational visibility.

  • Convert legacy firewall policies, DMZ designs, and VPN gateways into Palo Alto security zones and policies.
  • Support GlobalProtect, site-to-site VPN, IKEv1-to-IKEv2 migrations, NAT, ACL, and secure branch connectivity.
  • Perform firewall code upgrades, policy reviews, DDoS mitigation support, and log-based security troubleshooting.
04

Cloud Networking, Systems & Automation

Bridge network, systems, cloud, and security teams to deliver integrated infrastructure solutions.

  • Design Azure gateway connectivity, IPsec tunnels, cloud firewall placement, and BGP route filtering.
  • Support Linux, web, virtualization, containers, monitoring, load balancers, and network services.
  • Create scripts and repeatable workflows for log review, reporting, provisioning, and operational tasks.
05

Wireless, Access & Branch Networks

Support campus and branch connectivity from access switching through wireless controllers and secure authentication.

  • Configure access switch stacks, VLANs, port channels, uplinks, and branch router/firewall connectivity.
  • Support Cisco and Aruba wireless environments, controller upgrades, AP migrations, and coverage-driven redesigns.
  • Work with authentication and access-control platforms to keep switching, wireless, and user access stable.
06

Observability, Documentation & Operations

Improve day-to-day network visibility, change safety, and operational readiness across complex environments.

  • Maintain topology diagrams, routing records, implementation plans, and validation notes for production changes.
  • Use monitoring, NetFlow, SNMP, firewall logs, and backup/config tooling to troubleshoot and protect services.
  • Operate within structured change processes while communicating clearly across network, systems, security, and support teams.

Project highlights

Selected infrastructure work

01

Fabric Operations

Production work with Cisco ACI, NX-OS, Cumulus Linux, SONiC, switch lifecycle management, fabric deployment, and network automation.

02

VXLAN + BGP Redesign

Resolved asymmetrical routing in a VXLAN environment by redesigning traffic paths and integrating BGP for cleaner route control.

03

Data Center Migration

Designed temporary network connectivity between data center environments so server and storage clusters could migrate with minimal interruption.

04

Firewall & Security Modernization

Converted complex firewall rules, VPNs, DMZs, and security zones into modern Palo Alto designs with production change control.

Education & certifications

Formal training with continuous hands-on learning.

Contact

Let’s talk about networking, data center infrastructure, cyber security, or your next role.

Use the form below to send a message or request a full resume. Submissions are saved in the site database, and an optional private email notification can be enabled from the server configuration.